Network device that relays communication

• US 10,158,502 B2
• Filed: 01/11/2017
• Issued: 12/18/2018
• Est. Priority Date: 01/27/2016
• Status: Active Grant

• Current Assignee: Alaxala Networks Corporation (Fortinet Inc.)
• Original Assignee: Alaxala Networks Corporation (Fortinet Inc.)
• Inventors: Yoshino, Hiroyuki, Noumi, Motohide
• Primary Examiner(s): Aung, Sai
• Application Number:
  US15/403,391
• Publication Number:
  US 20170214549A1
• Time in Patent Office: 706 Days
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 45/66 Layer 2 routing, e.g. in Ethernet based MAN's
• CPC Class Codes: H04L 45/74 Address processing for routing

Abstract

A network device is configured to: detect a virtual network that is unable to relay communication as a failed virtual network; identify, as a failed virtual network identifier, a virtual network identifier assigned to a combination of the failed virtual network and a physical port through which communication of the failed virtual network pass, based on mapping information; identify a first virtual tunnel end point that relays communication of the failed virtual network; identify a second virtual tunnel end point of another network device that communicates with the first virtual tunnel end point based on the tunnel information; and send, to the second virtual tunnel end point, a clear request including the failed virtual network identifier and an IP address of the first virtual tunnel end point, and the clear request being used for clearing a MAC address used in Layer 2 protocol.

Claims

1. A network device configured to relay communication, the network device comprising:

a processor and a memory,

wherein the network device communicates with a terminal using a Layer 2 protocol and communicates with another network device via a physical port using a Layer 3 protocol,

wherein the network device has a virtual network on which communication with the terminal is conducted,

wherein the network device has a virtual tunnel end point that relays the communication on the virtual network to said another network device via the physical port,

wherein the memory stores tunnel information that indicates a virtual tunnel end point of the network device and that indicates a virtual tunnel end point of said another network device that communicates with said virtual tunnel end point of the network device,

wherein the memory stores mapping information that includes a virtual network identifier unique to a combination of the physical port and the virtual network and that includes an identifier of a virtual tunnel end point that relays communication on the virtual network, and

wherein the processor is configured to;

detect a virtual network that is unable to relay communication as a failed virtual network;

identify, as a failed virtual network identifier, a virtual network identifier assigned to a combination of the failed virtual network and a physical port through which communication of the failed virtual network pass, based on the mapping information;

identify a first virtual tunnel end point that relays communication of the failed virtual network;

identify a second virtual tunnel end point of another network device that communicates with the first virtual tunnel end point based on the tunnel information; and

send, to the second virtual tunnel end point, a clear request including the failed virtual network identifier and an IP address of the first virtual tunnel end point, the clear request being used for clearing a MAC address used in the Layer 2 protocol.

2. The network device according to claim 1,

wherein the processor is configured to send the clear request to the second virtual tunnel end point for a predetermined number of times unless the processor receives a response message to the clear request.

3. The network device according to claim 2,

wherein the network device includes a plurality of virtual networks, and

wherein the processor is configured to:

identify a plurality of virtual networks that are unable to relay communication as a plurality of failed virtual networks;

identify the failed virtual network identifier for each of the failed virtual networks, based on the mapping information;

identify the first virtual tunnel end point for each of the failed virtual networks;

identify the second virtual tunnel end point that communicates with the first virtual tunnel end point for each of the failed virtual networks based on the tunnel information; and

send, to the second virtual tunnel end point, a clear request that includes the failed virtual network identifier and an IP address of the first virtual tunnel end point for each of the failed virtual networks.

4. The network device according to claim 2,

wherein the network device includes a plurality of virtual networks, and

wherein the processor is configured to:

identify a plurality of virtual networks that are unable to relay communication as a plurality of failed virtual networks;

identify the failed virtual network identifier for each of the failed virtual networks, based on the mapping information;

identify the first virtual tunnel end point for each of the failed virtual networks;

identify the second virtual tunnel end point that communicates with the first virtual tunnel end point for each of the failed virtual networks based on the tunnel information;

generate, when the plurality of failed virtual networks belong to a single first virtual end point, one clear request that include a plurality of failed virtual network identifiers indicating the plurality of failed virtual networks and an IP address of said first virtual tunnel end point; and

send the generated single clear request to the second virtual tunnel end point.

5. The network device according to claim 2,

wherein the virtual network is VLAN,

wherein the virtual tunnel end point is VTEP, and

wherein the virtual network identifier is VNI.

6. A communication method by a network device,

wherein the network device communicates with a terminal using a Layer 2 protocol and communicates with another network device via a physical port using a Layer 3 protocol,

wherein the network device has a virtual network on which communication with the terminal is conducted,

wherein the network device has a virtual tunnel end point that relays the communication on the virtual network to said another network device via the physical port, and

wherein the communication method comprising:

detecting, by the network device, a virtual network that is unable to relay communication as a failed virtual network;

identifying, by the network device, as a failed virtual network identifier, a virtual network identifier assigned to a combination of the failed virtual network and a physical port through which communication of the failed virtual network pass, based on mapping information, the mapping information that includes a virtual network identifier unique to a combination of the physical port and the virtual network and that includes an identifier of a virtual tunnel end point that relays communication on the virtual network;

identifying, by the network device, a first virtual tunnel end point that relays communication of the failed virtual network;

identifying, by the network device, a second virtual tunnel end point of another network device that communicates with the first virtual tunnel end point based on tunnel information, the tunnel information that indicates a virtual tunnel end point of the network device and that indicates a virtual tunnel end point of said another network device that communicates with said virtual tunnel end point of the network device; and

sending, by the network device, to the second virtual tunnel end point, a clear request including the failed virtual network identifier and an IP address of the first virtual tunnel end point and being used for clearing a MAC address used in the Layer 2 protocol.

7. The communication method according to claim 6,

wherein the communication method further comprising sending, by the network device, the clear request to the second virtual tunnel end point for a predetermined number of times unless a response message to the clear request is received.

8. The communication method according to claim 7,

wherein the network device includes a plurality of virtual networks, and

wherein the communication method further comprising:

identifying, by the network device, a plurality of virtual networks that are unable to relay communication as a plurality of failed virtual networks;

identifying, by the network device, the failed virtual network identifier for each of the failed virtual networks, based on the mapping information;

identifying, by the network device, the first virtual tunnel end point for each of the failed virtual networks;

identifying, by the network device, the second virtual tunnel end point that communicates with the first virtual tunnel end point for each of the failed virtual networks based on the tunnel information; and

sending, by the network device, to the second virtual tunnel end point, a clear request that includes the failed virtual network identifier and an IP address of the first virtual tunnel end point for each of the failed virtual networks.

9. The communication method according to claim 7,

wherein the network device includes a plurality of virtual networks, and

wherein the communication method further comprising:

identifying, by the network device, a plurality of virtual networks that are unable to relay communication as a plurality of failed virtual networks;

identifying, by the network device, the failed virtual network identifier for each of the failed virtual networks, based on the mapping information;

identifying, by the network device, the first virtual tunnel end point for each of the failed virtual networks;

identifying, by the network device, the second virtual tunnel end point that communicates with the first virtual tunnel end point for each of the failed virtual networks based on the tunnel information;

generating, by the network device, when the plurality of failed virtual networks belong to a single first virtual end point, one clear request that include a plurality of failed virtual network identifiers indicating the plurality of failed virtual networks and an IP address of said first virtual tunnel end point; and

sending, by the network device, the generated single clear request to the second virtual tunnel end point.

10. The communication method according to claim 7,

wherein the virtual network is VLAN,

wherein the virtual tunnel end point is VTEP, and

wherein the virtual network identifier is VNI.

11. A network system configured to relay communication, the network system comprising:

a first network device and a second network device,

wherein the first network device and the second network device communicate with a terminal using a Layer 2 protocol and communicate with each other via a physical port using a Layer 3 protocol,

wherein the first network device and the second network device have a virtual network on which communication with the terminal is conducted,

wherein the first network device and the second network device have a virtual tunnel end point that relays the communication on the virtual network to another network device via the physical port,

wherein the first network device has a processor and a memory,

wherein the memory stores tunnel information that indicates a virtual tunnel end point of the first network device, and a virtual tunnel end point of the second network device that communicates with the virtual tunnel end point of the first network device,

wherein the memory stores mapping information that includes a virtual network identifier unique to a combination of the physical port and the virtual network and that includes an identifier of the virtual tunnel end point that relays communication on the virtual network,

wherein the processor is configured to;

detect a virtual network that is unable to relay communication as a failed virtual network;

identify, as a failed virtual network identifier, a virtual network identifier assigned to a combination of the failed virtual network and a physical port through which communication of the failed virtual network pass, based on the mapping information;

identify a first virtual tunnel end point that relays communication of the failed virtual network;

identify a second virtual tunnel end point of the second network device that communicates with the first virtual tunnel end point based on the tunnel information; and

send, to the second virtual tunnel end point, a clear request including the failed virtual network identifier and an IP address of the first virtual tunnel end point and being used for clearing a MAC address used in the Layer 2 protocol,

wherein the second network device has a processor and a memory;

wherein the memory of the second network device stores MAC address information that indicates an MAC address used for the communication with a first terminal, which communicates with the second network device, the virtual network identifier that indicates the virtual network on which the communication with the first terminal is conducted, and an IP address of the virtual tunnel end point on which the communication with the first terminal is conducted, and

wherein the processor of the second network device is configured to delete, from the MAC address information, an MAC address of a terminal conducting communication on the failed virtual network, based on the failed virtual network identifier, the IP address of the first virtual tunnel end point, and the MAC address information.

12. The network system according to claim 11,

wherein the processor of the first network device is configured to send the clear request to the second virtual tunnel end point for a predetermined number of times unless the processor receives a response message to the clear request.

13. The network system according to claim 12,

wherein the first network device includes a plurality of virtual networks, and

wherein the processor of the first network device is configured to:

identify a plurality of virtual networks that are unable to relay communication as a plurality of failed virtual networks;

identify the failed virtual network identifier for each of the failed virtual networks, based on the mapping information;

identify the first virtual tunnel end point for each of the failed virtual networks;

identify the second virtual tunnel end point that communicates with the first virtual tunnel end point for each of the failed virtual networks based on the tunnel information; and

send, to the second virtual tunnel end point, a clear request that includes the failed virtual network identifier and an IP address of the first virtual tunnel end point for each of the failed virtual networks.

14. The network system according to claim 12,

wherein the first network device includes a plurality of virtual networks, and

wherein the processor of the first network device is configured to:

identify a plurality of virtual networks that are unable to relay communication as a plurality of failed virtual networks;

identify the failed virtual network identifier for each of the failed virtual networks, based on the mapping information;

identify the first virtual tunnel end point for each of the failed virtual networks;

identify the second virtual tunnel end point that communicates with the first virtual tunnel end point for each of the failed virtual networks based on the tunnel information;

generate, when the plurality of failed virtual networks belong to a single first virtual end point, one clear request that include a plurality of failed virtual network identifiers indicating the plurality of failed virtual networks and an IP address of said first virtual tunnel end point; and

send the generated single clear request to the second virtual tunnel end point.

15. The network system according to claim 12,

wherein the virtual network is VLAN,

wherein the virtual tunnel end point is VTEP, and

wherein the virtual network identifier is VNI.