Distributed connection-oriented services for switched communication networks

• US 8,462,794 B2
• Filed: 03/23/2010
• Issued: 06/11/2013
• Est. Priority Date: 11/15/1995
• Status: Expired due to Term

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Enterasys Networks Incorporated (Extreme Networks, Inc.)
• Inventors: Dobbins, Kurt, Grant, Thomas A., Ruffen, David J., Kane, Laura, Len, Theodore, Andlauer, Philip, Bahi, David H., Yohe, Kevin, Fee, Brendan, Oliver, Chris, Cullerot, David L., Skubisz, Michael
• Primary Examiner(s): Nguyen, Brian D
• Assistant Examiner(s): NGUYEN, TOAN D
• Application Number:
  US12/729,986
• Publication Number:
  US 20100177778A1
• Time in Patent Office: 1,176 Days
• Field of Search: 370/250, 370/395.52, 370/395.53, 370/401, 370/402, 370/422, 370/432, 370/469, 370/522, 709/226, 709/241
• US Class Current: 370/395.53
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 12/1877 Measures taken prior to transmission
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 12/46 Interconnection of networks
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/467 Arrangements for supporting untagged frames, e.g. port-based VLANs
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/16 Multipoint routing
• CPC Class Codes: H04L 45/24 Multipath
• CPC Class Codes: H04L 45/34 Source routing
• CPC Class Codes: H04L 49/201 Multicast operation; Broadcast operation
• CPC Class Codes: H04L 49/351 for local area network [LAN], e.g. Ethernet switches
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]

Abstract

Connection-oriented services for packet switched data communications networks are provided, including distributed MAC and protocol alias addresses discovery. Link state topology exchanges provide each switch with network topology graphs to determine paths from source to destination end systems. Broadcast frames are resolved to unicast frames to reduce broadcast traffic. Policy restrictions may be applied prior to connection setup. Connection management includes source-routed mapping of connections on the desired path. Distributed call rerouting is provided so switches receive topology change notifications and unmap failed link connections. Broadcast/unknown services provide non-resolvable packet restricted flooding. Connection-oriented switching is provided based on source and destination MAC addresses. Resolution of networks outside the switch domain is enabled by listening for network and server route advertisements and maintaining best routes to the networks and servers. Route and path metrics may be combined to determine paths from access switches to egress switches connected to the external network.

Claims

1. A method of forwarding data packets in a switched communications network, the network comprising a plurality of systems including a plurality of end systems and a plurality of switches connected by links, the switches having ports connected to end systems and ports connected to other switches, and each end system having a unique physical address, the method comprising:

populating a directory with MAC address information and with a virtual LAN mapping of the plurality of systems, the virtual LAN mapping identifying a virtual LAN to which at least one of the plurality of systems belongs;

receiving, from a source end system of the plurality of end systems, a packet at a port of an ingress switch of the plurality of switches, the source end system belonging to the virtual LAN;

determining, based on information from the packet and the directory, a destination end system and a VLAN ID of the destination end system;

determining whether the VLAN ID of the destination end system and a VLAN ID of the source end system are the same; and

in response to a determination that the VLAN ID of the destination end system is the same as the source VLAN ID, determining, by a network element of the communications network, a path from the ingress switch to an egress switch to which the destination end system is attached, the path based on the VLAN ID of the destination end system and the directory; and

responsive to the determination that the VLAN ID of the destination end system is the same as the source VLAN ID, restricting transmission of the packet to the path from the ingress switch to the egress switch to which the destination end system is attached, to forward the packet to the destination end system.

2. The method of claim 1, comprising:

restricting transmission of the packet to the path, wherein the egress switch includes a port connected to the destination end system.

3. The method of claim 2, comprising:

establishing a connection from the ingress switch to the egress switch.

4. The method of claim 3, further comprising:

establishing the connection from the ingress switch to the egress switch having the port connected to the destination end system.

5. The method of claim 1, comprising:

populating a local directory with information limited to information of end systems connected to one switch of the plurality of switches, wherein the information includes MAC address information and a virtual LAN mapping of the end systems connected to the one switch.

6. The method of claim 1, wherein populating the directory comprises:

populating a local directory having information of only a plurality of end systems connected to the ingress switch, wherein the information includes MAC address information and a virtual LAN mapping of the plurality of end systems connected to the ingress switch.

7. The method of claim 1, wherein populating the directory comprises:

populating a virtual directory having MAC address information and a virtual LAN mapping of a plurality of end systems connected to the ingress switch and having MAC address information and a virtual LAN mapping of end systems connected to other switches.

8. The method of claim 1, wherein populating the directory comprises:

populating a virtual directory having MAC address information and a virtual LAN mapping of a plurality of end systems connected to the ingress switch and having MAC address information and a virtual LAN mapping of end systems connected to switches of the switched communications network and to at least one other switch external to the switched communications network.

9. The method of claim 8, wherein the at least one other switch external to the switched communications network includes the egress switch.

10. The method of claim 1, wherein populating the directory comprises:

populating the directory with MAC address information and with alias address information of the plurality of end systems, wherein the alias information is associated with the virtual LAN to which at least one of the plurality of end systems belong.

11. The method of claim 1, wherein the virtual LAN includes the destination end system.

12. The method of claim 1, wherein the plurality of end systems includes the destination end system.

13. The method of claim 1, further comprising:

in response to a determination that the VLAN ID of the destination end system and the VLAN ID of the source end system are not the same, filtering the packet.

14. The method of claim 13, further comprising:

determining that the destination end system and the source end system are located on the same port; and

in response to a determination that the VLAN ID of the destination end system and the VLAN ID of the source end system are not the same and in response to a determination that the destination end system and the source end system are located on the same port, filtering the packet.

15. The method of claim 13, further comprising:

determining that the destination end system and the source end system are located on different ports and

in response to a determination that the VLAN ID of the destination end system and the VLAN ID of the source end system are not the same and in response to a determination that the destination end system and the source end system are located on different ports, determining, at the ingress switch, a path from the ingress switch to an egress switch to which the destination end system is attached; and

restricting transmission of the packet to the path from the ingress switch to the egress switch to which the destination end system is attached, to forward the packet to the destination end system.

16. The method of claim 1, wherein the network element is at least one of a switch and a router.

17. The method of claim 16, wherein the network element is the ingress switch.

18. A method of forwarding data packets in a switched communications network, the network comprising a plurality of systems including a plurality of end systems and a plurality of switches connected by links, the switches having ports connected to end systems and ports connected to other switches, and each end system having a unique physical address, comprising:

populating a directory with MAC address information and with a VLAN mapping of the plurality of systems, the VLAN mapping identifying a virtual LAN to which at least one of the plurality of systems belongs;

receiving, from a source end system of the plurality of end systems, a packet at a port of an ingress switch of the plurality of switches, the source end system belonging to the virtual LAN;

determining, based on information from the packet and the directory, a destination end system and a VLAN ID of the destination end system;

determining whether the VLAN ID of the destination end system and a VLAN ID of the source end system are the same; and

in response to determining whether the VLAN ID of the destination end system is the same as the source VLAN ID, restricting transmission of the packet to a path from the ingress switch to an egress switch to which the destination end system is attached, to forward the packet to the destination end system, the path based on the VLAN ID of the destination end system and the directory.

19. The method of claim 18, further comprising:

tagging the packet with additional information prior to transmitting the packet from the ingress switch to the egress switch.

20. The method of claim 19, wherein the additional information includes a header.

21. The method of claim 18, further comprising:

modifying the packet with path information prior to transmitting the packet from the ingress switch onto a path toward the egress switch.

22. An apparatus for forwarding data packets in a switched communications network, the network comprising a plurality of systems including a plurality of end systems and a plurality of switches connected by links, the switches having ports connected to end systems and ports connected to other switches, and each end system having a unique physical address, the apparatus comprising:

a directory populated with MAC address information and with a virtual LAN mapping of the plurality of systems, the virtual LAN mapping identifying a virtual LAN to which at least one of the plurality of systems belong;

a port of an ingress switch of the plurality of switches, the port configured to receive a packet from a source end system of the plurality of end systems, the source end system belonging to the virtual LAN;

the ingress switch configured to determine, based on information from the packet and the directory, a destination end system and a VLAN ID of the destination end system, and the ingress switch further configured to determine whether the VLAN ID of the destination end system and a VLAN ID of the source end system are the same;

a network element configured, in response to the determination by the ingress switch whether the VLAN ID of the destination end system is the same as the VLAN ID of the source end system, to determine a path from the ingress switch to an egress switch to which the destination end system is attached, the path based on the VLAN ID of the destination end system and the directory; and

a switching engine configured to, in response to a determination that the VLAN ID of the destination end system is the same as the source VLAN ID, restrict transmission of the packet to the path from the ingress switch to an egress switch to which the destination end system is attached, to forward the packet to the destination end system.

23. The apparatus of claim 22, wherein the directory comprises a local directory with information limited to information of end systems connected to one switch of the plurality of switches, wherein the information includes MAC address information and a virtual LAN mapping of the end systems connected to the one switch.

24. The apparatus of claim 22, wherein the directory comprises a local directory having information of only a plurality of end systems connected to the ingress switch, wherein the information includes MAC address information and a virtual LAN mapping of the plurality of end systems connected to the ingress switch.

25. The apparatus of claim 22, wherein the directory comprises a virtual directory having MAC address information and a virtual LAN mapping of a plurality of end systems connected to the ingress switch and having MAC address information and a virtual LAN mapping of end systems connected to other switches.

26. The apparatus of claim 22, wherein the directory comprises a virtual directory having MAC address information and a virtual LAN mapping of a plurality of end systems connected to the ingress switch and having MAC address information and a virtual LAN mapping of end systems connected to switches of the switched communications network and to at least one other switch external to the switched communications network.

27. The method of claim 22, wherein the network element is at least one of a switch and a router.

28. The method of claim 27, wherein the network element is the ingress switch.