US 9,853,896 B2 · Method, device, and virtual private network system for advertising routing information

Abstract

The present invention discloses a method for advertising routing information, and embodiments of the present invention further provide a virtual private network server device, an IP edge node device, and a client-based virtual private network system. In the technical solutions of the present invention, a virtual private network server first collects MAC address routing information of each site on a local virtual private network and then sends MAC address routing information of each site except a destination site in a unicast manner to a customer edge node that corresponds to each site on the virtual private network. This solves the problem that CE nodes in sites on the virtual private network cannot exchange routing information with each other by using a routing protocol because multicast packets are filtered by an access node of the data center network.

Drawings

Drawings are temporarily unavailable. Open the PDF at USPTO

Drawings

Claims14

Dependent claims

A method for advertising routing information, the method comprising:

collecting, by a virtual private network server, first media access control (MAC) address routing information, wherein the first MAC address routing information comprises MAC address routing information of each of multiple sites on a virtual private network on which the virtual private network server resides, the virtual private network is a data center interconnect network and each site is a data center, and the virtual private network server is elected from devices of the virtual private network, and is configured to manage the MAC address routing information of each of the multiple sites on the virtual private network;
and
sending, by the virtual private network server, second MAC address routing information in a unicast manner to a destination site, wherein the second MAC address routing information is part of the first MAC address routing information except MAC address routing information of the destination site,
wherein the second MAC address routing information comprises MAC address routing information of at least two sites on the virtual private network and MAC address routing information of one of the at least two sites is a combination of MAC address information of each node on the one site and MAC address routing information of a customer edge node on the one site.

1 more element

A virtual private network server, wherein the virtual private network server is a node configured to manage media access control (MAC) address routing information of each of multiple sites on a virtual private network and is elected from devices of a virtual private network, the server comprises:

a memory that stores instructions;
and
a processor configured to execute the instructions to:
collect first MAC address routing information, wherein the first MAC address routing information comprises MAC address routing information of each of the multiple sites on the virtual private network, the virtual private network is a data center interconnect network and each site is a data center;
and
send second MAC address routing information in a unicast manner to a destination site, wherein the second MAC address routing information is part of the first MAC address routing information except MAC address routing information of the destination site;
wherein the second MAC address routing information comprises MAC address routing information of at least two sites on the virtual private network and MAC address routing information of one of the at least two sites is a combination of MAC address information of each node on the one site and MAC address routing information of a customer edge node on the one site.

4 more elements

A client-based virtual private network system comprising:

a virtual private network server, configured to collect first media access control (MAC) address routing information, wherein the first MAC address routing information comprises MAC address routing information of each of multiple sites on a virtual private network on which the virtual private network server resides, the virtual private network is a data center interconnect network and each site is a data center, and the virtual private network server is elected from devices of the virtual private network, and is configured to manage the MAC address routing information of each of the multiple sites on the virtual private network, and send second MAC address routing information in a unicast manner to a destination site, wherein the second MAC address routing information is part of the first MAC address routing information except MAC address routing information of the destination site;
wherein the second MAC address routing information comprises MAC address routing information of at least two sites;
an IP edge node, configured to acquire an address of the virtual private network server and send the address of the virtual private network server to a customer edge node;
wherein the IP edge node is located outside each site;
and
the customer edge node, configured to acquire the address of the virtual private network server on the virtual private network on which the customer edge node resides and MAC address information of a local site, and then send the MAC address routing information of the local site to the virtual private network server, wherein the address of the virtual private network server is one of an IP address and a MAC address on the virtual private network and MAC address routing information of one of the at least two sites is a combination of MAC address information of each node on the one site and MAC address routing information of a customer edge node on the one site.

3 more elements

Dependencies are inferred from the claim text.

Description11,726 words

Summary1,451 words

#The present invention relates to the field of communications technologies, and in particular to a method, a device, and a virtual private network system for advertising routing information.

#A virtual private network (VPN) is defined as a temporary and secure connection that is established through a public network (commonly the Internet). It is a secure and steady tunnel that passes through the disordered public network. Data may be encrypted multiple times by using this tunnel, to achieve an objective of secure usage of the Internet. The virtual private network is an extension to an intranet. The virtual private network may help a remote user, a company branch, a business partner, and a supplier to establish a credible security connection to an intranet of a company and ensures the security of data transmission.

#The VPN is classified into a client-based VPN and a network-based VPN according to whether it is implemented by an enterprise customer or a service provider. A client-based VPN establishes a tunnel between a customer edge node (CE) and another CE, and directly transfers routing information. Routing protocol data is always exchanged between customer devices, so that a carrier network may know nothing about the structure of a customer network. In addition, different customer address spaces may overlap with good confidentiality and security. Therefore, after the concepts of “cloud computing”/“data center” are proposed, it becomes a research hotspot to implement “cloud computing”/“data center” interconnection on the client-based VPN.

Brief description of the drawings19 figures

#FIG. 1A is a schematic architecture diagram of a client-based virtual private network on a digital subscriber loop access network;

#FIG. 1B is a schematic flowchart of a method for advertising routing information according to a first embodiment of the present invention;

#FIG. 2A is a schematic flowchart of a method for advertising routing information according to a second embodiment of the present invention;

Detailed description9,850 words

#Embodiments of the present invention provide a method for advertising routing information, and the embodiments of the present invention further provide a corresponding device and a client-based virtual private network system. The embodiments of the present invention are described in detail in the following.

#Referring to FIG. 1B, a method for advertising routing information according to a first embodiment of the present invention specifically includes:

#101. A VPN server collects first MAC address routing information.

Facts

Application

13/896,050Filed 16 May 2013 · continuation

Priority

CN 2010 1 060747427 Dec 2010

Published

US 2013/0250947 A126 Sep 2013

Granted

26 Dec 2017

Term ends

20 Sep 2032

Estimated · how

20 years from earliest known nonprovisional domestic filing plus recorded patent term adjustment, including 296 days of adjustment. Maintenance-fee lapses, terminal disclaimers and statutory extensions have not been checked. The continuity chain may be incomplete; this is not an enforceability determination.

Classification8 codes

H04L 45/02
Routing or path finding of packets in data switching networks: topology update or discovery
H04L 45/54
Routing or path finding of packets in data switching networks: organization of routing tables
H04L 45/741
Address processing for routing: routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6
H04L 45/04
Topology update or discovery: interdomain routing, e.g. hierarchical routing

Timeline

27 Dec 2010Priority claimedCN 2010 1 0607474
16 May 2013Application filedUS 13/896,050
16 May 2013Assigned to Huawei Technologies Co., Ltd.assignment of assignor's interest
26 Sep 2013PublishedUS 2013/0250947 A1
26 Dec 2017GrantedUS 9,853,896 B2
12 Oct 2026TodayWithin its term
20 Sep 2032Term endsEstimated, includes 296 days of adjustment

Method, device, and virtual private network system for advertising routing information

Life of this patent

Method, device, and virtual private network system for advertising routing information

Life of this patent

Life of this patent

Abstract

Drawings

Drawings

Claims14

Description11,726 words

Drawings

Classification8 codes

Life of this patent

Description11,726 words