Systems and methods for multicast switching in a private VLAN

• US 8,625,603 B1
• Filed: 05/10/2011
• Issued: 01/07/2014
• Est. Priority Date: 05/16/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ramakrishnan, Vijayan, Foschiano, Marco E., Naik, Chickayya G.
• Primary Examiner(s): Hamza, Faruk
• Assistant Examiner(s): Oh, Andrew
• Application Number:
  US13/104,554
• Time in Patent Office: 973 Days
• Field of Search: None
• US Class Current: 370/395.3
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/16 Multipoint routing
• CPC Class Codes: H04L 49/201 Multicast operation; Broadcast operation
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]

Abstract

A Multicast Listener Discovery (MLD) protocol query and/or report snooping process is modified to appropriately map secondary PVLAN identifiers to corresponding primary PVLAN identifiers, thereby accommodating other system elements that are otherwise unaware of primary/secondary PVLAN distinctions. Special cases are also accommodated where reverse path forwarding (RPF) checks in support of multicast operation might otherwise fail due to primary/secondary PVLAN distinctions. Additional steps are taken to ensure that PVLAN information properly accounts for changes in configuration and/or location of various network hosts.

Claims

1. A method comprising:

detecting a reverse path forwarding (RPF) check failure, wherein the detecting is performed in response to receipt of a multicast packet via an incoming port, and wherein the RPF check failure indicates that the incoming port is not a RPF port on a reverse path back to a multicast source that sent the multicast packet;

determining that the incoming port via which the multicast packet was received is part of a virtual local area network (VLAN), in response to the RPF check failure;

querying a table for information about the VLAN, wherein the table comprises data derived from neighborhood discovery protocol (NDP) messages, in response to the determining; and

causing an NDP message to be sent to at least one network node, wherein the NDP message causes new VLAN information to be provided for inclusion in the table, in response to a result of the querying indicating that the new VLAN information is needed.

2. The method of claim 1, wherein the VLAN is a secondary private VLAN (PVLAN) having a corresponding secondary PVLAN identifier.

3. The method of claim 1, wherein the at least one network node further comprises a host coupled to the incoming port.

4. The method of claim 1, further comprising at least one of:

determining whether information corresponding to the VLAN in the table has changed; and

determining whether information corresponding to the VLAN in the table has expired.

5. The method of claim 1, further comprising:

receiving a second NDP message in response to the NDP message; and

updating information in the table based on the second NDP message.

6. The method of claim 1, wherein the determining further comprises:

performing a lookup operation against at least one of the table and a second table, wherein the lookup operation uses at least one of;

a source IP address value, a destination IP address value;

a group address value;

a port identifier value;

a VLAN identifier value; and

a PVLAN identifier value.

7. A network device comprising:

a processor;

a memory coupled to the processor;

a plurality of ports coupled to the processor;

wherein the processor is configured to;

detect a reverse path forwarding (RPF) check failure, wherein the RPF check failure is detected in response to receipt of a multicast packet via an incoming port of the plurality of ports, and wherein the RPF check failure indicates that the incoming port is not a RPF port on a reverse path back to a multicast source that sent the multicast packet;

determine that the incoming port via which the multicast packet was received is part of a virtual local area network (VLAN), in response to the RPF check failure;

query a table stored in the memory for information about the VLAN, in response to a determination that the RPF check failure occurred on the incoming port, wherein the table comprises data derived from neighborhood discovery protocol (NDP) messages; and

cause an NDP message to be sent to at least one network node, wherein the NDP message causes the at least one network node to provide new VLAN information for inclusion in the table, in response to a result of the querying indicating that the new VLAN information is needed.

8. The network device of claim 7, wherein the network device is at least one of a switch, a multi-layer switch, and a router.

9. The network device of claim 7, wherein the processor is one of an embedded processor, an ASIC, and an FPGA.

10. The network device of claim 7, wherein the VLAN is a secondary private VLAN (PVLAN) having a corresponding secondary PVLAN identifier.

11. The network device of claim 7, wherein the at least one network node further comprises a host coupled to the one of the plurality of ports.

12. The network device of claim 7, wherein the processor is further configured to at least one of:

determine whether information in the table has changed; and

determine whether information in the table has expired.

13. The network device of claim 7, wherein the processor is further configured to:

receive a second NDP message in response to the NDP message; and

update information in the table based on the second NDP message.

14. The network device of claim 7, wherein the processor is further configured to:

perform a lookup operation against at least one of the table and another table, wherein the lookup operation uses at least one of;

a source IP address value, a destination IP address value;

a group address value;

a port identifier value;

a VLAN identifier value; and

a PVLAN identifier value.

15. The network device of claim 7, wherein the NDP message is sent to the at least one network node in response to a determination that the table needs new VLAN information.