Method for the provision of gateway anycast virtual MAC reachability in extended subnets

• US 8,848,508 B2
• Filed: 11/16/2009
• Issued: 09/30/2014
• Est. Priority Date: 11/16/2009
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Moreno, Victor M., Starmer, Robert, Sane, Sanjay
• Primary Examiner(s): Hamza, Faruk
• Assistant Examiner(s): OH, ANDREW CHUNG SUK
• Application Number:
  US12/619,425
• Publication Number:
  US 20110116509A1
• Time in Patent Office: 1,779 Days
• Field of Search: None
• US Class Current: 370/216
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 45/66 Layer 2 routing, e.g. in Ethernet based MAN's
• CPC Class Codes: H04L 49/351 for local area network [LAN], e.g. Ethernet switches

Abstract

A method and apparatus is disclosed for providing gateway anycast virtual MAC reachability in extended subnets. When an extended L2 subnet spans more than one geographical location, it is desirable that the gateway MAC addresses learned in each location be the same across all IP hosts. Accordingly, the gateway MAC address may be preserved (i.e., programmed) in more than one port on a bridge, such as both a local port and a LAN extension port. The bridge may forward traffic having the anycast MAC address to the closest instance of the MAC address, rather than replicating the traffic to the multiple ports on which the anycast MAC address is programmed. If the gateway reachable on the local port goes down, the frame may be forwarded to the local gateway in the second layer 2 subnet over the LAN extension port.

Claims

1. A computer implemented method for providing anycast virtual media access control (MAC) reachability in an extended subnet comprising a first layer 2 subnet and a second layer 2 subnet connected through a first bridge device on the first layer 2 subnet and a second bridge device on the second layer 2 subnet, wherein the first layer 2 subnet includes a first gateway connecting the first layer 2 subnet to a first IP network, and wherein the second layer 2 subnet includes a second gateway connecting the second layer 2 subnet to a second IP network, comprising:

determining, at the first bridge device, a gateway MAC address associated with both a local port of the first bridge device and a LAN extension port of the first bridge device, wherein the first gateway is reachable within the first layer 2 subnet at the gateway MAC address using the local port, and wherein the second gateway is reachable within the first layer 2 subnet at the gateway MAC address using the LAN extension port;

receiving, from a host in the first layer 2 subnet, a network frame specifying the gateway MAC address as a destination address; and

selectively forwarding the received network frame to one of (i) the first gateway using the local port or (ii) the second gateway using the LAN extension port, based at least in part on the destination address.

2. The method of claim 1, wherein the LAN extension port is one of a physical port and a logical port.

3. The method of claim 1, further comprising:

synchronizing members of a First Hop Resiliency Protocol (FHRP) group to inform all the members of the identified MAC address.

4. The method of claim 1, wherein the first layer 2 subnet and the second layer 2 subnet are disjoint.

5. The method of claim 1, wherein the respective bridge in the first layer 2 subnet and the second layer 2 subnet each includes a set of local ports and the LAN extension port connecting one of the first layer 2 subnet and the second layer 2 subnet to the other layer 2 subnet.

6. The method of claim 1, further comprising:

determining that the IP network is unreachable over the local gateway in the first layer 2 subnet; and

removing the MAC address entry programmed for the local gateway in the first layer 2 subnet.

7. The method of claim 1, wherein forwarding the received network frame to one of (i) the first gateway using the local port or (ii) the second gateway using the LAN extension port, further comprises:

upon determining that the first gateway is available for processing network traffic, forwarding the network frame to the first gateway using the local port, wherein the frame is not replicated to the second gateway using the LAN extension port; and

upon determining that the first gateway is not currently available for processing network traffic, forwarding the network frame to the second gateway using the LAN extension port.

8. The method of claim 1, wherein forwarding the received network frame to one of (i) the first gateway using the local port or (ii) the second gateway using the LAN extension port, further comprises:

upon determining that the network frame specifying the gateway MAC address as a destination address was received over the LAN extension port, forwarding the network frame to the first gateway using the local port, wherein the frame is not replicated to the second gateway using the LAN extension port, in order to avoid transmitting the network frame in a loop between the first layer 2 subnet and the second layer 2 subnet.

9. A switch, comprising:

a processor; and

a memory containing a program which, when executed on the processor performs an operation for providing anycast virtual media access control (MAC) reachability in an extended subnet comprising a first layer 2 subnet and a second layer 2 subnet connected through a first bridge device on the first layer 2 subnet and a second bridge device on the second layer 2 subnet, wherein the first layer 2 subnet includes a first gateway connecting the first layer 2 subnet to a first IP network, and wherein the second layer 2 subnet includes a second gateway connecting the second layer 2 subnet to a second IP network, the operation comprising;

determining, at the first bridge device, a gateway MAC address associated with both a local port of the first bridge device and a LAN extension port of the first bridge device, wherein the first gateway is reachable within the first layer 2 subnet at the gateway MAC address using the local port, and wherein the second gateway is reachable within the first layer 2 subnet at the gateway MAC address using the LAN extension port;

receiving, from a host in the first layer 2 subnet, a network frame specifying the gateway MAC address as a destination address; and

selectively forwarding the received network frame to one of (i) the first gateway using the local port or (ii) the second gateway using the LAN extension port, based at least in part on the destination address.

10. The switching device of claim 9, wherein the LAN extension port is one of a physical port and a logical port.

11. The switching device of claim 9, wherein the operation further comprises:

synchronizing members of a First Hop Resiliency Protocol (FHRP) group to inform all the members of the identified MAC address.

12. The switching device of claim 9, wherein the first layer 2 subnet and the second layer 2 subnet are disjoint.

13. The switching device of claim 9, wherein the switching device includes a set of local ports and the LAN extension port connecting the first layer 2 subnet to the second layer 2 subnet.

14. The switching device of claim 9, wherein the operation further comprises:

determining that the IP network is unreachable over the local gateway in the first layer 2 subnet; and

removing the MAC address entry programmed for the local port for the local gateway in the first layer 2 subnet.

15. A non-transitory computer-readable medium, containing a program, which, when executed on a processor performs an operation for providing anycast virtual media access control (MAC) reachability in an extended subnet comprising a first layer 2 subnet and a second layer 2 subnet connected through a first bridge device on the first layer 2 subnet and a second bridge on the second layer 2 subnet, wherein the first layer 2 subnet includes a first gateway connecting the first layer 2 subnet to a first IP network, and wherein the second layer 2 subnet includes a second gateway connecting the second layer 2 subnet to a second IP network, the operation comprising:

determining, at the first bridge device, a gateway MAC address associated with both a local port of the first bridge device and a LAN extension port of the first bridge device, wherein the first gateway is reachable within the first layer 2 subnet at the gateway MAC address using the local port, and wherein the second gateway is reachable within the first layer 2 subnet at the gateway MAC address using the LAN extension port;

receiving, from a host in the first layer 2 subnet, a network frame specifying having the gateway MAC address as a destination address; and

selectively forwarding the received network frame to one of (i) the first gateway using the local port or (ii) the second gateway using the LAN extension port, based at least in part on the destination address.

16. The non-transitory computer-readable medium of claim 15, further operable to:

determine that the IP network is unreachable over the local gateway in the first layer 2 subnet; and

remove the MAC address entry programmed on a local port of the local gateway in the first layer 2 subnet.