Fast connection protection in a virtual local area network based stack environment

• US 7,093,027 B1
• Filed: 07/23/2002
• Issued: 08/15/2006
• Est. Priority Date: 07/23/2002
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Atrica Israel Limited
• Inventors: Shabtay, Lior, Kluger, Yoav, Raz, Yaron
• Primary Examiner(s): Dinh, Dung C.
• Application Number:
  US10/201,852
• Time in Patent Office: 1,484 Days
• Field of Search: 709/218, 709/228, 709/238, 709/239, 709/242, 370216-217, 370/395.53, 714/4
• US Class Current: 709/239
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]

Abstract

A fast protection mechanism capable of maintaining end-to-end and fast local protection on the order of sub 50 ms for both VLAN only based connections and for connections that are based partially on VLAN technology and partially on MPLS technology. The present invention is suitable for use edge switches configured in a stack or ring topology. The NMS provisions both the main and alternative VLANs in each edge switch in the stack portions of the network. When a link failure occurs, the edge switches on either end of the failed link immediately switch all protected traffic going through that link to the alternative VLAN. The packets are then returned on the links over which they were received. Hello messages are used to signal the remote end that a link failure has occurred and that protected traffic must be switched to the main or alternative VLAN in accordance with the VLAN the Hello message was received on.

Claims

1. A method of providing connection protection in a Virtual Local Area Network (VLAN) based local edge stack, said method comprising the steps of:

provisioning a main VLAN for a connection between a local edge switch and a remote switch;

provisioning an alternative VLAN for said connection in each edge switch in said stack;

switching, at edge switches on either side of a detected failed link, all protected traffic going through said failed link to said alternative VLAN, wherein if said connection begins on an edge switch that detected said link failure, switching protected traffic destined for said failed link to said alternative VLAN in response to detection of said link failure, and wherein if said connection does not begin on an edge switch that detected said link failure, modifying packets received over a network port on said main VLAN to said alternative VLAN and returning said modified packets over the same network port they were received over; and

setting a flag in Hello packets on the edge switch that detected said failure before forwarding to said alternative VLAN, said flag for informing an edge switch at an opposite end of said connection to switch to said alternative VLAN.

2. The method according to claim 1, wherein said step of setting comprises the step of detecting Hello packets in the edge switch that detected the failure, setting an Other Path Down (OPD) flag in said Hello packets and returning said Hello packets over said alternative VLAN.

3. The method according to claim 1, wherein said remote switch comprises a user-interface of a core switch.

4. The method according to claim 1, further comprising the steps performed on said remote switch of:

detecting Hello packets with Other Path Down (OPD) flag set;

switching traffic to said alternative VLAN; and

sending Hello packet to said local edge switch with an OPD acknowledge flag set.

5. The method according to claim 4, further comprising the step of said local edge switch terminating the connection, and switching to said alternative VLAN in response to receiving a Hello packet with said OPD acknowledge flag set.

6. The method according to claim 1, further comprising the step of said local edge switch continuing to send Hello messages over said main VLAN in addition to said alternative VLAN.

7. The method according to claim 1, further comprising the step of said remote edge switch continuing to send Hello messages over said main VLAN in addition to said alternative VLAN.

8. The method according to claim 1 wherein a VLAN ID number of said main VLAN and said alternative VLAN differ in one bit.

9. The method according to claim 1, wherein a VLAN ID number of said main VLAN and said alternative VLAN differ in the least significant bit only.

10. The method according to claim 1, wherein the least significant bit (LSB) of a main VLAN ID is zero and the LSB of an alternative VLAN ID is one.

11. The method according to claim 1, further comprising the step of dropping packets received over said alternative VLAN by the edge switch that sensed the link failure.

12. The method according to claim 1, wherein said step of switching protected traffic comprises the stop of setting the least significant bit (LSB) of a VLAN ID and sending the packet back over the port from which it was received.

13. The method according to claim 1, further comprising the step of sending packets of said alternative VLAN to a user port in an edge switch terminating said connection when said packets are received over one of said network ports, and sending said alternative VLAN packets along said stack when received over any other network port.

14. The method according to claim 1, adapted to be implemented in an Application Specific Integrated Circuit (ASIC).

15. The method according to claim 1, adapted to be implemented in one or more Field Programmable Gate Array (FPGA) integrated circuits.

16. A method of providing connection protection in a Virtual Local Area Network (VLAN) based stack, said method comprising the steps of:

provisioning a main VLAN for a connection between a local edge switch and a remote switch;

provisioning an alternative VLAN for said connection on each edge switch in said stack;

provisioning a Multiprotocol Label Switching (MPLS) bypass tunnel between opposite ends of said stack;

switching, at edge switches on either side of a detected failed link, all protected traffic going through said failed link to said alternative VLAN, wherein if said connection begins on an edge switch that detected said link failure, switching protected traffic destined for said failed link to said alternative VLAN in response to detection of said link failure, and wherein if said connection does not begin on an edge switch that detected said link failure, modifying packets received over a network port on said main VLAN to said alternative VLAN and returning said modified packets over the same network port they were received over;

setting a flag in Hello packets on the eye switch that detected said failure before forwarding to said alternative VLAN, said flag for informing a remote edge switch to switch to said alternative VLAN;

forwarding said protected traffic via said bypass tunnel; and

upon reaching the end of said bypass tunnel, forwarding said protected traffic to said alternative VLAN.

17. The method according to claim 16, wherein said step of setting comprises the step of detecting Hello packets in the edge switch that detected the failure, setting an Other Path Down (OPD) flag in said Hello packets and returning said Hello packets over said alternative VLAN.

18. The method according to claim 16, wherein said remote switch comprises a user-interface of a core switch.

19. The method according to claim 16, wherein said MPLS bypass tunnel is established between two relevant ports of the same core switch.

20. The method according to claim 16, wherein said MPLS bypass tunnel is established between two ports of two different core switches.

21. The method according to claim 16, further comprising the steps performed on said remote switch of:

detecting Hello packets with Other Path Down (OPD) flag set;

switching traffic to said alternative VLAN; and

sending Hello packet to said local edge switch with an OPD acknowledge flag set.

22. The method according to claim 21, further comprising the step of said local edge switch, and terminating said connection switching to said alternative VLAN in response to receiving a hello packet with said OPD acknowledge flag set.

23. The method according to claim 16, further comprising the step of said local edge switch continuing to send Hello messages over said main VLAN in addition to said alternative VLAN.

24. The method according to claim 16, further comprising the step of said remote switch continuing to send Hello messages over said main VLAN in addition to said alternative VLAN.

25. The method according to claim 16, wherein a VLAN ID number of said main VLAN and said alternative VLAN differ in one bit.

26. The method according to claim 16, wherein a VLAN ID number of said main VLAN and said alternative VLAN differ in the least significant bit only.

27. The method according to claim 16, wherein the least significant bit (LSB) of a main VLAN ID is zero and the LSB of an alternative VLAN ID is one.

28. The method according to claim 16, further comprising the step of dropping packets received over said alternative VLAN by the edge switch that sensed the link failure.

29. The method according to claim 16, wherein said step of switching protected traffic comprises the step of setting the least significant bit (LSB) of a VLAN ID and sending the packet back over the port from which it was received.

30. The method according to claim 16, further comprising the step of sending packets of said alternative VLAN to a user port in an edge switch terminating said connection when said packets are received over one of said network ports, and sending said alternative VLAN packets along said stack when received over any other network port.

31. The method according to claim 16, adapted to be implemented in an Application Specific Integrated Circuit (ASIC).

32. The method according to claim 16, adapted to be implemented in one or more Field Programmable Gate Array (FPGA) integrated circuits.

33. A method of providing connection protection in a Virtual Local Area Network (VLAN) based stack, said method comprising the steps of:

provisioning a main VLAN for a connection between a local edge switch and a remote switch;

provisioning an alternative VLAN for said connection;

if said connection begins on the edge switch that detected a failure, switching protected traffic to said alternative VLAN;

if said connection does not begin on the edge switch that detected the failure, changing packets received over a network port on said main VLAN to said alternative VLAN and returning said changed packets over the same network port they were received from;

sending an Other Path Down (OPD) indication to a remote edge switch; and

switching protected user data to said alternative VLAN upon receipt of an OPD acknowledgement if the edge switch terminates said connection.

34. The method according to claim 33, wherein a VLAN ID number of said main VLAN and said alternative VLAN differ in one bit.

35. The method according to claim 33, wherein a VLAN ID number of said main VLAN and said alternative VLAN differ in the least significant bit only.

36. The method according to claim 33, wherein the least significant bit (LSB) of a main VLAN ID is zero and the LSB of an alternative VLAN ID is one.

37. The method according to claim 33, adapted to be implemented in an Application Specific Integrated Circuit (ASIC).

38. The method according to claim 33, adapted to be implemented in one or more Field Programmable Gate Array (FPGA) integrated circuits.

39. A packet processor for use in each edge switch in a Virtual Local Area Network (VLAN) based stack, each edge switch including a plurality of user ports and a plurality of network ports, comprising:

means for maintaining the status of each link connected to the edge switch;

means for maintaining a fast protection flag for each connection indicating whether, in the event of a link failure, packets received tagged with a main VLAN of said connection are to be returned over the network port on which they were received;

means for tagging a received packet with an alternative VLAN in the event a link failure occurs and said received packet is for said main VLAN of a connection whereby said fast protection flag is set; and

means for setting a flag in said received packets before forwarding to said alternative VLAN if said edge switch detected said link failure, said flag for indicating to a remote edge switch to switch to said alternative VLAN.

40. The packet processor according to claim 39, further comprising means for dropping a received packet in the event a link failure occurs and said received packet is for said main VLAN of a connection whereby said fast protection flag is not set.

41. The packet processor according to claim 39, further comprising means for maintaining a Hello packet flag adapted to indicate whether an Other Path Down (OPD) flag in a Hello packet to be returned is to be set.

42. The packet processor according to claim 39, comprising means for tagging a received Hello packet with an alternative VLAN and setting an Other Path Down (OPD) flag in the event a link failure occurs and a Hello packet is received for said main VLAN of a connection whereby a fast protection flag and a change Hello packet flag are set.

43. The packet processor according to claim 39, wherein said means for tagging with an alternative VLAN comprises means for setting the least significant bit (LSB) of the VLAN ID.

44. The packet processor according to claim 39, adapted to be implemented in an Application Specific Integrated Circuit (ASIC).

45. The packet processor according to claim 39, adapted to be implemented in a Field Programmable Gate Array (FPGA).

46. A method of providing connection protection in a Virtual Local Area Network (VLAN) network for use on a Multiprotocol Label Switching (MPLS) based core switch, wherein a main VLAN and an alternative VLAN are provisioned for a connection between a local edge switch and a remote edge switch, and wherein an MPLS bypass tunnel is provisioned between opposite ends of a stack to be protected, said method comprising the steps of:

detecting failure of a link;

switching protected traffic destined for said failed link to said alternative VLAN in response to detection or said link failure;

setting a flag in packets before forwarding to said alternative VLAN, said flag for indicating to said remote edge switch to switch to said alternative VLAN; and

forwarding said protected traffic to said bypass tunnel.

47. An edge switch in a Virtual Local Area Network (VLAN) based stack, comprising:

a plurality of user ports for interfacing said edge switch to one or more users;

a plurality of network ports for interfacing said edge switch to one or more communication links;

packet processing means operative to;

maintain the status of each link connected to the edge switch;

maintain a fast protection flag for each connection indicating whether, in the event of a link failure, packets received tagged with a main VLAN of said connection are to be returned over the network port on which they were received;

tag a received packet with an alternative VLAN in the event a link failure occurs and said received packet is for said main VLAN of a connection whereby said fast protection flag is set; and

if said edge switch detected said link failure, setting a flag in said received packets before forwarding to said alternative VLAN, said flag for indicating to a remote edge switch to switch to said alternative VLAN.