Optimizing private virtual local area networks (VLANs)
AssigneeJuniper Networks, Inc.
InventorsSunanda Kommula, Rudramahesh Rugge, Pranay Pogde
Life of this patent
Estimating the term…
Abstract
A network device is provided in a private virtual local area network (VLAN). The network device receives a packet on one of multiple private VLAN ports of the network device, and assigns a classified VLAN signature to the packet. The network device also assigns a primary VLAN signature to the packet, and stores a media access control (MAC) address and the classified VLAN signature of the packet in a single MAC address table.
Claims20
A method comprising:
- receiving, by a network device in a private virtual local area network (VLAN), a first packet on a particular port of a plurality of private VLAN ports of the network device;
- assigning, by the network device, a classified VLAN signature to the first packet,
- the classified VLAN signature assigned to the first packet including information identifying a classified VLAN associated with the particular port;
- assigning, by the network device, a primary VLAN signature to the first packet,
- the primary VLAN signature assigned to the first packet including information identifying a primary VLAN of the private VLAN, and
- the classified VLAN being the primary VLAN or a secondary VLAN;
- storing, by the network device and in a single media access control (MAC) address table, a MAC address of the first packet and the classified VLAN signature assigned to the first packet;
- receiving, by the network device, a second packet;
- determining, by the network device, whether a MAC address of the second packet matches a MAC address entry in the MAC address table;
- and
- flooding, by the network device, the second packet when the MAC address of the second packet does not match the MAC address entry in the MAC address table.
A network device provided in a private virtual local area network (VLAN), the network device comprising:
- a memory to store a plurality of instructions;
- and
- a processor to execute the plurality of instructions in the memory to:
- receive a first packet on a particular port of a plurality of private VLAN ports of the network device,
- assign a classified VLAN signature to the first packet,
- the classified VLAN signature assigned to the first packet including information identifying a classified VLAN associated with the particular port,
- assign a primary VLAN signature to the first packet,
- the primary VLAN signature assigned to the first packet including information identifying a primary VLAN of the private VLAN, and
- the classified VLAN being the primary VLAN or a secondary VLAN,
- store, in a single media access control (MAC) address table, a MAC address of the first packet and the classified VLAN signature assigned to the first packet,
- the MAC address of the first packet including a destination MAC address of the first packet,
- receive a second packet,
- determine whether a signature of a MAC address entry, in the MAC address table, matches a classified VLAN signature assigned to the second packet, and
- forward, based on the MAC address entry, the second packet toward a destination when the signature of the MAC address entry matches the classified VLAN signature assigned to the second packet.
A non-transitory computer-readable media storing instructions, the instructions comprising:
- one or more instructions that, when executed by at least one processor of a network device, cause the at least one processor to:
- receive a first packet on a particular port of a plurality of private virtual local area network (VLAN) ports of the network device;
- assign a classified VLAN signature to the first packet,
- the classified VLAN signature assigned to the first packet including information identifying a classified VLAN associated with the particular port;
- assign a primary VLAN signature to the first packet,
- the primary VLAN signature assigned to the first packet including information identifying a primary VLAN associated with the network device, and
- the classified VLAN being the primary VLAN or a secondary VLAN;
- store, in a single media access control (MAC) address table, a MAC address of the first packet and the classified VLAN signature assigned to the first packet;
- receive a second packet;
- determine whether a MAC address of the second packet matches a MAC address entry in the MAC address table;
- and
- forward the second packet to a classified VLAN when the MAC address of the second packet does not match the MAC address entry in the MAC address table.
Dependencies are inferred from the claim text.