Method and apparatus for authorizing multicast forwarding states

• US 9,065,669 B2
• Filed: 08/24/2004
• Issued: 06/23/2015
• Est. Priority Date: 08/24/2004
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: He, Haixiang
• Primary Examiner(s): Patel, Jay P
• Application Number:
  US10/924,404
• Publication Number:
  US 20060045085A1
• Time in Patent Office: 3,955 Days
• Field of Search: 370/390, 370/392, 370/395.31, 370/401
• US Class Current: 1/1
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method and apparatus for authorizing forwarding states in a Layer 2 device of a multicast system includes a forwarding table for use in forwarding communications to group members over interfaces of the Layer 2 device. According to one aspect of the invention, associated with the forwarding state is an authorization flag. The authorization flag signals whether or not the forwarding state is an authorized forwarding state over which multicast communications may be transferred. The Layer 2 device snoops authorization communications between a host and a layer 3 device, and updates the forwarding table authorization flags in response to these communications.

Claims

1. An apparatus comprising:

a Layer 3 device;

a plurality of host devices; and

a Layer 2 switch which processes packets sent from the Layer 3 device to the host devices, the Layer 2 switch functioning to;

examine Layer 3 information in the packets to identify changes in multicast group membership of the hosts;

update a data record indicative of multicast group membership by;

adding a first host to a first multicast group in response to a report or join message indicative of membership of the first host in the first multicast group; and

deleting the first host from the first multicast group if a corresponding success notification is not received within a predetermined time following the report or join message, or in response to a corresponding leave or accounting stop notification message, prevent a first multicast group packet addressed to the first host device from being forwarded to the first host device if the data record indicates that the first host device is not a member of the first multicast group; and

forward the first multicast group packet addressed to the first host device to the first host device if the data record indicates that the first host device is a member of the first multicast group.

2. The apparatus of claim 1 wherein the Layer 3 information in the packets includes Internet Group Management with Authentication (IGAP) commands.

3. A method comprising the steps of:

in a network including a Layer 3 device, a plurality of host devices, and a Layer 2 switch,

in the Layer 2 switch, processing packets sent from the Layer 3 device to the host devices, including;

examining Layer 3 information in the packets to identify changes in multicast group membership of the hosts;

updating a data record indicative of multicast group membership by;

adding a first host to a first multicast group in response to a report or join message indicative of membership of the first host in the first multicast group; and

deleting the first host from the first multicast group if a corresponding success notification is not received within a predetermined time following the report or join message, or in response to a corresponding leave or accounting stop notification message;

preventing a first multicast group packet addressed to the first host device from being forwarded to the first host device if the data record indicates that the first host device is not a member of the first multicast group; and

forwarding the first multicast group packet addressed to the first host device to the first host device if the data record indicates that the first host device is a member of the first multicast group.

4. The method of claim 3 including the step of

monitoring communications between the Layer 3 device and the first host to detect authorization of a forwarding state, including setting a flag corresponding to the forwarding state to indicate that the forwarding state is authorized in response to detection of a communication between the Layer 3 device and the first host indicating such authorization.

5. The method of claim 4 including the step of unsetting the flag to indicate that the forwarding state is not authorized in response to a group termination message exchanged between the Layer 3 device and the first host.

6. The method of claim 5 including examining Internet Group Management and Authorization Protocol (IGAP) information in the packets to identify changes in multicast group membership of the hosts.

7. The method of claim 6 including examining an IGAP Join.

8. The method of claim 6 including examining an IGAP Leave message issued by the first host.

9. The method of claim 6 including examining an Accounting Stop Notification issued by the Layer 3 device.