Virtual Private Network Implementation Method and System Based on Traffic Engineering Tunnel

• US 20140219135A1
• Filed: 04/14/2014
• Published: 08/07/2014
• Est. Priority Date: 10/13/2011
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Li, Zhenbin, Yu, Jingming, Qu, Dan
• Application Number:
  US14/252,055
• Publication Number:
  US 20140219135A1
• Time in Patent Office: Days
• US Class Current: 370/254
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies

Abstract

Embodiments of the present invention provide a virtual private network implementation method and system based on a traffic engineering tunnel. The virtual private network implementation method based on a traffic engineering tunnel includes: establishing a traffic engineering tunnel in response to establishment information about a virtual private network service; bearing the virtual private network service using the traffic engineering tunnel; and deleting the traffic engineering tunnel in response to cancellation information about the virtual private network service. In the foregoing manner, a traffic engineering tunnel is dynamically established or deleted according to a requirement of a virtual private network service, a mechanism for establishing a TE tunnel as required is provided, and the tunnel not used by the virtual private network service is deleted in time, thereby effectively saving network resources.

Claims

1. A virtual private network implementation method based on a traffic engineering tunnel, wherein the virtual private network implementation method comprises:

establishing a traffic engineering tunnel in response to establishment information associated with a virtual private network service;

bearing the virtual private network service using the traffic engineering tunnel; and

deleting the traffic engineering tunnel in response to cancellation information associated with the virtual private network service.

2. The virtual private network implementation method according to claim 1, wherein t establishing a traffic engineering tunnel in response to the establishment information associated with the virtual private network service comprises:

setting, by using a tunnel policy, a tunnel template associated with the virtual private network service, wherein the tunnel template is used to control public attributes of the traffic engineering tunnel.

3. The virtual private network implementation method according to claim 2, wherein setting, by using the tunnel policy, the tunnel template associated with the virtual private network service comprises:

setting the tunnel template for the virtual private network service according to a service requirement of the virtual private network service, wherein the tunnel template is used to confine the traffic engineering tunnel on a corresponding forwarding plane.

4. The virtual private network implementation method according to claim 1, wherein the virtual private network service is a multi-protocol label switching layer-3 virtual private network service, and wherein establishing the traffic engineering tunnel in response to the establishment information associated with the virtual private network service comprises:

triggering automatic establishment of the traffic engineering tunnel after virtual private network routing information is transmitted through the Border Gateway Protocol is learned.

5. The virtual private network implementation method according to claim 1, wherein establishing the traffic engineering tunnel in response to the establishment information associated with the virtual private network service comprises:

establishing the traffic engineering tunnel segment by segment between a provider edge device and an autonomous system border router in each autonomous system among at least two interconnected autonomous systems.

6. The virtual private network implementation method according to claim 5, wherein establishing the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system among the at least two interconnected autonomous systems comprises:

configuring virtual routing forwarding instances on the provider edge device and the autonomous system border router;

setting a corresponding tunnel template on the provider edge device and the autonomous system border router for virtual private network routing information; and

establishing the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system using the tunnel template.

7. The virtual private network implementation method according to claim 5, wherein establishing the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system among the at least two interconnected autonomous systems comprises:

configuring a virtual routing forwarding instance on the provider edge device;

setting a tunnel template on the autonomous system border router for a Border Gateway Protocol peer using a Border Gateway Protocol routing policy; and

establishing the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system using the tunnel template.

8. The virtual private network implementation method according to claim 5, wherein establishing the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system among the at least two interconnected autonomous systems comprises:

setting a tunnel template on the provider edge device and the autonomous system border router for a Border Gateway Protocol peer using a Border Gateway Protocol routing policy; and

establishing the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system using the tunnel template after Border Gateway Protocol routing information with a public network label is learned.

9. The virtual private network implementation method according to claim 1, wherein the virtual private network service is a multi-protocol label switching layer-2 virtual private network service, and wherein establishing a traffic engineering tunnel in response to establishment information associated with the virtual private network service comprises:

triggering automatic establishment of the traffic engineering tunnel through static or dynamic layer-2 virtual private network virtual circuit information.

10. The virtual private network implementation method according to claim 9, wherein triggering automatic establishment of the traffic engineering tunnel through static or dynamic layer-2 virtual private network virtual circuit information comprises:

setting the tunnel template during configuration of the layer-2 virtual private network virtual circuit information;

triggering the automatic establishment of the traffic engineering tunnel based on the tunnel template during the configuration of the layer-2 virtual private network virtual circuit information when the layer-2 virtual private network virtual circuit information transmitted through the Label Distribution Protocol or the Border Gateway Protocol is learned.

11. A virtual private network implementation system based on a traffic engineering tunnel, wherein the virtual private network implementation system comprises:

a tunnel establishment module, configured to establish a traffic engineering tunnel in response to establishment information associated with a virtual private network service;

a tunnel maintenance module, configured to bear the virtual private network service using the traffic engineering tunnel; and

a tunnel deletion module, configured to delete the traffic engineering tunnel in response to cancellation information associated with the virtual private network service.

12. The virtual private network implementation system according to claim 11, wherein the tunnel establishment module is configured to use a tunnel policy to set a tunnel template associated with the virtual private network service, and wherein the tunnel template is used to control public attributes of the traffic engineering tunnel.

13. The virtual private network implementation system according to claim 12, wherein the tunnel establishment module sets the tunnel template for the virtual private network service according to a service requirement of the virtual private network service, and wherein the tunnel template is used to confine the traffic engineering tunnel on a corresponding forwarding plane.

14. The virtual private network implementation system according to claim 11, wherein the virtual private network service is a multi-protocol label switching layer-3 virtual private network service, and wherein the tunnel establishment module triggers automatic establishment of the traffic engineering tunnel after learning virtual private network routing information transmitted through the Border Gateway Protocol.

15. The virtual private network implementation system according to claim 11, wherein the tunnel establishment module establishes the traffic engineering tunnel segment by segment between a provider edge device and an autonomous system border router in each autonomous system among at least two interconnected autonomous systems.

16. The virtual private network implementation system according to claim 15, wherein the tunnel establishment module configures virtual routing forwarding instances on the provider edge device and the autonomous system border router, sets a corresponding tunnel template on the provider edge device and the autonomous system border router for virtual private network routing information, and establishes the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system using the tunnel template.

17. The virtual private network implementation system according to claim 15, wherein the tunnel establishment module configures a virtual routing forwarding instance on the provider edge device, sets a tunnel template on the autonomous system border router for a Border Gateway Protocol peer using a Border Gateway Protocol routing policy, and establishes the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system using the tunnel template.

18. The virtual private network implementation system according to claim 15, wherein the tunnel establishment module sets a tunnel template on the provider edge device and the autonomous system border router for a Border Gateway Protocol peer using a Border Gateway Protocol routing policy, and establishes the traffic engineering tunnel segment by segment between the provider edge device and the autonomous system border router in each autonomous system using the tunnel template after learning Border Gateway Protocol routing information with a public network label.

19. The virtual private network implementation system according to claim 11, wherein the virtual private network service is a multi-protocol label switching layer-2 virtual private network service, and the tunnel establishment module triggers automatic establishment of the traffic engineering tunnel through static or dynamic layer-2 virtual private network virtual circuit information.

20. The virtual private network implementation system according to claim 19, wherein the tunnel establishment module sets the tunnel template during configuration of the layer-2 virtual private network virtual circuit information, and triggers the automatic establishment of the traffic engineering tunnel based on the tunnel template during the configuration of the layer-2 virtual private network virtual circuit information or when the layer-2 virtual private network virtual circuit information transmitted through the Label Distribution Protocol or the Border Gateway Protocol is learned.