Network interface apparatus for transmitting a data packet

• US 6,198,741 B1
• Filed: 12/12/1997
• Issued: 03/06/2001
• Est. Priority Date: 12/17/1996
• Status: Expired due to Fees

• Current Assignee: Kawasaki MicroElectronics (Megachips Corporation)
• Original Assignee: Kawasaki Steel Corporation (JFE Holdings Incorporated)
• Inventors: Yoneda, Masato, Ishida, Yoshihiro, Yoshizawa, Hiroshi
• Primary Examiner(s): Vu, Huy D.
• Assistant Examiner(s): NGUYEN, TOAN D
• Application Number:
  US08/989,241
• Time in Patent Office: 1,180 Days
• Field of Search: 370/401-405, 370/389, 370/392, 370/379, 370/382
• US Class Current: 370/392
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272

Abstract

The invention relates to a network interface apparatus called a router or the like which is provided in a network system and relays the transmission of a data packet as a bundle of information. In order to know the permission or inhibition of communication of the data packet at a high speed while suppressing an increase in memory capacity, there is provided a coupling management table in which one VLAN ID is allocated to each terminal (each MAC address) and coupling information showing whether the communication from the terminal having a transmitting side VLAN ID to the terminal having a receiving side VLAN ID is permitted (logic “1”) or inhibited (logic “0”) has been stored at each of the coordinate points using the VLAN ID on the transmitting side and the VLAN ID on the receiving side as coordinates.

Claims

1. A network interface apparatus which has a plurality of ports to which one or more terminals functioning as at least one of a transmitting source and a receiving destination of a data packet as a bundle of information including a transmitting source address and a receiving destination address can be connected and in which a VLAN serving as a group of a plurality of terminals in which a communication is permitted is defined independently of said ports to which each terminal is connected while permitting that one terminal overlappingly belongs to a plurality of different VLANs and which relays a transmission of said data packet from a transmitting source terminal to a receiving destination terminal, both the terminals belong to the same VLAN,

characterized in that said network interface apparatus comprises:

VLAN control table storage means for storing a VLAN control table in which addresses of said terminals connected to any one of said plurality of ports, port IDs to mutually identify said plurality of ports, and VLAN IDs defined in a manner such that when assuming that one or more terminals belonging to only one common VLAN or only a plurality of common VLANs are labeled as one unit group, a plurality of unit groups which are distributed so that all of said terminals connected to any one of said plurality of ports belong to only any one of said unit groups can be mutually identified are made correspond to each other;

coupling management table storage means for storing a coupling management table in which information indicating whether the transmission of said data packet from the terminal belonging to the unit group which is identified by each VLAN ID on the transmitting source terminal side to the terminal belonging to the unit group which is identified by each VLAN ID on the receiving destination terminal side is permitted or not has been stored in correspondence to both of each VLAN ID of each unit group to which each transmitting source terminal belongs and each VLAN ID of each unit group to which each receiving destination terminal belongs; and

transfer control means for controlling in a manner such that when said data packet is inputted from any one of said plurality of ports, with reference to said VLAN control table stored in said VLAN control table storage means, the VLAN ID of the unit group to which said transmitting source terminal belongs is known from said transmitting source address of said data packet and the VLAN ID of the unit group to which said receiving destination terminal belongs is known from said receiving destination address of said data packet, and subsequently, with reference to said coupling management table stored in said coupling management table storage means, whether said transmission of said data packet from said transmitting source terminal to said receiving destination terminal is permitted or not is known, and when said transmission is permitted, said data packet is transmitted to said port to which said receiving destination terminal is connected.

2. An apparatus according to claim 1, wherein said coupling management table storage means stores a coupling management table in which additional information regarding the transfer control of said data packet has been stored in addition to said information indicating whether said transmission of said data packet from the terminal belonging to the unit group which is identified by each VLAN ID on the transmitting side to the terminal belonging to the unit group which is identified by each VLAN ID on the receiving side is permitted or not in correspondence to both of each VLAN ID on the transmitting side and each VLAN ID on the receiving side.

3. An apparatus according to claim 1, wherein said coupling management table storage means stores a coupling management table of a 2-dimensional map format in which the VLAN ID on the transmitting side and the VLAN ID on the receiving side are set to coordinate axes of 2-dimensional coordinates and at each coordinate point which is determined by the VLAN ID on the transmitting side and the VLAN ID on the receiving side, a flag indicating whether said transmission of said data packet from the terminal belonging to the unit group which is identified by the VLAN ID on the transmitting side corresponding to each of said coordinate points to the terminal belonging to the unit group which is identified by the VLAN ID on the receiving side corresponding to each of said coordinate points is permitted or not has been stored.

4. An apparatus according to claim 1, wherein said coupling management table storage means stores a coupling management table of a 2-dimensional map format in which the VLAN ID on the transmitting side and the VLAN ID on the receiving side are set to coordinate axes of 2-dimensional coordinates and at each coordinate point which is determined by the VLAN ID on the transmitting side and the VLAN ID on the receiving side, a numerical value also serving as a flag indicating whether said transmission of said data packet from the terminal belonging to the unit group which is identified by the VLAN ID on the transmitting side corresponding to each of said coordinate points to the terminal belonging to the unit group which is identified by the VLAN ID on the receiving side corresponding to each of said coordinate points is permitted or not has been stored.

5. An apparatus according to claim 4, wherein the numerical value corresponding to each of said coordinate points is a numerical value showing a possible communicating time of once from the terminal belonging to the unit group which is identified by the VLAN ID on the transmitting side corresponding to each of said coordinate points to the terminal belonging to the unit group which is identified by the VLAN ID on the receiving side corresponding to each of said coordinate points.

6. An apparatus according to claim 4, wherein the numerical value corresponding to each of said coordinate points is a numerical value showing the number of possible times of communication from the terminal belonging to the unit group which is identified by the VLAN ID on the transmitting side corresponding to each of said coordinate points to the terminal belonging to the unit group which is identified by the VLAN ID on the receiving side corresponding to each of said coordinate points.

7. A network interface apparatus which has a plurality of ports to which one or more terminals functioning as at least one of a transmitting source and a receiving destination of a data packet as a bundle of information including a transmitting source address and a receiving destination address can be connected and in which a VLAN serving as a group of a plurality of terminals in which a communication is permitted is defined independently of said ports to which each terminal is connected while permitting that one terminal overlappingly belongs to a plurality of different VLANs and which relays a transmission of said data packet from a transmitting source terminal to a receiving destination terminal, both the terminals belong to the same VLAN,

characterized in that said network interface apparatus comprises:

a VLAN control table memory for storing a VLAN control table in which addresses of said terminals connected to any one of said plurality of ports, port IDs to mutually identify said plurality of ports, and VLAN IDs defined in a manner such that when assuming that one or more terminals belonging to only one common VLAN or only a plurality of common VLANs are labeled as one unit group, a plurality of unit groups which are distributed so that all of said terminals connected to any one of said plurality of ports belong to only any one of said unit groups can be mutually identified are made correspond to each other;

a coupling management table memory for storing a coupling management table in which information indicating whether the transmission of said data packet from the terminal belonging to the unit group which is identified by each VLAN ID on the transmitting source terminal side to the terminal belonging to the unit group which is identified by each VLAN ID on the receiving destination terminal side is permitted or not has been stored in correspondence to both of each VLAN ID of each unit group to which each transmitting source terminal belongs and each VLAN ID of each unit group to which each receiving destination terminal belongs;

port controllers in which said plurality of ports are provided in correspondence them and each of which inputs and outputs said data packet from said corresponding port;

a VLAN control processor for receiving said transmitting source address and said receiving destination address included in said data packet inputted from any one of said plurality of ports from said port controller corresponding to said port to which said data packet was inputted, for notifying said VLAN control table memory of said transmitting source address and said receiving destination address which were received, for receiving said port ID indicative of the port to which the receiving destination terminal that is specified by said receiving destination address is connected from said VLAN control table memory, for notifying said coupling management table memory of each VLAN ID of each unit group to which each of said transmitting source terminal and said receiving destination terminal which are specified by said transmitting source address and said receiving destination address belongs from said VLAN control table memory, for receiving information indicating whether said transmission of said data packet from said transmitting source terminal which is specified by said transmitting source address to said receiving destination terminal which is specified by said receiving destination address is permitted or not from said coupling management table memory, and for forming transmission control information showing said port ID indicating the permission of the transmission and also, indicating the port of a transmitting destination when said transmission is permitted; and

a switching fabric for receiving said data packet inputted from any one of said plurality of ports from said port controller corresponding to the port to which said data packet was inputted, for receiving said transmission control information corresponding to said data packet from said VLAN control processor, and for sending said received data packet to said port controller corresponding to the port which is specified by said port ID included in said transmission control information when said received transmission control information indicates the permission of the transmission.

8. An apparatus according to claim 7, wherein said VLAN control table memory is an associative memory to store said VLAN control table.