Method for realizing QinQ access

Abstract

The invention discloses a method for realizing QinQ simple and flexible access, so as to solve the problems in the prior art that the public network and the private network cannot be mixedly accessed, and multiple virtual private networks cannot share the bandwidth of one port. The present invention determines whether to add an outer layer public network VLAN tag and what kind of outer layer public network VLAN tag to add according to the access VLAN tag and port number of the data packet by establishing a QinQ configuration table, and pairs the added outer layer VLAN tag at the output port. The method of stripping labels realizes simple and flexible QinQ access. This method can realize the hybrid processing of multiple QinQs on one port, and realize the sharing of one port by multiple VPNs to realize bandwidth sharing. The port occupancy rate is reduced, and the purchase cost of the equipment is effectively reduced.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a method for realizing QinQ (two-layer IEEE802.1Q label encapsulation technology) simple and flexible access. Background technique [0002] A local area network in the same physical form can be divided into multiple VLANs (Virtual Local Area Network, Virtual Local Area Network), and each VLAN cannot be directly accessed, but can only be accessed through a routing device, which can improve the security and reliability of the network. VPN (Virtual Private Networks, Virtual Private Network) technology is a technology that transmits a private network through a public network. It is a cheap and efficient method to connect private networks in different locations through this technology. Currently commonly used VPN technologies include L2 technology and L3 layer technology. [0003] QinQ technology is a simple VPN technology, which uses L2 layer technology, through two layers of ...

AI Technical Summary

Problems solved by technology

[0004] However, the existing technology only supports the encapsulation of two VLAN tags on an Ethernet port to implement QinQ. If the port is an access port of QinQ, a public network VLAN tag is added to the data packet, and if it is an outgoing port, the external VLAN tag is stripped. Layer public network VLAN tag

[0005] Although this method can realize some simple functions of QinQ, it is not flexible enough and is also subject to great limitations in networking.

First of all, because in the prior art, a port can only have one public network VLAN tag; therefore, a port can generally only be connected to one VPN. If there are a large number of VPNs, a large number of ports will be occupied; access, that is, the public network and private network cannot share a port for access

[0006] These two disadvantages may cause a lot of waste for high-bandwidth ports. For example, if the port connected is a Gigabit Ethernet port, the traffic of a certain VPN may only be 200M. According to the existing solution, only one The port is connected to a VPN, so this network port can only be used by it, and the 800M bandwidth is wasted, but if a 100M network port is used, several network ports are needed, and the switch port and bandwidth are important resources. This situation will lead to a significant increase in costs

Images