Identifying VPN faults based on virtual routing address and edge interface relationship information

• US 7,876,694 B2
• Filed: 07/02/2004
• Issued: 01/25/2011
• Est. Priority Date: 07/02/2004
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Strahan, Robert, Horner, Damian, Mandavilli, Swamy, Menon, Sunil, Kuriakose, Anil A
• Primary Examiner(s): Yao; Kwang B
• Assistant Examiner(s): DUDA, ADAM K
• Application Number:
  US10/884,468
• Publication Number:
  US 20060002409A1
• Time in Patent Office: 2,398 Days
• Field of Search: 709/223, 709/224, 709/225, 709/226, 709/238, 709/230, 709/231, 709/232, 709/233, 709/234, 709/235, 709/237, 709/239, 709/240, 709/241, 709/242, 709/243, 709/244, 709/245, 790/236, 370/464, 370/901, 370/902, 370/903, 370/913, 370/351, 370/352, 370/389, 370/229, 370/241, 370/241.1, 370/242, 370/243, 370/244, 370/245, 370/246, 370/247
• US Class Current: 370/245
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/065 involving logical or physical relationship, e.g. grouping and hierarchies
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities

Abstract

In an embodiment, a network service provider (NSP) operates a provider network to provide VPN services to its customers. A VPN links various customer sites allowing customers to send data between these sites over the NSP network. Each site network includes a customer edge router (CE) while the provider network includes a plurality of provider edge routers (PEs) to communicate with the CEs. The PEs include virtual routing address (VRFs), and the PEs and CEs include interfaces (IFs). A database stores information related to the relationships between the network components (e.g., VPNs, PEs, CEs, VRFs, IFs, etc.), and a management software package (MSP) has access to the database. When a fault occurs, the MSP, based on collected information and information in the database, determines the impacted network components. Other features include classifying the seriousness of the network'"'"'s faults and representing different faults by a color scheme.

Claims

1. A system, comprising:

a maintenance software package embodied on a non-transitory computer readable medium that accesses a database storing connection information among;

a first virtual private network and a first provider edge router (PE);

the first PE and a second PE;

the first PE and a first customer edge router (CE);

a first PE-PE interface of the first PE and a first PE-PE interface of the second PE;

a first PE-CE interface of the first PE and a first CE-PE interface of the first CE;

a first virtual routing address and the first PE-CE interface; and

the first virtual routing address and the first virtual private network; and

the maintenance software package embodied on a non-transitory computer readable medium operable to identify the first virtual private network from connection information between the first PE-CE interface and the first virtual routing address and connection information between the first virtual routing address and the first virtual private network, and if the first CE is in-operational, then the maintenance software package embodied on a non-transitory computer readable medium identifies the first virtual private network as impacted by the first CE.

2. The system of claim 1 wherein, if the first CE is in-operational, then the first virtual private network is identified as impacted by the first CE from connection information stored in the database related to the first CE-PE interface.

3. The system of claim 1 wherein, if the first CE-PE interface is in-operational, then from connection information for the first PE-CE interface, the first virtual private network is identified as impacted by the first CE-PE interface.

4. The system of claim 1 wherein, if the first CE-PE interface is in-operational, then from this information and connection information in the database for the first CE-PE interface, the first virtual private network is identified as impacted by the first CE-PE interface.

5. The system of claim 1 wherein, if the first PE is in-operational, then from connection information related to the first PE-CE interface, the first virtual private network is identified as impacted by the first PE.

6. The system of claim 1 wherein, if the first PE is in-operational, then from connection information related to the first PE-PE interface, the first virtual private network is identified as impacted by the first PE.

7. The system of claim 1 wherein if a PE is in-operational, then from connection information related to interfaces associated with this PE, and connection information stored in the database for the interfaces, virtual private networks impacted by this PE are identified.

8. The system of claim 1 wherein if a PE is in-operational, then from connection information related to interfaces used by CEs interfacing with this PE, connection information stored in the database for these interfaces, virtual private networks impacted by this PE are identified.

9. The system of claim 1 wherein if the first PE-CE is in-operational, then from this information, the first virtual private network is identified as being impacted by the first PE-CE.

10. The system of claim 1 wherein if the first PE-CE is in-operational, then from connection information for the first CE-PE and connection information stored in the database for the first CE-PE, the first virtual private network is identified as being impacted by the first PE-CE.

11. The system of claim 1 wherein, from results of a PE-PE virtual routing address unaware test, a first list of virtual private networks associated with an initiator PE and a second list of virtual private networks associated with a destination PE are identified;

a virtual private network being in both the first list and the second list is identified as an impacted virtual private network.

12. The system of claim 1 wherein, from results of a PE-PE virtual routing address aware test, the first virtual private network is identified as being impacted.

13. The system of claim 1 wherein a reachability test from the first CE to a second CE includes reachability test between the first PE and the first CE, between the first PE and the second PE, and between the second PE and a second CE.

14. A computing network comprising:

a provider network that includes a plurality of provider edge routers;

a plurality of virtual private networks each of which links a plurality of site networks and is virtually private to those site networks;

a site network includes a customer edge router;

a first provider edge router uses a first PE-PE interface to interface with a first PE-PE interface of a second provider edge router, and uses a first PE-CE interface to interface with a first CE-PE interface of a first customer edge router;

with respect to a first virtual private network using the first provider edge router, a first virtual routing address logically groups at least the first PE-CE interface;

a maintenance software program embodied on a non-transitory computer readable medium, for accessing a database configured to store connection information between the first virtual private network and the first provider edge router;

between the first provider edge router and the second provider edge router;

between the first provider edge router and the first customer edge router;

between the first PE-CE interface and the first, CE-PE interface; and

between the first virtual routing address and the first PE-CE interface; and

the maintenance software program embodied on a non-transitory computer readable medium identifies the virtual private networks from the connection information between the first PE-CE interface and the first virtual routing address and connection information between the first virtual routing address and the first virtual private network, wherein if the first CE is in-operational, then the first virtual private network is identified as impacted by the first CE from information stored in the database related to the first CE-PE interface.

15. The computing network of claim 14 wherein the provider edge routers communicate with one another via a sub-network.

16. The computing network of claim 14 wherein a private virtual network of the plurality of the virtual private networks uses the multiple-protocol-label-switching technology.

17. The computing network of claim 14 wherein the second provider edge router uses a second PE-CE interface to interface with a second CE-PE interface of a second customer edge router.

18. The computing network of claim 17 wherein the first customer edge router and the second edge router belong to the first virtual private network.

19. The computing network of claim 17 wherein the first customer edge router belongs to first virtual private network and the second customer edge router belongs to a second virtual private network distinguished from the first virtual private network.

20. The computing network of claim 14 wherein from the connection information stored in the database, if connection information from either the first PE-PE interface or the first PE-CE interface is provided, then one or a combination of the following is identified:

the virtual routing address and the virtual private network associated with the virtual routing address.

21. The computing network of claim 14 wherein from the connection information stored in the database, if connection information from the first CE-PE interface is provided, then the first PE-CE is identified.

22. A method, implemented by a maintenances software program embodied on a non-transitory computer readable medium, for determining whether a virtual private network is impacted by a fault, comprising:

the maintenance software program embodied on a non-transitory computer readable medium storing, in a database, connection information between a virtual routing address and interfaces logically grouped by the virtual routing address;

the maintenance software program embodied on a non-transitory computer readable medium storing, in the database, connection information between the virtual routing address and the virtual private network;

when the fault occurs, the maintenance software program embodied on a non-transitory computer readable medium identifying an interface impacted by the fault;

from the stored connection information between the impacted interface and a virtual routing address, the maintenance software program embodied on a non-transitory computer readable medium identifying the virtual routing address as being impacted; and

from the stored connection information between the impacted virtual routing address and the virtual private network, the maintenance software program embodied on a non-transitory computer readable medium identifying the virtual private network as being impacted if a first CE is in-operational.

23. The method of claim 22 wherein faults related to an interface and to the virtual private network are classified by the maintenance software program embodied on a non-transitory computer readable medium into a plurality of levels each being represented by a color.

24. The method of claim 22 wherein the interfaces are used by a provider edge router in a provider network providing service to the virtual private network.

25. A non-transitory computer-readable medium embodying program code to perform a method for determining whether a virtual private network is impacted by a fault, the method comprising:

storing, in a database, connection information between a virtual routing address and interfaces logically grouped by the virtual routing address;

storing, in the data base, connection information between the virtual routing address and the virtual private network;

when the fault occurs, identifying an interface impacted by the fault;

from the stored connection information between the impacted interface and a virtual routing address, identifying the virtual routing address as being impacted;

from the stored connection information between the impacted virtual routing address and the virtual private network, identifying the virtual private network as being impacted if a first CE is in-operational.

26. The non-transitory computer-readable medium of claim 25 wherein faults related to an interface and to the virtual private network are classified into a plurality of levels each being represented by a color.

27. The non-transitory computer-readable medium of claim 25 wherein the interfaces are used by a provider edge router in a provider network providing service to the virtual private network.