Method for establishing restricted broadcast groups in a switched network

• US 5,946,308 A
• Filed: 10/30/1997
• Issued: 08/31/1999
• Est. Priority Date: 11/15/1995
• Status: Expired due to Term

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Cabletron Systems Incorporated (Extreme Networks, Inc.)
• Inventors: Dobbins, Kurt, Skubisz, Michael, Andlauer, Phil
• Primary Examiner(s): NGUYEN, CHAU T
• Application Number:
  US08/960,919
• Time in Patent Office: 670 Days
• Field of Search: 370/390, 370/392, 370/400, 370/401-404, 370/432, 370/396, 370/469, 370/389, 370/474, 340/825.5, 340/825.52, 395/200.75
• US Class Current: 370/392
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 12/1877 Measures taken prior to transmission
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 12/46 Interconnection of networks
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/467 Arrangements for supporting untagged frames, e.g. port-based VLANs
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/16 Multipoint routing
• CPC Class Codes: H04L 45/24 Multipath
• CPC Class Codes: H04L 45/34 Source routing
• CPC Class Codes: H04L 49/201 Multicast operation; Broadcast operation
• CPC Class Codes: H04L 49/351 for local area network [LAN], e.g. Ethernet switches
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]

Abstract

Method and apparatus for establishing restricted broadcast groups in a switched network. The method assigns different virtual LAN identifiers (VLAN-IDs) to different subsets of associated end systems or access ports. Tables are maintained for mapping the VLAN-IDs with associated end systems and access ports. When a broadcast packet is received at a first switch, it is encapsulated with a VLAN header, including the VLAN-IDs, and sent out a multicast channel to all other switches in the network (domain). The original packet is sent out the other access ports of the receiving switch for the designated VLAN-IDs. The switches receiving the VLAN packet remove the header and send the original packet out access ports associated with the VLAN-IDs extracted from the header. The method provides a mechanism for forwarding broadcast packets of a protocol not supported by the switching mechanism, as well as multicast packets and unicast packets from undiscovered end systems.

Claims

1. A method of restricted flooding of a data packet, of one of a broadcast, multicast and unknown destination type, in a switched data communications network, the network including a plurality of end systems and switches connected by links, the switches having access ports connected to end systems and network ports connected to other switches, the method including steps of:

a. assigning at least one identifier to a respective subset of end systems;

b. mapping the at least one assigned identifier to an access port attached to at least one end system in the respective subset of end systems; and

c. when the data packet is received from a source end system at a receiving access port of a first switch;

i) determining one or more identifiers associated with the source end system;

ii) encapsulating the data packet by adding a header with the one or more determined identifiers;

iii) forwarding the encapsulated data packet to all or a subset of other switches in the network; and

iv) determining if at least one access port other than the receiving access port on the first switch is associated with the one or more determined identifiers and forwarding the data packet out the at least one determined access port.

2. The method as recited in claim 1, further including steps of:

d. when the encapsulated data packet is received at a second switch with access ports;

i) stripping the header from the encapsulated data packet and determining the one or more encapsulated identifiers in the header of the encapsulated data packet;

ii) determining if at least one access port of the second switch is associated with the one or more encapsulated identifiers; and

iii) forwarding the data packet out the at least one determined access port of the second switch.

3. The method as recited in claim 2, including:

listening to end systems heard on respective access ports at each switch and maintaining the end systems heard and their respective access ports in a mapping table at the respective switch; and

upon receipt of a unicast packet for a destination end system unknown to the first switch, completing step c for the unicast packet and then at the next switch reviewing the mapping table for the respective access port for the destination end system and forwarding the packet out the respective access port.

4. The method as recited in claim 1, wherein if in step c(iv) no other access port is determined, discarding the data packet.

5. The method as recited in claim 1, wherein step b includes steps of:

each switch maintaining a first table for relating the at least one assigned identifier to the end systems of the respective switch; and

each switch maintaining a second table for relating the access ports of the respective switch to assigned identifiers.

6. The method as recited in claim 5, wherein step c.i) includes a step of:

reviewing the first table for the one or more identifiers associated with the source end system.

7. The method as recited in claim 6, wherein step c.iv) includes a step of:

reviewing the second table for an access port associated with the one or more determined identifiers.

8. The method as recited in claim 7, wherein the assigned identifier is a virtual LAN identifier.

9. The method as recited in claim 1, wherein the received data packet is of a protocol not supported by a protocol-specific call processor in the first switch.

10. The method as recited in claim 1, including:

maintaining a common registry of assigned identifiers.

11. The method as recited in claim 10, including:

registering each end system or access port with the common registry, and returning a list of assigned identifiers from the common registry to each switch for the end systems or access ports of the respective switch.

12. The method as recited in claim 10, including:

sending a signal from the first switch to the common registry to resolve an end system or access port to its assigned identifiers.

13. The method as recited in claim 1, including:

maintaining the mapping at each switch for the access ports of the respective switch.

14. The method as recited in claim 1, including:

prior to assigning an identifier to a specific end system maintaining a default identifier for that specific end system which maps to predetermined access ports.

15. The method as recited in claim 1, including:

maintaining a multicast channel of connections between all or a subset of switches and wherein step c(iii) comprises forwarding the encapsulated packet on the multicast channel.

16. The method as recited in claim 15, wherein the channel includes:

a point-to-multipoint connection from each switch to all other switches in the network.

17. The method as recited in claim 1, wherein step c(iii) includes providing a distributed service in the switches for forwarding the encapsulated data packet.

18. The method as recited in claim 1, wherein the identifier is assigned based on a policy work group definition.

19. The method as recited in claim 1, including:

maintaining at least one mapping table at each switch for performing the mapping step.

20. The method as recited in claim 19, including:

listening to end systems heard on respective access ports at each switch and maintaining the end systems heard and their respective access ports in the mapping table at the respective switch.

21. The method as recited in claim 18, including:

assigning a reserved identifier without limitation as to end system and access port.

22. The method as recited in claim 1, including:

maintaining a Management Information Base (MIB) interface at each switch for programming at least one mapping table, the mapping table being used to perform the mapping step.

23. The method as recited in claim 22, wherein:

using a Simple Network Management Protocol (SNMP) set message for maintaining the mapping table at each switch.

24. The method as recited in claim 1, including:

maintaining a status table at each switch for enabling and disabling the respective subset.

25. A switch for restricted flooding of a data packet, of one of a broadcast, multicast and unknown destination type, in a switched data communications network, the network including a plurality of end systems and switches connected by links, the switch having access ports connected to end systems and network ports connected to other switches, the switch comprising:

means for assigning at least one identifier to a respective subset of end systems;

means for mapping the at least one assigned identifier to an access port attached to at least one end system in the respective subset of end systems;

means for receiving the data packet from a source end system at a receiving access port;

means for determining one or more identifiers associated with the source end system;

means for encapsulating the data packet by adding a header with the one or more determined identifiers;

means for forwarding the encapsulated data packet to all or a subset of other switches in the network;

means for determining if at least one access port on the switch is associated with the one or more determined identifiers; and

means for forwarding the data packet out the at least one determined access port other than the receiving access port.

26. The switch as recited in claim 25, further comprising:

means for receiving an encapsulated data packet on a network port of a receiving switch;

means for stripping the header from the encapsulated data packet to determine a stripped data packet;

means for determining the one or more encapsulated identifiers in the header of the encapsulated data packet;

means for determining if at least one access port of the receiving switch is associated with the one or more encapsulated identifiers; and

means for forwarding the stripped data packet out the at least one determined access port of the receiving switch associated with the one or more encapsulated identifiers.

27. In a switched communications network including a plurality of end systems, a method of restrictive flooding of a data packet selected from the group consisting of a broadcast packet, a multicast packet, and an unknown destination packet of a protocol not supported by a call processor in an access switch which receives the data packet, the method comprising:

assigning at least one identifier to a respective subset of end systems;

mapping the at least one assigned identifier to an access port of the access switch attached to at least one end system in the respective subset of end systems;

upon receipt of the data packet at the access switch, encapsulating the data packet with the at least one indentifier assigned to a source end system of the data packet and forwarding the encapsulated packet to all or a subset of other switches in the network, and sending the original data packet to access ports having the at least one identifier; and

upon receipt of the encapsulated packet at a receiving switch, de-encapsulating the packet and forwarding the de-encapsulated packet to the access ports having the at least one identifier.