Method and system for data link layer address classification

• US 7,715,409 B2
• Filed: 03/25/2005
• Issued: 05/11/2010
• Est. Priority Date: 03/25/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Siu, Wai-tak
• Primary Examiner(s): Moe; Aung S
• Assistant Examiner(s): RIYAMI, ABDULLAH A
• Application Number:
  US11/089,992
• Publication Number:
  US 20060215655A1
• Time in Patent Office: 1,873 Days
• Field of Search: 370/351, 370/469, 370/252, 370/242, 370/245, 370/255, 370/338, 370/386, 370/396, 370/389, 370/392, 370/401, 370/402, 370/466, 370/474, 370/489, 370/468, 370/395.54, 709/236, 709/245, 709/222, 709/225, 709/223, 709/250
• US Class Current: 370/395.54
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types

Abstract

A method and system for data link layer address classification. Data link layer address information is received from a device over a local area network (LAN), wherein the LAN is partitioned into a plurality of domains. The data link layer address information is classified as being associated with a domain of the plurality of domains based on a source address of the device. The data link layer address information is assigned to the domain.

Claims

1. A method, comprising:

mapping, on a gateway that is communicatively coupled to a physical Local Area Network (LAN) using one or more network interfaces, network addresses of a plurality of network devices operating in the physical LAN to a plurality of different logical domains of the same physical LAN;

after performing said mapping, receiving an Address Resolution Protocol (ARP) packet over a particular one of the one or more network interfaces;

associating the received ARP packet with an entry in the mapping by extracting information from a source Internet Protocol (IP) address field of the ARP packet and comparing the extracted information together with an identifier for the particular one of the network interfaces to the mapping, wherein the extracted information is limited to information included in the source IP address field of the ARP packet and the association is made using no other information from the received ARP packet other than the information included in the source IP address field of the ARP packet, and wherein said association allows the gateway to perform a logical domain classification for the ARP packet independently of whether the network devices are configured to mark ARP packets according to the partitioning of the physical LAN into the plurality of logical domains;

providing a plurality of separate ARP tables that are each associated with a different one of the logical domains; and

selecting one of the ARP tables to be updated according to the received ARP packet, wherein the ARP table is selected according to the association, and updating the selected ARP table according to the ARP packet.

2. The method as recited in claim 1 wherein said association allows the gateway to perform a logical domain classification for the ARP packet independently of whether the network devices are configured to tag ARP messages according to the logical domain partitioning.

3. The method as recited in claim 1 further comprising dynamically generating the ARP tables as ARP messages are received.

4. The method as recited in claim 1 further comprising:

determining whether the source IP address of the ARP packet is associated with a subnet of said plurality of logical domains; and

provided said source address is not associated with the subnet of said plurality of logical domains, updating one of the ARP tables that corresponds to a default subnet of said plurality of logical domains.

5. The method as recited in claim 1 further comprising broadcasting a data link layer address information request to each of said network devices over said physical LAN.

6. The method as recited in claim 5 wherein said broadcasting is executed to learn the data link address of each of said network devices.

7. The method as recited in claim 5 wherein said broadcasting said data link layer address information request is executed periodically.

8. The method as recited in claim 1 wherein each logical domain is selectively associated with a different IP subnet of said physical (LAN), and wherein the association is made by applying a subnet mask to the extracted source IP address.

25. The method of claim 1 wherein the mapping selectively partitions the physical LAN into an arbitrary number of logical domains, the arbitrary number selected independently of an amount of the network interfaces coupling the gateway to the physical LAN.

9. A network forwarding device comprising:

a bus;

a first interface coupled externally to a broadcast domain formed by local devices of a physical Local Area Network (LAN) partitioned into a plurality of logical domains;

a second interface coupled externally to a distributed computer network; and

a computer-readable memory coupled to said bus and encoded with instructions that, if executed, result in;

mapping network addresses of said local devices to the plurality of logical domains;

after performing said mapping, receiving, at said first interface of said forwarding device, data link layer address information from said broadcast domain formed by said local devices of said physical LAN;

classifying said data link layer address information of a first one and a second one of said local devices as being associated with a first one and a second one of said plurality of logical domains, respectively, by comparing all or part of source Internet Protocol (IP) addresses included in the data link layer address information together with an identifier for the first interface to the mapping; and

storing said data link layer address information of said first one and said second one of said local devices in separate data link layer address lookup tables each associated with a corresponding one of said first one and said second one of said logical domains, said storing conducted according to said classification.

10. The network forwarding device as recited in claim 9 wherein said data link layer address information is comprised within an Address Resolution Protocol (ARP) packet, and wherein said data link layer address information maps a data link layer address and a network layer address.

11. The network forwarding device as recited in claim 9 wherein said data link layer address information is ARP information.

12. The network forwarding device as recited in claim 9 wherein said instructions result in dynamically generating the data link layer address lookup tables as ARP packets are received.

13. The network forwarding device as recited in claim 9 wherein said classifying said data link layer address information comprises:

determining whether said source IP addresses are associated with a subnet of said plurality of logical domains; and

provided said source IP addresses are not associated with the subnet of said plurality of logical domains, classifying said data link layer address information as being associated with a default subnet of said plurality of logical domains.

14. The network forwarding device as recited in claim 9 wherein said instructions result in transmitting at said first interface a data link layer address information request to each of said local devices over said physical LAN.

15. The network forwarding device as recited in claim 9 wherein each of said plurality of logical domains is selectively associated with a different IP subnet of said LAN.

16. A gateway, comprising:

means for mapping network addresses of a plurality of network devices operating in a same physical Local Area Network (LAN) to a plurality of different logical domains of the same physical LAN;

means for associating a received Address Resolution Protocol (ARP) packet with an entry in the mapping by extracting information from a source Internet Protocol (IP) address field of the ARP packet and comparing the extracted information together with an identification of an ingress interface associated with the received ARP packet to the mapping, wherein said association according to the information from the source IP address field and the ingress interface identification allows the gateway to perform a logical domain classification for the ARP packet independently of whether information of the logical domain partitioning is fed back to the network devices;

means for providing a plurality of separate ARP tables associated with the logical domains; and

means for selecting one of the ARP tables to be updated according to the received ARP packet, wherein the ARP table is selected according to the association, and updating the selected ARP table according to the ARP packet.

17. The gateway as recited in claim 16, further comprising:

means for determining whether said information is associated with a subnet of said plurality of logical domains; and

means for classifying said information as being associated with a default subnet of said plurality of logical domains provided the source IP address is not associated with the subnet of said plurality of logical domains.

18. The gateway as recited in claim 16 further comprising means for transmitting a data link layer address information request to each of said network devices over said LAN.

19. A method for data link layer address classification, said method comprising:

providing a forwarding device including a local interface and a plurality of network interfaces;

receiving, at said local interface of said forwarding device, data link layer address information from a broadcast domain formed by local devices over a local area network (LAN), wherein said LAN is partitioned into a plurality of logical domains;

classifying said data link layer address information of a first one and a second one of said local devices as being associated with a first one and a second one of said plurality of logical domains, respectively, based on information corresponding to the local interface together with a network layer source address of said first one and said second one of said local devices, respectively, using a processor of said forwarding device coupled to said local interface, said classifying including storing said data link layer address information of said first one and said second one of said local devices in separate data link layer address lookup tables each associated with a corresponding one of said first one and said second one of said logical domains; and

dynamically assigning said data link layer address information of said first one and said second one of said local devices to update said logical domains including providing a separate mapping for each respective domain between a data link layer address included in said data link layer address information and said network layer source address for each local device classified under said respective domain such that a respective local device classified under a particular one of said logical domains is selectively assignable to a different one of said logical domains independently of any fixed network topology in which said forwarding device operates.

20. The method of claim 19 further including providing for each respective domain a routing table such that each local device is selectively able to exchange data with any network destination accessible through a selected one of the plurality of network interfaces.

21. The method of claim 20 including selectively assigning one of said local devices to one of said logical domains for which said routing table designates said selected one of said plurality of network interfaces.

22. The method of claim 21 including selectively re-assigning said respective local device as classified under said particular one of said logical domains to a different one of said logical domains solely by identifying a different network layer source address for said respective local device.

23. The method of claim 22 including selectively assigning said respective local device as classified under said particular one of said logical domains to said different one of said logical domains free of any retagging of packets from said respective local device.

24. The method of claim 19 wherein said dynamically assigning includes identifying only one network layer source address for said respective local device at any given time.