Route protection converting method and device

Abstract

The invention relates to a route protection converting method and device. The route protection converting method comprises the following steps of: configuring a three-layer virtual interface bound with a two-layer VPN (Virtual Private Network) on device nodes of two ends of the two-layer VPN; establishing a protection group relation between a protection route and a protected route according to the binding relation of the two-layer VPN and the three-layer virtual interface; and converting a link flow rate from the protected route to the protection route through the three-layer virtual interface according to the protection group relation when a protected link has failure. According to the route protection converting method disclosed by the invention, through the three-layer virtual interface ARP (Address Resolution Protocol) protection policy, without changing an original network topology and two / three-layer domain partition, the protection of an over two-layer network domain on a three-layer network domain route is realized, a problem of flow interruption of the three-layer route at the two / three-layer network connection caused by DOWN (Direct Memory Access Controller) is solved, and additional devices and a hardware lookup operation do not need to be additionally arranged; and in addition, the expandability of a network structure is improved, the network complexity is reduced and the maintenance cost is saved when conversion performances are ensured.

Description

technical field [0001] The present invention relates to the technical field of communications, in particular to a method and device for routing protection switching across a Layer 2 VPN (Virtual Private Network, virtual private network). Background technique [0002] In the communication system, in order to adapt to the development trend of telecommunication services, the requirements of modern switching equipment are getting higher and higher, such as requiring a distributed architecture with large-capacity NP (Network Processor, network processor), fully supporting MPLS (Multi-Protocol Label Switching, multi-protocol label switching) protocol, stable and powerful L2 / L3VPN (two-layer and three-layer virtual private network) capabilities, and millisecond-level service switching performance, etc., and the network topology is more complex. [0003] The main function of VPN is to use the public network to connect multiple private networks or network nodes. Connecting through a...

AI Technical Summary

Problems solved by technology

For IP (Internet Protocol, Network Association) / LDP (Label Distribution Protocol, Label Distribution Protocol) / L3VPN route protection in the two-layer and three-layer hybrid network, in the implementation of the link or node implementation protection scheme, it is necessary to increase the network Complexity, or need to change the original two-layer and three-layer network domain division, which increases the maintenance cost

[0006] like figure 1 As shown, the upper and lower sides are L3VPN networks, and the middle is an L2VPN network with PE (Provider Edge) 1 and PE2 as edge devices. In order to protect the link between PE1 and CE1, press In the general link protection scheme, when there is no other physical link between PE1 and CE1, a Layer 3 VPN network needs to be established between the two edge devices PE1 and PE2 of the L2VPN to implement the protection scheme. In this way, PE1 and PE2 need to support Layer 3 VPN-related protocols, and increase hardware table items to manage L3VPN services, and also increase the maintenance cost of L2VPN and L3VPN network structure

Images