Implementation of VPNs over a link state protocol controlled ethernet network
    1.
    发明授权
    Implementation of VPNs over a link state protocol controlled ethernet network 有权
    通过链路状态协议控制的以太网网络实现VPN

    公开(公告)号:US07894450B2

    公开(公告)日:2011-02-22

    申请号:US12215350

    申请日:2008-06-26

    IPC分类号: H04L12/28 H04L12/56

    摘要: Nodes on a link state protocol controlled Ethernet network implement a link state routing protocol such as IS-IS. Nodes assign an IP address or I-SID value per VRF and then advertise the IP addresses or I-SID values in IS-IS LSAs. When a packet is to be forwarded on the VPN, the ingress node identifies the VRF for the packet and performs an IP lookup in customer address space in the VRF to determine the next hop and the IP address or I-SID value of the VRF on the egress node. The ingress node prepends an I-SID or IP header to identify the VRFs and then creates a MAC header to allow the packet to be forwarded to the egress node on the link state protocol controlled Ethernet network. When the packet is received at the egress node, the MAC header is stripped from the packet and the appended I-SID or IP header is used to identify the egress VRF. A customer address space IP lookup is then performed in the identified VRF on the egress node using the information in the client IP header to determine how to forward the packet. Customer reachability information within a VPN may be exchanged between VRFs using iBGP, or directly by using link state protocol LSAs tagged with the relevant I-SID.

    摘要翻译: 链路状态协议控制的以太网上的节点实现了IS-IS等链路状态路由协议。 节点为每个VRF分配IP地址或I-SID值,然后在IS-IS LSA中通告IP地址或I-SID值。 当在VPN上转发数据包时,入节点识别数据包的VRF,并在VRF的客户地址空间中执行IP查找,以确定下一跳以及VRF的IP地址或I-SID值 出口节点。 入口节点前置I-SID或IP头以识别VRF,然后创建一个MAC报头,以允许将数据包转发到链路状态协议控制的以太网上的出口节点。 当在出口节点处接收到分组时,从分组中剥离MAC报头,并使用附加的I-SID或IP报头来识别出口VRF。 然后使用客户端IP报头中的信息在出口节点上识别的VRF中执行客户地址空间IP查找,以确定如何转发数据包。 VPN内的客户可达性信息可以使用iBGP在VRF之间交换,也可以直接使用与相关I-SID标记的链路状态协议LSA交换。