Huawei Technologies Co., Limited

Ying Xie

Xin Wang

Guangrui Wu

Pu Cheng

Shuming Liu

Yuan Gao

Weiguo Hao

Xianming Li

Dongdong Li

Daolong Zhou

Zhongfang Lin

Yinwei Luo

Yan Zhang

Shaoqi Zhao

Fengming Zhou

Hao Qi

Yuezhuo Sun

A first data center interconnection (DCI) device in a first data center receives a first packet from a Border Gateway Protocol Ethernet virtual private network (BGP EVPN) neighbor, where the first packet includes routing information of a first forwarding instance of an access device in the first data center and an export route target of the first forwarding instance. The first DCI device obtains a second forwarding instance that corresponds to the first packet, where an import route target of the second forwarding instance matches the export route target of the first forwarding instance. The first DCI device generates a second packet that includes routing information of the second forwarding instance and an export route target of the second forwarding instance, which includes a DCI interworking route target. The first DCI device sends the second packet to a second DCI device in a second data center.

Routing information transmission method and apparatus, and data center interconnection network

This application provides a path switching method and a related apparatus. In the path switching process, an ECMP table includes a first ECMP index of a first path group and a second ECMP index of a second path group; when all paths in the first path group have failed, a path group identifier corresponding to the first ECMP index may be changed from valid to invalid in the ECMP table, indicating that all paths in the first path group are unavailable. In this case, a path group identifier corresponding to the second ECMP index is valid, indicating that the second path group includes an available path, thereby completing switching between an active path and a standby path. In this process, only an identifier corresponding to the ECMP index needs to be updated, and therefore, the time consumed is relatively short, and the path switching delay can be effectively reduced.

Path switching method and related apparatus

The present invention discloses an access control method, apparatus, and system, and belongs to the communications field. The method includes: receiving a virtual extensible local area network VXLAN request packet sent by an access device; parsing the VXLAN request packet to obtain an IP address of the access device and authentication information of a user; sending the IP address of the access device and the authentication information of the user to an authentication server, so that the authentication server authenticates the user; receiving an authentication result sent by the authentication server; and controlling the user according to the authentication result. According to the present invention, the user is authenticated according to access information of the user in a VXLAN scenario.

Access control method, apparatus, and system

A troubleshooting method and apparatus for an edge routing bridge (RB) in a Transparent Interconnection of Lots of Links (TRILL) campus, which belong to the field of communications technologies, where the method includes detecting, by a first edge RB in a multi-homing access group, whether an access link of the first edge RB is faulty, and sending, by the first edge RB, a fault notification message to one or more other edge RBs except the first edge RB in the multi-homing access group using the TRILL campus, when the access link of the first edge RB is faulty, where the fault notification message is used to notify the one or more other edge RBs that the access link of the first edge RB is faulty, and hence effectively increase a network convergence speed and network reliability.

Troubleshooting method and apparatus for edge routing bridge in TRILL campus

A switch receives a first packet, where the first packet includes a source media access control MAC address. The switch obtains a first flapping count corresponding to the source MAC address. The switch determines, based on the first flapping count, whether a loop failure occurs in a network in which the switch is located. When the loop failure occurs in the network in which the switch is located, the switch obtains a flapping port set corresponding to the source MAC address. The switch determines a primary port in the plurality of ports, where the primary port is a port that must be suppressed. The switch enables a flooding suppression function on the primary port, where the flooding suppression function is used to suppress forwarding of a received flooding packet by the primary port.

Loop failure handling method and switch

A method for packet forwarding based on equal-cost multi-path and a network device, in order to resolve problems that are caused by inconsistent forwarding paths for packets in two directions of a same service flow in an equal-cost multi-path scenario. A first network device performs calculation on characteristic information in a packet using a hash algorithm to obtain a hash value, determines, according to a correspondence between hash values and path identifiers that is acquired in advance, a path identifier corresponding to the hash value, and forwards the packet to a second network device through a path that corresponds to the path identifier, where the path is one of the N equal-cost paths. There exist N equal-cost paths for packet forwarding between the first network device and the second network device. The same hash algorithm is configured on the two network devices respectively.

Method for packet forwarding based on equal-cost multi-path and network device

A packet forwarding method, apparatus, and system in which a host receives a first packet sent by a gateway, and parses the first packet to obtain a source IP address and a source MAC address from the first packet; queries a host cache table, when a mapping relationship between the source IP address and the source MAC address does not exist in the host cache table, saves the mapping relationship between the source IP address and the source MAC address in the host cache table; the host generates a response packet according to the first packet, and queries the host cache table to acquire a first destination MAC address corresponding to a first destination IP address that is in the response packet; and forwards, according to the first destination MAC address, the response packet to an external network by using the gateway.

Packet forwarding method, apparatus, and system

The present invention provides a method for processing a packet on a TRILL network, relates to the field of communications, and can effectively defend against a network packet attack. The method includes: receiving a packet sent by a device on a network; if it is determined that the device is a trusted RB, giving up performing a security check on the packet coming from the device; and if it is determined that the device is not a trusted RB, performing a security check on the packet coming from the device. The present invention further provides a corresponding apparatus.

Method and apparatus for processing packet on trill network

A differentiated service (DS) domain generating method, a device, and a system. A network management device obtains device attribute information of multiple DS devices; determines according to the device attribute information of the multiple DS devices, a DS device that belongs to a first DS domain; and sends a notification message to the DS device that belongs to the first DS domain, so that the DS device that belongs to the first DS domain joins the first DS domain according to the notification message, thereby implementing automatic determining and generation of a DS domain, reducing workload of configuring quality of service (QoS) parameters in a DS domain including a relatively large number of devices, and improving efficiency in generating and maintaining the DS domain.

DS domain generating method, device and system

Embodiments of the present disclosure provide a method, system and network node for auto-configuration, and a network node. A network node in a BVLAN receives IS-IS protocol packets sent by other network nodes in the BVLAN; determines its own priority in the BVLAN; transmits uniform configuration information in the BVLAN according to its own priority, where the uniform configuration information is information that needs to be configured on each network node in the BVLAN. In the embodiments of the present disclosure, auto-configuration may be performed on the network node, thereby improving a speed and accuracy of configuration.

Method and system for auto-configuration, and network node

A method, an apparatus and a system for two-node cluster hot backup is provided. A second network node configures a redundancy protocol with a first network node at an access port to negotiate an active/standby relationship between each local access port and each access port of the first network node, releases a route of a network segment of a user, where the network segment of the user is the same as a network segment of a user to which a route released by the first network node belongs, establishes or specifies a protection channel with the first network node, synchronizes user information with the first network node, and when the first network node has a failure, performs service switching according to the redundancy protocol, and sends a downstream traffic to the user according to the user information.

Growing community of inventors

Nanjing, China

Ying Xie