CN103139075B

CN103139075B - A kind of message transmitting method and equipment

Info

Publication number: CN103139075B
Application number: CN201310080293.4A
Authority: CN
Inventors: 彭剑远; 郑国良
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: New H3C Information Technologies Co Ltd
Priority date: 2013-03-13
Filing date: 2013-03-13
Publication date: 2016-01-20
Anticipated expiration: 2033-03-13
Also published as: CN103139075A

Abstract

The invention discloses a kind of message transmitting method and equipment, the method comprises: edge bridge equipment receives the first message encapsulated from the GRE of gateway device; Described edge bridge equipment obtains the 3rd message to described first message solution GRE encapsulation, according to the object IP address of the 3rd message, search the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forward after determining the MAC Address that the object IP address of the 3rd message is corresponding.In the embodiment of the present invention, normally can forward the message needing between different terminal equipment to transmit.

Description

A kind of message transmitting method and equipment

Technical field

The present invention relates to communication technical field, particularly relate to the message transmitting method in a kind of extensive double layer network and equipment.

Background technology

STP(SpanningTreeProtocol is adopted, Spanning-Tree Protocol in three traditional layer data center frameworks) optimize client to the path of server and Supporting connectivity redundancy.Due to the reason such as constringency performance of STP, generally the network size of STP can not more than 100 switches.Simultaneously because STP needs to block redundance unit and link, also reduce Internet resources bandwidth availability ratio.Traditional demand that can not meet data center's scale, bandwidth based on STP alternate device and link scheme, and the STP agreement several seconds convergence time after malfunction occurreds to a few minutes, can not meet the reliability requirement of data center.Therefore, need there is new technology, while meeting double layer network scale, also can make full use of redundance unit and link, improve link utilance, and the convergence time after malfunction occurred of data center can be reduced to submicrosecond even Millisecond.

The virtual utilance that effectively can improve server, reduces energy resource consumption, reduces the O&M cost of client, so Intel Virtualization Technology obtains great development.The virtual raising being not only server utilization brought to data center, also has the change of the network architecture.Virtual machine migration technology can make the computational resource of data center be allocated flexibly, improves the utilance of resources of virtual machine further.But virtual machine (vm) migration requires IP and MAC(MediaAccessControl before and after virtual machine (vm) migration, medium access control) address is constant, and this is in inside, same two layers of territory with regard to needing the network before and after virtual machine (vm) migration.Because the increasing extent of customer requirement virtual machine (vm) migration is large, or even the migration of crossing between different geographical, different machine room, so make the increasing extent of data center's double layer network large, even there is this frontier special topic of extensive double layer network (hereinafter referred to as large double layer network).

Tunneling technique can realize the large double layer network covered in the data center of multiple access switch and core switch.The Typical Representative of tunneling technique is TRILL(TRansparentInterconnectionofLotsofLinks, multilink transparent interconnection) and SPB(ShortestPathBridging, shortest path bridge) technology, both are all by using IS-IS(IntermediateSystemtoIntermediateSystem, Intermediate System-to-Intermediate System) calculating of Routing Protocol and forward mode, realize the extensive expansion of double layer network.These technology are at present just in standardisation process, and conventional switch not only needs software upgrading simultaneously, also needs hardware supports.SPB agreement supports Q-in-Q pattern (being called SPBV) and MAC-in-MAC pattern (being called SPBM), the wherein shortest path bridge of SPBM(ShortestPathBridgingMACMode, MAC-in-MAC pattern) be current main recommendation pattern.

In SPBM network and TRILL network, manufacturer's chip is inadequate to the support of actual networking, causes network can not realize normal forwarding capability.

For SPBM network, message repeating flow process wherein will be introduced below.

SPBM network comprises BEB(BackboneEdgeBridge, backbone edges bridge) equipment, BCB(BackboneCoreBridge, backbone network core bridges) equipment and between backbone links.BEB equipment is the edge device of SPBM network, the message from user network can be carried out MAC-in-MAC encapsulation, and be forwarded in SPBM network; Or, the MAC-in-MAC message from SPBM network is carried out decapsulation, and is forwarded to user network.BCB equipment is the nucleus equipment of SPBM network, when carrying out MAC-in-MAC encapsulation to message, for it stamps the B-MAC(BackboneMAC that operator distributes, backbone network MAC) address and B-VLAN(Backbone-VirtualLocalAreaNetwork, backbone virtual-LAN); Forward MAC-in-MAC message according to B-MAC and B-VLAN, and only need to E-Packet and learn the MAC Address in backbone network, do not need to learn MAC Address a large amount of in user network.

Port BEB equipment connecting SPBM network is called up going port, and the port connecting user network is called down going port; After being packaged into MAC-in-MAC message from the message of user network, can be forwarded by the corresponding up going port of BEB equipment; From the MAC-in-MAC message of SPBM network by after decapsulation, can be forwarded by the corresponding down going port of BEB equipment according to user's MAC address.

Figure 1 shows that a kind of networking structure of SPBM network, run SPB(ShortestPathBridging in SPBM network, shortest path bridge) agreement, for main frame 1 and main frame 2 not at the same network segment, corresponding forwarding process can comprise following process:

One, for the ARP learning process of main frame 1, this process can comprise the following steps:

Step 1, main frame 1 send ARP(AddressResolutionProtocol to BEB1, address resolution protocol) request message, the source MAC of the ethernet header of this ARP request message is the MAC Address of main frame 1, and carry as the MAC Address (1-1-1) of the main frame 1 of transmitting terminal and IP address (1.1.1.2) and as the IP address of the gateway device of destination end and MAC Address in this ARP request message, wherein the MAC Address of gateway device is filled to full 0, and the source MAC in this ARP request message ethernet header is the MAC Address of main frame 1.

After step 2, BEB1 receive ARP request message, carry out source MAC study, thus study is to the MAC Address of main frame 1, the corresponding relation of MAC Address (1-1-1) and receiving port is recorded in mac address table, and MAC-in-MAC encapsulation is carried out to ARP request message, by broadcast mode, the ARP request message after MAC-in-MAC encapsulation can be sent to gateway device (under the application scenarios shown in Fig. 1, gateway device is deployed on BCB1).

Step 3, gateway device carry out decapsulation to the ARP request message after MAC-in-MAC encapsulation, carry out source MAC study, thus the MAC Address of study main frame 1, in mac address table, record the MAC Address (1-1-1) of main frame 1 and the corresponding relation of neighbor information, this neighbor information comprises packaging information when outbound port (i.e. the receiving port of ARP request message) corresponding to MAC Address (1-1-1) and MAC-in-MAC forwarding; The MAC Address (1-1-1) of transmitting terminal and IP address (1.1.1.2) in study ARP request message, record MAC Address (1-1-1), corresponding relation between IP address (1.1.1.2) and receiving port in the routing table.

Step 4, gateway device respond described ARP request message, generate an arp reply message, in this arp reply message, transmitting terminal IP address is the IP address (1.1.1.1) of gateway device, transmitting terminal MAC Address is the MAC Address (3-3-3) of gateway device, destination end IP address is the IP address (1.1.1.2) of main frame 1, and destination end MAC Address is the MAC Address (1-1-1) of main frame 1.

In addition, the source of the ethernet header of this arp reply message, target MAC (Media Access Control) address are respectively the MAC Address of gateway device and main frame 1; Gateway device carries out MAC-in-MAC encapsulation to this arp reply message, and the arp reply message after encapsulation is sent to BEB1.

Step 5, BEB1 carry out decapsulation to the arp reply message after MAC-in-MAC encapsulation, obtain arp reply message, source MAC study is carried out according to this arp reply message, thus study is to the MAC Address of gateway device, in mac address table, record the MAC Address (3-3-3) of gateway device and the corresponding relation of neighbor information, this neighbor information comprises packaging information when outbound port (i.e. the receiving port of arp reply message) corresponding to MAC Address (3-3-3) and MAC-in-MAC forwarding.

Step 6, BEB1 utilize the target MAC (Media Access Control) address of arp reply message (1-1-1) to inquire about MAC table, obtain corresponding port, thus by this port, arp reply message are sent to main frame 1.

Step 7, main frame 1 are after receiving arp reply message, and study is to the MAC Address (3-3-3) of IP address (1.1.1.1) correspondence of gateway device.

Two, for the ARP learning process of main frame 2, this process is similar to the ARP learning process of above-mentioned main frame 1, can comprise the following steps:

Step 1, main frame 2 send ARP request message to BEB2, the source MAC of the ethernet header of this ARP request message is the MAC Address of main frame 2, and carry as the MAC Address (2-2-2) of the main frame 2 of transmitting terminal and IP address (2.2.2.2) and as the IP address of the gateway device of destination end and MAC Address in this ARP request message, wherein the MAC Address of gateway device is filled to full 0, and the source MAC in this ARP request message ethernet header is the MAC Address of main frame 2.

After step 2, BEB2 receive ARP request message, carry out source MAC study, thus study is to the MAC Address of main frame 2, the corresponding relation of MAC Address (2-2-2) and receiving port is recorded in mac address table, and MAC-in-MAC encapsulation is carried out to ARP request message, by broadcast mode, the ARP request message after MAC-in-MAC encapsulation can be sent to gateway device (under the application scenarios shown in Fig. 1, gateway device is deployed on BCB1).

Step 3, gateway device carry out decapsulation to the ARP request message after MAC-in-MAC encapsulation, carry out source MAC study, thus the MAC Address of study main frame 2, in mac address table, record the MAC Address (2-2-2) of main frame 2 and the corresponding relation of neighbor information, this neighbor information comprises packaging information when outbound port (i.e. the receiving port of ARP request message) corresponding to MAC Address (2-2-2) and MAC-in-MAC forwarding; The MAC Address (2-2-2) of transmitting terminal and IP address (2.2.2.2) in study ARP request message, record MAC Address (2-2-2), corresponding relation between IP address (2.2.2.2) and receiving port in the routing table.

Step 4, gateway device respond described ARP request message, generate an arp reply message, in this arp reply message, transmitting terminal IP address is the IP address (2.2.2.1) of gateway device, transmitting terminal MAC Address is the MAC Address (3-3-3) of gateway device, destination end IP address is the IP address (2.2.2.2) of main frame 2, and destination end MAC Address is the MAC Address (2-2-2) of main frame 2.

In addition, the source of the ethernet header of this arp reply message, target MAC (Media Access Control) address are respectively the MAC Address of gateway device and main frame 2; Gateway device carries out MAC-in-MAC encapsulation to this arp reply message, and the arp reply message after encapsulation is sent to BEB2.

Step 5, BEB2 carry out decapsulation to the arp reply message after MAC-in-MAC encapsulation, obtain arp reply message, source MAC study is carried out according to this arp reply message, thus study is to the MAC Address of gateway device, in mac address table, record the MAC Address (3-3-3) of gateway device and the corresponding relation of neighbor information, this neighbor information comprises packaging information when outbound port (i.e. the receiving port of arp reply message) corresponding to MAC Address (3-3-3) and MAC-in-MAC forwarding.

Step 6, BEB2 utilize the target MAC (Media Access Control) address of arp reply message (2-2-2) to inquire about MAC table, obtain corresponding port, thus by this port, arp reply message are sent to main frame 2.

Step 7, main frame 2 after receiving arp reply message, study corresponding to the IP address (2.2.2.1) of gateway device with MAC Address (3-3-3).

Three, send the flow process of message to main frame 2 for main frame 1, this flow process can comprise the following steps:

Step 1, main frame 1 send message to main frame 2, and the object IP address of this message is the IP address (2.2.2.2) of main frame 2, and target MAC (Media Access Control) address is the MAC Address (3-3-3) of gateway device.

Step 2, BEB1 receive after main frame 1 sends to the message of main frame 2, target MAC (Media Access Control) address is utilized to inquire about mac address table, the list item of hit (3-3-3), neighbor information according to the list item of (3-3-3) carries out MAC-in-MAC encapsulation to message, and sends to gateway device by the message clean culture after MAC-in-MAC encapsulates by the outbound port that (3-3-3) list item is corresponding.

Step 3, gateway device carry out decapsulation to the message after MAC-in-MAC encapsulation, find that target MAC (Media Access Control) address is this device mac address (3-3-3), then utilize object IP address (2.2.2.2) table of query and routing, obtain corresponding MAC Address for (2-2-2), and the source MAC of message is revised as this device mac address (3-3-3), the target MAC (Media Access Control) address of message is revised as MAC Address (2-2-2).

Step 4, gateway device utilize amended MAC Address (2-2-2) to inquire about mac address table, the list item of hit (2-2-2), the neighbor information corresponding according to the list item of (2-2-2) carries out MAC-in-MAC encapsulation to amended message, and sends to BEB2 by the message after MAC-in-MAC encapsulates by the outbound port that (2-2-2) list item is corresponding.

Step 5, BEB2 carry out decapsulation to the message after MAC-in-MAC encapsulation, after obtaining corresponding message, the target MAC (Media Access Control) address of this message (2-2-2) is utilized to inquire about mac address table, the list item of hit (2-2-2), and by the outbound port that (2-2-2) list item is corresponding, message is sent to main frame 2.

Send the flow process of message to main frame 1 for main frame 2, similar with above-mentioned flow process.

In above-mentioned steps 3 and step 4, gateway device needs first to utilize object IP address lookup routing table, recycling target MAC (Media Access Control) address inquiry mac address table; But, current existing part manufacturer chip cannot realize first utilizing object IP address lookup routing table, the processing procedure of recycling target MAC (Media Access Control) address inquiry mac address table, thus cause above-mentioned flow process to realize, namely normally cannot forward the message that main frame 1 sends to main frame 2.

Summary of the invention

The embodiment of the present invention provides a kind of message transmitting method and equipment, cannot realize first utilizing object IP address lookup routing table in the handling process of chip, during recycling target MAC (Media Access Control) address inquiry mac address table, normally can forward the message needing between different terminal equipment to transmit.

In order to achieve the above object, the embodiment of the present invention provides a kind of message transmitting method, is applied in the large double layer network comprising terminal equipment, edge bridge equipment and gateway device, wherein, described edge bridge equipment is directly connected with described terminal equipment, said method comprising the steps of:

Described edge bridge equipment receives the first message that the GRE from described gateway device encapsulates, described first message is that described gateway device obtains the 3rd message after the second message decapsulation to the large double layer network encapsulation received, and the target MAC (Media Access Control) address of the 3rd message is when being the MAC Address of described gateway device, according to the object IP address of the 3rd message, search the terminal device IP address and MAC Address safeguarded in local routing table, and the corresponding relation between the IP address of the edge bridge equipment to be connected with terminal equipment and MAC Address, and according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generate and send after GRE encapsulation is carried out to the 3rd message,

Described edge bridge equipment obtains the 3rd message to described first message solution GRE encapsulation, according to the object IP address of the 3rd message, search the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forward after determining the MAC Address that the object IP address of the 3rd message is corresponding;

Wherein, described large double layer network is SPBM network, and described edge bridge equipment is BEB equipment, and described large double layer network is encapsulated as MAC-in-MAC encapsulation; Or described large double layer network is TRILL network, described edge bridge equipment is RB equipment, and described large double layer network is encapsulated as TRILL encapsulation.

Described edge bridge equipment searches the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, also comprises before:

Described edge bridge equipment receives the ARP request message from local terminal, carries IP address and the MAC Address of described local terminal in described ARP request message;

The IP address of the local terminal carried in ARP request message described in described edge bridge learning equipment and MAC Address, and in local routing table, record the IP address of described local terminal and the corresponding relation of MAC Address.

The IP address of the local terminal carried in ARP request message described in described edge bridge learning equipment and MAC Address, and in local routing table, record the IP address of described local terminal and the corresponding relation of MAC Address, specifically comprise:

Described edge bridge equipment is enable ARPSnooping function on the VLAN connecting local terminal, and edge bridge equipment described in enable ARPSnooping functional representation needs to learn the IP address of carrying in the ARP request message that all of the port in described VLAN receives and MAC Address;

After the port of described edge bridge equipment in described VLAN receives described ARP request message, described ARP request message will be delivered to the CPU of this equipment, to learn IP address and the MAC Address of the local terminal carried in described ARP request message, and in local routing table, record the IP address of described local terminal and the corresponding relation of MAC Address.

The embodiment of the present invention provides a kind of message transmitting method, is applied in the large double layer network comprising terminal equipment, edge bridge equipment and gateway device, and wherein, described edge bridge equipment is directly connected with described terminal equipment, said method comprising the steps of:

Described gateway device receives the second message of large double layer network encapsulation, and obtains the 3rd message to after the second message decapsulation of the large double layer network encapsulation received; When the target MAC (Media Access Control) address of described 3rd message is the MAC Address of described gateway device, described gateway device, according to the object IP address of described 3rd message, searches the corresponding relation between the IP address of the terminal device IP address and MAC Address safeguarded in local routing table and the edge bridge equipment be connected with terminal equipment and MAC Address;

Described gateway device, according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generates first message after carrying out GRE encapsulation to described 3rd message;

The first message that GRE encapsulates by described gateway device sends to described edge bridge equipment; By described edge bridge equipment, the 3rd message is obtained to described first message solution GRE encapsulation, according to the object IP address of the 3rd message, search the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forward after determining the MAC Address that the object IP address of the 3rd message is corresponding;

Before described gateway device searches the corresponding relation between the IP address of the terminal device IP address and MAC Address safeguarded in local routing table and the edge bridge equipment be connected with terminal equipment and MAC Address, described method also comprises:

The ARP request message from described terminal equipment of the edge bridge device forwards that described gateway device receiving terminal apparatus is connected, the IP address of carried terminal equipment and MAC Address in this ARP request message;

Described gateway device learns IP address and the MAC Address of the terminal equipment carried in described ARP request message, and obtains IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected;

Described gateway device records terminal device IP address and MAC Address and the corresponding relation between the IP address of edge bridge equipment be connected with terminal equipment and MAC Address in local routing table.

Described gateway device obtains IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected, and specifically comprises:

Described gateway device safeguards the corresponding relation between the IP address of each edge bridge equipment in described large double layer network and MAC Address in advance in topology table;

Described gateway device, when receiving the ARP request message from edge bridge equipment, determines the MAC Address of described edge bridge equipment, and inquires about described topology table by the MAC Address of described edge bridge equipment, to obtain the IP address of described edge bridge equipment.

The embodiment of the present invention provides a kind of gateway device, is applied in the large double layer network comprising terminal equipment, edge bridge equipment and described gateway device, and wherein, described edge bridge equipment is directly connected with described terminal equipment, and described gateway device specifically comprises:

Receiver module, for receiving the second message of large double layer network encapsulation;

Decapsulation module, for obtaining the 3rd message after the second message decapsulation to the large double layer network encapsulation received;

Enquiry module, for when the target MAC (Media Access Control) address of described 3rd message is the MAC Address of this gateway device, according to the object IP address of described 3rd message, search the corresponding relation between the IP address of the terminal device IP address and MAC Address safeguarded in local routing table and the edge bridge equipment be connected with terminal equipment and MAC Address;

Package module, for according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generates first message after carrying out GRE encapsulation to described 3rd message;

Sending module, the first message for being encapsulated by GRE sends to described edge bridge equipment; By described edge bridge equipment, the 3rd message is obtained to described first message solution GRE encapsulation, according to the object IP address of the 3rd message, search the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forward after determining the MAC Address that the object IP address of the 3rd message is corresponding;

Also comprise: maintenance module;

Described receiver module, the ARP request message from terminal equipment of the edge bridge device forwards be also connected for receiving terminal apparatus, the IP address of carried terminal equipment and MAC Address in ARP request message;

Described maintenance module, for learning IP address and the MAC Address of the terminal equipment carried in described ARP request message, and obtains IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected;

And, in local routing table, record terminal device IP address and MAC Address and the corresponding relation between the IP address of edge bridge equipment be connected with terminal equipment and MAC Address.

Described maintenance module, is further used in topology table, safeguard the corresponding relation between the IP address of each edge bridge equipment in described large double layer network and MAC Address in advance; When receiving the ARP request message from edge bridge equipment, determine the MAC Address of described edge bridge equipment, and inquire about described topology table by the MAC Address of described edge bridge equipment, to obtain the IP address of described edge bridge equipment.

The embodiment of the present invention provides a kind of edge bridge equipment, and be applied in the large double layer network comprising terminal equipment, described edge bridge equipment and gateway device, wherein, described edge bridge equipment is directly connected with described terminal equipment, and described edge bridge equipment specifically comprises:

Receiver module, for the first message that the GRE received from described gateway device encapsulates, described first message is that described gateway device obtains the 3rd message after the second message decapsulation to the large double layer network encapsulation received, and the target MAC (Media Access Control) address of the 3rd message is when being the MAC Address of described gateway device, according to the object IP address of the 3rd message, search the terminal device IP address and MAC Address safeguarded in local routing table, and the corresponding relation between the IP address of the edge bridge equipment to be connected with terminal equipment and MAC Address, and according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generate and send after GRE encapsulation is carried out to the 3rd message,

Decapsulation module, for obtaining the 3rd message to described first message solution GRE encapsulation;

Processing module, for the object IP address according to described 3rd message, searches the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forwards after determining the MAC Address that the object IP address of described 3rd message is corresponding;

Also comprise: maintenance module;

Described receiver module, also for receiving the ARP request message from local terminal, carries IP address and the MAC Address of described local terminal in described ARP request message;

Described maintenance module, for learning IP address and the MAC Address of the local terminal carried in described ARP request message, and records the IP address of described local terminal and the corresponding relation of MAC Address in local routing table.

Described maintenance module, specifically for enable ARPSnooping function on the VLAN connecting local terminal, and enable this edge bridge of ARPSnooping functional representation equipment needs to learn the IP address of carrying in the ARP request message that all of the port in described VLAN receives and MAC Address;

After port in described VLAN receiving described ARP request message, described ARP request message will be delivered to the CPU of this equipment, to learn IP address and the MAC Address of the local terminal carried in described ARP request message, and in local routing table, record the IP address of described local terminal and the corresponding relation of MAC Address.

Compared with prior art, the embodiment of the present invention at least has the following advantages: in the embodiment of the present invention, gateway device is by carrying out GRE(GenericRoutingEncapsulation to message, generic route encapsulation) encapsulation, and send the message after GRE encapsulation to edge bridge equipment, to avoid first utilizing object IP address lookup routing table, the handling process of recycling target MAC (Media Access Control) address inquiry mac address table, thus cannot realize first utilizing object IP address lookup routing table in the handling process of chip, during recycling target MAC (Media Access Control) address inquiry mac address table, normally can forward the message needing between different terminal equipment to transmit, avoid when SPBM network uses SPB agreement or uses TRILL protocol in TRILL network, message cannot the situation of normal transmission.

Accompanying drawing explanation

Fig. 1 is the networking structure schematic diagram of SPBM network in prior art;

Fig. 2 is the application scenarios schematic diagram of the embodiment of the present invention;

Fig. 3 and Fig. 4 is a kind of message transmitting method schematic flow sheet that the embodiment of the present invention provides;

Fig. 5 is the structural representation of a kind of gateway device that the embodiment of the present invention provides;

Fig. 6 is the structural representation of a kind of edge bridge equipment that the embodiment of the present invention provides.

Embodiment

Below in conjunction with the accompanying drawing in the present invention, be clearly and completely described the technical scheme in the present invention, obviously, described embodiment is only a part of embodiment of the present invention, instead of whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art, not making other embodiments all obtained under creative work prerequisite, belong to the scope of protection of the invention.

For problems of the prior art, the embodiment of the present invention proposes a kind of message transmitting method, and the method is applied in the large double layer network comprising terminal equipment, edge bridge equipment and gateway device, and wherein, edge bridge equipment is directly connected with terminal equipment; Gateway device is by carrying out GRE encapsulation to message, and send the message after GRE encapsulation to edge bridge equipment, to avoid first utilizing object IP address lookup routing table, the handling process of recycling target MAC (Media Access Control) address inquiry mac address table, thus cannot realize first utilizing object IP address lookup routing table in the handling process of chip, during recycling target MAC (Media Access Control) address inquiry mac address table, normally can forward the message needing between different terminal equipment to transmit.

In the embodiment of the present invention, gateway device, when receiving the second message of large double layer network encapsulation, obtains the 3rd message to after the second message decapsulation of the large double layer network encapsulation received; When the target MAC (Media Access Control) address of the 3rd message is the MAC Address of this gateway device, according to the object IP address of the 3rd message, search the corresponding relation between the IP address of the terminal device IP address and MAC Address safeguarded in local routing table and the edge bridge equipment be connected with terminal equipment and MAC Address; According to IP address and the MAC Address of edge bridge equipment corresponding to the object IP address of the 3rd message found, generate the first message after GRE encapsulation is carried out to the 3rd message, the first message that GRE encapsulates is sent to edge bridge equipment.

Edge bridge equipment receives the first message encapsulated from the GRE of gateway device, 3rd message is obtained to the first message solution GRE encapsulation, according to the object IP address of the 3rd message, search the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forward after determining the MAC Address that the object IP address of the 3rd message is corresponding.

In the embodiment of the present invention, gateway device safeguards that the process of local routing table comprises: the ARP request message from terminal equipment of the edge bridge device forwards that gateway device receiving terminal apparatus is connected, the IP address of carried terminal equipment and MAC Address in this ARP request message; The IP address of the terminal equipment carried in study ARP request message and MAC Address, and obtain IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected; Terminal device IP address and MAC Address and the corresponding relation between the IP address of edge bridge equipment be connected with terminal equipment and MAC Address is recorded in local routing table.

Further, gateway device obtains IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected, and specifically comprises: gateway device safeguards the corresponding relation between the IP address of each edge bridge equipment in large double layer network and MAC Address in advance in topology table; When receiving the ARP request message from edge bridge equipment, determine the MAC Address of edge bridge equipment, and inquire about topology table, to obtain the IP address of this edge bridge equipment by the MAC Address of edge bridge equipment.

In the embodiment of the present invention, the process of edge bridge plant maintenance local routing table comprises: edge bridge equipment receives the ARP request message from local terminal, carries IP address and the MAC Address of local terminal in this ARP request message; The IP address of the local terminal carried in study ARP request message and MAC Address, and in local routing table, record the IP address of local terminal and the corresponding relation of MAC Address.

Further, the IP address of edge bridge learning equipment local terminal and MAC Address, and the IP address of recording local terminal in local routing table specifically comprises with the corresponding relation of MAC Address: edge bridge equipment is enable ARPSnooping function on the VLAN being connected local terminal, and enable ARPSnooping functional representation edge bridge equipment needs to learn the IP address of carrying in the ARP request message that all of the port in this VLAN receives and MAC Address; After port in this VLAN receiving ARP request message, described ARP request message will be delivered to the CPU of this equipment, to learn IP address and the MAC Address of the local terminal carried in ARP request message, and in local routing table, record the IP address of local terminal and the corresponding relation of MAC Address.

In the embodiment of the present invention, large double layer network is SPBM network, and edge bridge equipment is BEB equipment, and large double layer network is encapsulated as MAC-in-MAC encapsulation; Or large double layer network is TRILL network, edge bridge equipment is RB equipment, and large double layer network is encapsulated as TRILL encapsulation.

In order to the technical scheme that the elaboration embodiment of the present invention clearly provides, for the SPBM network based on SPB agreement, then the application scenarios of this SPBM network can be as shown in Figure 2; The message transmitting method that the embodiment of the present invention proposes, can be applied in the SPBM network comprising source terminal equipment, source BEB equipment, object terminal equipment, object BEB equipment and gateway device.

Send in the process of message at main frame 1 to main frame 2, source terminal equipment is main frame 1, and source BEB equipment is BEB1, and object terminal equipment is main frame 2, and object BEB equipment is BEB2, and under application scenarios shown in Fig. 2, gateway device is deployed on BCB1.Send in the process of message at main frame 2 to main frame 1, source terminal equipment is main frame 2, and source BEB equipment is BEB2, and object terminal equipment is main frame 1, and object BEB equipment is BEB1, and under application scenarios shown in Fig. 2, gateway device is deployed on BCB1.

One, under above-mentioned application scenarios, for the ARP learning process of main frame 1, comprise the following steps:

Step 1, main frame 1 send ARP request message to BEB1, carry as the MAC Address (1-1-1) of the main frame 1 of transmitting terminal and IP address (1.1.1.2) and as the IP address of the gateway device of destination end and MAC Address in this ARP request message, wherein the MAC Address of gateway device is filled to full 0, and the source MAC in this ARP request message ethernet header is the MAC Address of main frame 1.

Step 2, BEB1, after receiving ARP request message, carry out source MAC study, thus study is to the MAC Address of main frame 1, record the corresponding relation of MAC Address (1-1-1) and receiving port in mac address table; And learn MAC Address (1-1-1) and IP address (1.1.1.2) of the transmitting terminal carried in ARP request message, record MAC Address (1-1-1), corresponding relation between IP address (1.1.1.2) and receiving port in the routing table.

Concrete, BEB1 is after receiving the ARP request message of from host 1 (carrying IP address and the MAC Address of main frame 1), and this BEB1 learns IP address and the MAC Address of main frame 1, and records the IP address of main frame 1 and the corresponding relation of MAC Address in the routing table.

In the embodiment of the present invention, the enable ARPSnooping(detection on the VLAN connecting main frame of each BEB equipment can be configured), enable ARPSnooping functional representation BEB equipment needs to learn the IP address of carrying in the ARP message that all of the port in this VLAN receives and MAC Address; Therefore, BEB equipment connects the VLAN of main frame after enable ARPSnooping, the ARP request message in this VLAN, all of the port received all can be redirected to CPU(CentralProcessingUnit, CPU), analyzed being redirected the ARP request message that send by CPU, to obtain the information such as transmitting terminal IP address, transmitting terminal MAC Address, VLAN and inbound port of carrying in ARP request message.

Based on this, BEB1 is on the VLAN connecting main frame 1 after enable ARPSnooping function, if the port of BEB1 in this VLAN receives ARP request message, then BEB1 needs the IP address and the MAC Address that learn the main frame 1 carried in this ARP request message, and in the routing table of this equipment, record the IP address of this main frame 1 and the corresponding relation of MAC Address, the out of Memory in routing table is repeated no more.

Step 3, BEB1 carry out MAC-in-MAC encapsulation to ARP request message, by broadcast mode, the ARP request message after MAC-in-MAC encapsulation can be sent to gateway device (gateway device is deployed on BCB1).

Step 4, gateway device carry out decapsulation, to obtain corresponding ARP request message to the ARP request message after MAC-in-MAC encapsulation; Source MAC study is carried out according to ARP request message, thus study is to the MAC Address (1-1-1) of main frame 1, in mac address table, record the corresponding relation of MAC Address (1-1-1) and neighbor information, this neighbor information comprises packaging information when port (i.e. the receiving port of ARP request message) corresponding to MAC Address (1-1-1) and MAC-in-MAC forwarding; The MAC Address (1-1-1) of the transmitting terminal carried in study ARP request message and IP address (1.1.1.2), record the MAC Address (1-1-1) of transmitting terminal, the corresponding relation between IP address (1.1.1.2) and receiving port in the routing table.

In the embodiment of the present invention, gateway device is after receiving the ARP request message (carrying MAC Address (1-1-1) and IP address (1.1.1.2) of main frame 1) from BEB1, this gateway device needs the MAC Address (1-1-1) and IP address (1.1.1.2) that learn the main frame 1 carried in ARP request message, and obtain IP address (private network IP address 192.168.1.4) and the MAC Address (5-5-5) of BEB1 further, thus record MAC Address (1-1-1) and IP address (1.1.1.2) of main frame 1 in the routing table, and the corresponding relation between the IP address (192.168.1.4) of BEB1 and MAC Address (5-5-5).

Further, in order to the IP address and the MAC Address that enable gateway device obtain BEB1, gateway device can corresponding relation in topology table in advance in maintaining network between the IP address of each BEB equipment and MAC Address; When receiving the ARP request message from BEB1, gateway device directly determines the MAC Address of BEB1, and inquires about topology table by the MAC Address of BEB1, obtains the IP address of BEB1.

Concrete, in SPBM network, each equipment needs reservation VLAN(for preventing two layers of forwarding loop, and two layers of forwarding capability on this reservation VLAN need to close), this VLAN is used for learning MAC Address and the IP address that miscellaneous equipment in SPBM network retains VLAN.Based on this VLAN, each equipment in SPBM network by the mode of expansion ISIS agreement, by all devices notified with this equipment retaining the MAC Address of VLAN and IP address hop-by-hop in SPBM network; Therefore, gateway device can safeguard the corresponding relation between the IP address of each BEB equipment in SPBM network and MAC Address in advance in topology table.

Step 5, gateway device respond described ARP request message, generate an arp reply message, carry out MAC-in-MAC encapsulation to this arp reply message, and the arp reply message after encapsulation is sent to BEB1; In this arp reply message, transmitting terminal IP address is the IP address (1.1.1.1) of gateway device, destination end IP address is the IP address (1.1.1.2) of main frame 1, transmitting terminal MAC Address is the MAC Address (3-3-3) of gateway device, destination end MAC Address is the MAC Address (1-1-1) of main frame 1, and the source of the ethernet header of this arp reply message, target MAC (Media Access Control) address are respectively the MAC Address of gateway device and main frame 1.

Step 6, BEB1 carry out decapsulation to the arp reply message after MAC-in-MAC encapsulation, obtain arp reply message, source MAC study is carried out according to this arp reply message, thus study is to the MAC Address of gateway device, in mac address table, record the MAC Address (3-3-3) of gateway device and the corresponding relation of neighbor information, this neighbor information comprises outbound port (i.e. the receiving port of arp reply message) corresponding to gateway device MAC Address (3-3-3) and MAC-in-MAC packaging information.

Step 7, BEB1 inquire about mac address table according to the target MAC (Media Access Control) address (1-1-1) of this arp reply message, obtain corresponding outbound port, thus by this outbound port, arp reply message are sent to main frame 1.

Step 8, main frame 1 are after receiving arp reply message, and the corresponding relation between the IP address (1.1.1.1) of gateway device and MAC Address (3-3-3) is arrived in study.

Two, under above-mentioned application scenarios, for the ARP learning process of main frame 2, comprise the following steps:

Step 1, main frame 2 send ARP request message to BEB2, carry as the MAC Address (2-2-2) of the main frame 2 of transmitting terminal and IP address (2.2.2.2) and as the IP address of the gateway device of destination end and MAC Address in this ARP request message, wherein the MAC Address of gateway device is filled to full 0, and the source MAC in this ARP request message ethernet header is the MAC Address of main frame 2.

Step 2, BEB2, after receiving ARP request message, carry out source MAC study, thus study is to the MAC Address of main frame 2, record the corresponding relation of MAC Address (2-2-2) and receiving port in mac address table; And learn MAC Address (2-2-2) and IP address (2.2.2.2) of the transmitting terminal carried in ARP request message, record MAC Address (2-2-2), corresponding relation between IP address (2.2.2.2) and receiving port in the routing table.

Concrete, BEB2 is after receiving the ARP request message of from host 2 (carrying IP address and the MAC Address of main frame 2), this BEB2 needs the IP address and the MAC Address that learn main frame 2, and records the IP address of main frame 2 and the corresponding relation of MAC Address in the routing table.

In the embodiment of the present invention, can configure each BEB equipment enable ARPSnooping on the VLAN connecting main frame, enable ARPSnooping functional representation BEB equipment needs to learn the IP address of carrying in the ARP request message that all of the port in this VLAN receives and MAC Address; Therefore, BEB equipment connects the VLAN of main frame after enable ARPSnooping, the ARP request message in this VLAN, all of the port received all can be redirected to CPU, analyzed being redirected the ARP request message that send by CPU, to obtain the information such as transmitting terminal IP address that ARP request message carries, transmitting terminal MAC Address, VLAN and inbound port.

Based on this, BEB2 is on the VLAN connecting main frame 2 after enable ARPSnooping function, if the port of BEB2 in this VLAN receives ARP request message, then BEB2 needs the IP address and the MAC Address that learn the main frame 2 carried in this ARP request message, and in the routing table of this equipment, record the IP address of this main frame 2 and the corresponding relation of MAC Address, the out of Memory in routing table is repeated no more.

Step 3, BEB2 carry out MAC-in-MAC encapsulation to ARP request message, by broadcast mode, the ARP request message after MAC-in-MAC encapsulation can be sent to gateway device (gateway device is deployed on BCB1).

Step 4, gateway device carry out decapsulation, to obtain corresponding ARP request message to the ARP request message after MAC-in-MAC encapsulation; Source MAC study is carried out according to ARP request message, thus study is to the MAC Address (2-2-2) of main frame 2, in mac address table, record the corresponding relation of MAC Address (2-2-2) and neighbor information, this neighbor information comprises packaging information when port (i.e. the receiving port of ARP request message) corresponding to MAC Address (2-2-2) and MAC-in-MAC forwarding; The MAC Address (2-2-2) of the transmitting terminal carried in study ARP request message and IP address (2.2.2.2), record the MAC Address (2-2-2) of transmitting terminal, the corresponding relation between IP address (2.2.2.2) and receiving port in the routing table.

In the embodiment of the present invention, gateway device is after receiving the ARP request message (carrying MAC Address (2-2-2) and IP address (2.2.2.2) of main frame 2) from BEB2, this gateway device needs the MAC Address (2-2-2) and IP address (2.2.2.2) that learn the main frame 2 carried in ARP request message, and obtain IP address (private network IP address 192.168.1.5) and the MAC Address (6-6-6) of BEB2 further, thus record MAC Address (2-2-2) and IP address (2.2.2.2) of main frame 2 in the routing table, and the corresponding relation between the IP address (192.168.1.5) of BEB2 and MAC Address (6-6-6).

Further, in order to the IP address and the MAC Address that enable gateway device obtain BEB2, gateway device can corresponding relation in topology table in advance in maintaining network between the IP address of each BEB equipment and MAC Address; When receiving the ARP request message from BEB2, gateway device directly determines the MAC Address of BEB2, and inquires about topology table by the MAC Address of BEB2, obtains the IP address of BEB2.

Step 5, gateway device respond described ARP request message, generate an arp reply message, carry out MAC-in-MAC encapsulation to this arp reply message, and the arp reply message after encapsulation is sent to BEB2; In this arp reply message, transmitting terminal IP address is the IP address (2.2.2.1) of gateway device, destination end IP address is the IP address (2.2.2.2) of main frame 2, transmitting terminal MAC Address is the MAC Address (3-3-3) of gateway device, destination end MAC Address is the MAC Address (2-2-2) of main frame 1, and the source of the ethernet header of this arp reply message, target MAC (Media Access Control) address are respectively the MAC Address of gateway device and main frame 2.

Step 6, BEB2 carry out decapsulation to the arp reply message after MAC-in-MAC encapsulation, obtain arp reply message, source MAC study is carried out according to this arp reply message, thus study is to the MAC Address of gateway device, in mac address table, record the MAC Address (3-3-3) of gateway device and the corresponding relation of neighbor information, this neighbor information comprises outbound port (i.e. the receiving port of arp reply message) corresponding to gateway device MAC Address (3-3-3) and MAC-in-MAC packaging information.

Step 7, BEB2 inquire about mac address table according to the target MAC (Media Access Control) address (2-2-2) of this arp reply message, obtain corresponding outbound port, thus by this outbound port, arp reply message are sent to main frame 2.

Step 8, main frame 2 are after receiving arp reply message, and the corresponding relation between the IP address (2.2.2.1) of gateway device and MAC Address (3-3-3) is arrived in study.

Three, under above-mentioned application scenarios, the ARP learning process of Intrusion Detection based on host 1 and the ARP learning process of main frame 2, when main frame 1 sends message to main frame 2, as shown in Figure 3, this message transmitting method comprises the following steps:

Step 301, main frame 1 sends message to main frame 2, and the object IP address of this message is the IP address (2.2.2.2) of main frame 2, and target MAC (Media Access Control) address is the MAC Address (3-3-3) of gateway device; The source IP address of this message is the IP address (1.1.1.2) of main frame 1, and source MAC is the MAC Address (1-1-1) of main frame 1.

Step 302, BEB1 Receiving Host 1 sends to the above-mentioned message of main frame 2, and (object IP address is the IP address (2.2.2.2) of main frame 2, target MAC (Media Access Control) address is the MAC Address (3-3-3) of gateway device), MAC-in-MAC encapsulation is carried out to message, and the message after being encapsulated by MAC-in-MAC sends to gateway device.

Concrete, BEB1 needs to utilize the target MAC (Media Access Control) address of message (3-3-3) to inquire about mac address table, the list item of hit (3-3-3); After carrying out MAC-in-MAC encapsulation according to the neighbor information of list item of (3-3-3) to message, the message clean culture after utilizing outbound port corresponding to (3-3-3) list item to be encapsulated by MAC-in-MAC is needed to send to gateway device.

Step 303, gateway device carries out decapsulation to the message after MAC-in-MAC encapsulation, and (concrete decapsulation mode repeats no more, to obtain the message that main frame 1 sends to main frame 2), and when finding that target MAC (Media Access Control) address is this device mac address (3-3-3), utilize object IP address (2.2.2.2) table of query and routing of message, obtain IP address (192.168.1.5) and the MAC Address (6-6-6) of BEB2 corresponding to object IP address (2.2.2.2).

Concrete, in the routing table that gateway device is safeguarded, record the MAC Address (2-2-2) of main frame 2 and the corresponding relation between the IP address (192.168.1.5) of IP address (2.2.2.2) and BEB2 and MAC Address (6-6-6); Therefore, gateway device, when utilizing object IP address (2.2.2.2) table of query and routing, can obtain IP address (192.168.1.5) and the MAC Address (6-6-6) of BEB2.

Step 304, gateway device utilizes the IP address (192.168.1.5) of BEB2 and MAC Address (6-6-6) to carry out GRE encapsulation to message, concrete, first obtains GRE message for this message increases GRE head (GREheader); Again according to IP address (192.168.1.5) and the MAC Address (6-6-6) of BEB2, for this GRE message increases heading (Deliveryheader) and the ethernet header of host-host protocol, obtain the message after GRE encapsulation; Wherein, in the gre tunneling head of the message after GRE encapsulation, object IP address is the IP address (192.168.1.5) of BEB2, and target MAC (Media Access Control) address is the MAC Address (6-6-6) of BEB2.

Step 305, the target MAC (Media Access Control) address of the message after GRE encapsulation is the MAC Address (6-6-6) of BEB2, and the message after GRE encapsulation is sent to BEB2 according to this target MAC (Media Access Control) address by gateway device.

Step 306, BEB2 carries out GRE decapsulation to the message after GRE encapsulation, and (concrete decapsulation mode does not repeat them here, to obtain the message that main frame 1 sends to main frame 2), utilize object IP address (2.2.2.2) table of query and routing of message, obtain the MAC Address (2-2-2) of main frame 2.

Concrete, in the routing table that BEB2 safeguards, record the corresponding relation between the IP address (2.2.2.2) of main frame 2 and MAC Address (2-2-2); Therefore, BEB2, when utilizing object IP address (2.2.2.2) table of query and routing, can obtain the MAC Address (2-2-2) of main frame 2.

Step 307, the target MAC (Media Access Control) address of message is revised as the MAC Address (2-2-2) of main frame 2 by BEB2, the source MAC of message is revised as the MAC Address (6-6-6) of this equipment.

If when situation one gateway device carries out GRE encapsulation to message, peel target MAC (Media Access Control) address and the source MAC of message off, then BEB2 directly in message adding purpose MAC Address be the MAC Address (2-2-2) of main frame 2, source MAC is the MAC Address (6-6-6) of this equipment.

If when mode two gateway device carries out GRE encapsulation to message, do not peel target MAC (Media Access Control) address and the source MAC of message off, then the target MAC (Media Access Control) address of message is revised as the MAC Address (2-2-2) of main frame 2 by BEB2, the source MAC of message is revised as the MAC Address (6-6-6) of this equipment.

Step 308, amended message is sent to main frame 2 by BEB2.

Four, under above-mentioned application scenarios, the ARP learning process of Intrusion Detection based on host 1 and the ARP learning process of main frame 2, when main frame 2 sends message to main frame 1, as shown in Figure 4, this message transmitting method comprises the following steps:

Step 401, main frame 2 sends message to main frame 1, and the object IP address of this message is the IP address (1.1.1.2) of main frame 1, and target MAC (Media Access Control) address is the MAC Address (3-3-3) of gateway device; The source IP address of this message is the IP address (2.2.2.2) of main frame 2, and source MAC is the MAC Address (2-2-2) of main frame 2.

Step 402, BEB2 Receiving Host 2 sends to the above-mentioned message of main frame 1, and (object IP address is the IP address (1.1.1.2) of main frame 1, target MAC (Media Access Control) address is the MAC Address (3-3-3) of gateway device), MAC-in-MAC encapsulation is carried out to message, and the message after being encapsulated by MAC-in-MAC sends to gateway device.

Concrete, BEB2 needs to utilize the target MAC (Media Access Control) address of message (3-3-3) to inquire about mac address table, the list item of hit (3-3-3); After carrying out MAC-in-MAC encapsulation according to the neighbor information of list item of (3-3-3) to message, the message clean culture after utilizing outbound port corresponding to (3-3-3) list item to be encapsulated by MAC-in-MAC is needed to send to gateway device.

Step 403, gateway device carries out decapsulation to the message after MAC-in-MAC encapsulation, and (concrete decapsulation mode repeats no more, to obtain the message that main frame 2 sends to main frame 1), and when finding that target MAC (Media Access Control) address is this device mac address (3-3-3), utilize object IP address (1.1.1.2) table of query and routing of message, obtain IP address (192.168.1.4) and the MAC Address (5-5-5) of BEB1 corresponding to object IP address (1.1.1.2).

Concrete, in the routing table that gateway device is safeguarded, record the MAC Address (1-1-1) of main frame 1 and the corresponding relation between the IP address (192.168.1.4) of IP address (1.1.1.2) and BEB1 and MAC Address (5-5-5); Therefore, gateway device, when utilizing object IP address (1.1.1.2) table of query and routing, can obtain IP address (192.168.1.4) and the MAC Address (5-5-5) of BEB1.

Step 404, gateway device utilizes the IP address (192.168.1.4) of BEB1 and MAC Address (5-5-5) to carry out GRE encapsulation to message, concrete, first obtains GRE message for this message increases GRE head (GREheader); Again according to IP address (192.168.1.4) and the MAC Address (5-5-5) of BEB1, for this GRE message increases heading (Deliveryheader) and the ethernet header of host-host protocol, obtain the message after GRE encapsulation; Wherein, in the gre tunneling head of the message after GRE encapsulation, object IP address is the IP address (192.168.1.4) of BEB1, and target MAC (Media Access Control) address is the MAC Address (5-5-5) of BEB1.

Step 405, the target MAC (Media Access Control) address of the message after GRE encapsulation is the MAC Address (5-5-5) of BEB1, and gateway device sends to BEB1 according to the message after this target MAC (Media Access Control) address GRE encapsulation.

Step 406, BEB1 carries out GRE decapsulation to the message after GRE encapsulation, and (concrete decapsulation mode does not repeat them here, to obtain the message that main frame 2 sends to main frame 1), utilize object IP address (1.1.1.2) table of query and routing of message, obtain the MAC Address (1-1-1) of main frame 1.

Concrete, in the routing table that BEB1 safeguards, record the corresponding relation between the IP address (1.1.1.2) of main frame 1 and MAC Address (1-1-1); Therefore, BEB1, when utilizing object IP address (1.1.1.2) table of query and routing, can obtain the MAC Address (1-1-1) of main frame 1.

Step 407, the target MAC (Media Access Control) address of message is revised as the MAC Address (1-1-1) of main frame 1 by BEB1, the source MAC of message is revised as the MAC Address (5-5-5) of this equipment.

If when situation one gateway device carries out GRE encapsulation to message, peel target MAC (Media Access Control) address and the source MAC of message off, then BEB1 directly in message adding purpose MAC Address be the MAC Address (1-1-1) of main frame 1, source MAC is the MAC Address (5-5-5) of this equipment.

If when mode two gateway device carries out GRE encapsulation to message, do not peel target MAC (Media Access Control) address and the source MAC of message off, then the target MAC (Media Access Control) address of message is revised as the MAC Address (1-1-1) of main frame 1 by BEB1, the source MAC of message is revised as the MAC Address (5-5-5) of this equipment.

Step 408, amended message is sent to main frame 1 by BEB1.

It should be noted that, above-mentioned is the message transmissions flow process of SPBM network based on SPB agreement, for the TRILL network based on TRILL protocol, BEB equipment is corresponding entrance routing bridge (IngressRB, IngressRoutingBridge) equipment (being equivalent to source BEB equipment) and outlet RB equipment (EgressRB) (being equivalent to object BEB equipment), BCB equipment is for transmitting RB(TransitRB accordingly) equipment; In TRILL network, compared with above-mentioned message transmissions flow process, just many ECMP(EqualCostMultipathRouting, equal cost multipath) process, namely gateway device is when sending message to entrance RB equipment and outlet RB equipment, needs to calculate cryptographic Hash according to the field of message, thus selects an optimal path to send message, other flow processs and above-mentioned message transmissions flow process similar, do not repeat them here.

Certainly; the method that the embodiment of the present invention provides is not limited to the SPBM network based on SPB agreement and the TRILL network based on TRILL protocol; other is realized to the network of message repeating according to above-mentioned flow process, all within scope, the process for other network does not repeat them here.

In sum, in the embodiment of the present invention, gateway device is by carrying out GRE encapsulation to message, and message after sending GRE encapsulation to BEB equipment, to avoid first utilizing object IP address lookup routing table, the handling process of recycling target MAC (Media Access Control) address inquiry mac address table, thus cannot realize first utilizing object IP address lookup routing table in the handling process of chip, during recycling target MAC (Media Access Control) address inquiry mac address table, normally can forward the message needing between different terminal equipment to transmit; Further, can avoid when SPBM network uses SPB agreement or use TRILL protocol in TRILL network, message cannot the situation of normal transmission, makes it still can at corresponding network repeating.

Based on the inventive concept same with said method, a kind of gateway device is additionally provided in the embodiment of the present invention, be applied in the large double layer network comprising terminal equipment, edge bridge equipment and described gateway device, described edge bridge equipment is directly connected with described terminal equipment, as shown in Figure 5, described gateway device comprises:

Receiver module 11, for receiving the second message of large double layer network encapsulation;

Decapsulation module 12, for obtaining the 3rd message after the second message decapsulation to the large double layer network encapsulation received;

Enquiry module 13, for when the target MAC (Media Access Control) address of described 3rd message is the MAC Address of this gateway device, according to the object IP address of described 3rd message, search the corresponding relation between the IP address of the terminal device IP address and MAC Address safeguarded in local routing table and the edge bridge equipment be connected with terminal equipment and MAC Address;

Package module 14, for according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generates first message after carrying out GRE encapsulation to described 3rd message;

Sending module 15, the first message for being encapsulated by GRE sends to described edge bridge equipment; By described edge bridge equipment, the 3rd message is obtained to described first message solution GRE encapsulation, according to the object IP address of the 3rd message, search the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forward after determining the MAC Address that the object IP address of the 3rd message is corresponding;

Described receiver module 11, the ARP request message from terminal equipment of the edge bridge device forwards be also connected for receiving terminal apparatus, the IP address of carried terminal equipment and MAC Address in ARP request message; This gateway device also comprises: maintenance module 16; For learning IP address and the MAC Address of the terminal equipment carried in described ARP request message, and obtain IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected; And, in local routing table, record terminal device IP address and MAC Address and the corresponding relation between the IP address of edge bridge equipment be connected with terminal equipment and MAC Address.

Described maintenance module 16, is further used in topology table, safeguard the corresponding relation between the IP address of each edge bridge equipment in described large double layer network and MAC Address in advance; When receiving the ARP request message from edge bridge equipment, determine the MAC Address of described edge bridge equipment, and inquire about described topology table by the MAC Address of described edge bridge equipment, to obtain the IP address of described edge bridge equipment.

Wherein, the modules of apparatus of the present invention can be integrated in one, and also can be separated deployment.Above-mentioned module can merge into a module, also can split into multiple submodule further.

Based on the inventive concept same with said method, a kind of edge bridge equipment is additionally provided in the embodiment of the present invention, be applied in the large double layer network comprising terminal equipment, described edge bridge equipment and gateway device, wherein, described edge bridge equipment is directly connected with described terminal equipment, as shown in Figure 6, described edge bridge equipment specifically comprises:

Receiver module 21, for the first message that the GRE received from described gateway device encapsulates, described first message is that described gateway device obtains the 3rd message after the second message decapsulation to the large double layer network encapsulation received, and the target MAC (Media Access Control) address of the 3rd message is when being the MAC Address of described gateway device, according to the object IP address of the 3rd message, search the terminal device IP address and MAC Address safeguarded in local routing table, and the corresponding relation between the IP address of the edge bridge equipment to be connected with terminal equipment and MAC Address, and according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generate and send after GRE encapsulation is carried out to the 3rd message,

Decapsulation module 22, for obtaining the 3rd message to described first message solution GRE encapsulation;

Processing module 23, for the object IP address according to described 3rd message, searches the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, forwards after determining the MAC Address that the object IP address of described 3rd message is corresponding;

Described receiver module 21, also for receiving the ARP request message from local terminal, carries IP address and the MAC Address of described local terminal in described ARP request message; This edge bridge equipment also comprises maintenance module 24, for learning IP address and the MAC Address of the local terminal carried in described ARP request message, and in local routing table, records the IP address of described local terminal and the corresponding relation of MAC Address.

Described maintenance module 24, specifically for enable ARPSnooping function on the VLAN connecting local terminal, and enable this edge bridge of ARPSnooping functional representation equipment needs to learn the IP address of carrying in the ARP request message that all of the port in described VLAN receives and MAC Address;

Through the above description of the embodiments, those skilled in the art can be well understood to the mode that the present invention can add required general hardware platform by software and realize, and can certainly pass through hardware, but in a lot of situation, the former is better execution mode.Based on such understanding, technical scheme of the present invention can embody with the form of software product the part that prior art contributes in essence in other words, this computer software product is stored in a storage medium, comprising some instructions in order to make a computer equipment (can be personal computer, server, or the network equipment etc.) perform method described in each embodiment of the present invention.

It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, the module in accompanying drawing or flow process might not be that enforcement the present invention is necessary.

It will be appreciated by those skilled in the art that the module in the device in embodiment can carry out being distributed in the device of embodiment according to embodiment description, also can carry out respective change and be arranged in the one or more devices being different from the present embodiment.The module of above-described embodiment can merge into a module, also can split into multiple submodule further.

The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.

Be only several specific embodiment of the present invention above, but the present invention is not limited thereto, the changes that any person skilled in the art can think of all should fall into protection scope of the present invention.

Claims

1. a message transmitting method, is applied in the large double layer network comprising terminal equipment, edge bridge equipment and gateway device, and wherein, described edge bridge equipment is directly connected with described terminal equipment, it is characterized in that, said method comprising the steps of:

Described edge bridge equipment receives the first message that the generic route encapsulation GRE from described gateway device encapsulates, described first message is that described gateway device obtains the 3rd message after the second message decapsulation to the large double layer network encapsulation received, and the target MAC (Media Access Control) address of the 3rd message is when being the MAC Address of described gateway device, according to the object IP address of the 3rd message, search the terminal device IP address and MAC Address safeguarded in local routing table, and the corresponding relation between the IP address of the edge bridge equipment to be connected with terminal equipment and MAC Address, and according to the IP address of edge bridge equipment corresponding to the object IP address of the 3rd message found and MAC Address, generate and send after GRE encapsulation is carried out to the 3rd message,

Wherein, described large double layer network is the shortest path bridge SPBM network of medium access control pattern, and described edge bridge equipment is backbone edges bridge BEB equipment, and described large double layer network is encapsulated as MAC-in-MAC encapsulation; Or described large double layer network is multilink transparent interconnection TRILL network, backbone edges bridge RB equipment for the purpose of described edge bridge equipment, described large double layer network is encapsulated as TRILL encapsulation.

2. the method for claim 1, is characterized in that, described edge bridge equipment searches the IP address of the local terminal safeguarded in local routing table and the corresponding relation of MAC Address, also comprises before:

3. method as claimed in claim 2, it is characterized in that, the IP address of the local terminal carried in ARP request message described in described edge bridge learning equipment and MAC Address, and in local routing table, record the IP address of described local terminal and the corresponding relation of MAC Address, specifically comprise:

4. a message transmitting method, is applied in the large double layer network comprising terminal equipment, edge bridge equipment and gateway device, and wherein, described edge bridge equipment is directly connected with described terminal equipment, it is characterized in that, said method comprising the steps of:

5. method as claimed in claim 4, it is characterized in that, before described gateway device searches the corresponding relation between the IP address of the terminal device IP address and MAC Address safeguarded in local routing table and the edge bridge equipment be connected with terminal equipment and MAC Address, described method also comprises:

6. method as claimed in claim 5, is characterized in that, described gateway device obtains IP address and the MAC Address of the edge bridge equipment that terminal equipment is connected, and specifically comprises:

7. a gateway device, is applied in the large double layer network comprising terminal equipment, edge bridge equipment and described gateway device, and wherein, described edge bridge equipment is directly connected with described terminal equipment, it is characterized in that, described gateway device specifically comprises:

8. equipment as claimed in claim 7, is characterized in that, also comprise: maintenance module;

9. equipment as claimed in claim 8, is characterized in that,

10. an edge bridge equipment, be applied in the large double layer network comprising terminal equipment, described edge bridge equipment and gateway device, wherein, described edge bridge equipment is directly connected with described terminal equipment, it is characterized in that, described edge bridge equipment specifically comprises:

11. equipment as claimed in claim 10, is characterized in that, also comprise: maintenance module;

12. equipment as claimed in claim 11, is characterized in that,