Method and apparatus for detecting user network interface connectivity of virtual private network

Patent metadata

Field	Value
Publication number	US-10348591-B2
Application number	US-201415313166-A
Country	US
Kind code	B2
Filing date	Sep 12, 2014
Priority date	May 27, 2014
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

A method for detecting connectivity of user node interface in a virtual private network includes: acquiring a configuration parameter used for detecting connectivity of a user node interface between a source address and a destination address in the virtual private network; transmitting an Internet Control Message Protocol (ICMP) request packet from the source address to the destination address through the configuration parameter, and receiving an ICMP response packet responded by the destination address; and after receiving the ICMP response packet responded by the destination address, calculating a round-trip time value of a link between the source address and the destination address, and then collecting statistics on the connectivity of the user node interface between the source address and the destination address according to the round-trip time value obtained by calculation.

First claim

What is claimed is:

1. A method for detecting connectivity of user node interface in a virtual private network, comprising:
acquiring a configuration parameter used for detecting connectivity of a user node interface between a source address and a destination address in the virtual private network;
transmitting an Internet Control Message Protocol ICMP request packet from the source address to the destination address through the configuration parameter and receiving an ICMP response packet responded by the destination address; and
calculating out a round-trip time value of a link between the source address and the destination address after receiving the ICMP response packet responded by the destination address, and then collecting statistics on the connectivity of the user node interface between the source address and the destination address according to the round-trip time value obtained by calculation,
wherein before receiving the ICMP response packet responded by the destination address, the method further comprises:
sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list, and
before sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list, the method further comprises:
determining whether the configuration parameter acquired by means of the user node interface packet Internet groper command can be matched to control and information protocol CIP information;
prompting an error of the configuration parameter when the configuration parameter cannot be matched to the CIP information; or
performing the sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list when the configuration parameter can be matched to the CIP information.

2. The method according to claim 1 , wherein the acquiring a configuration parameter used for detecting connectivity of a user node interface between a source address and a destination address in the virtual private network comprises:
acquiring the configuration parameter used for detecting the connectivity of the user node interface between the source address and the destination address in the virtual private network by means of a user node interface packet Internet groper command.

3. The method according to claim 1 , wherein before sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list, the method further comprises:
determining whether a port used for sending the configuration parameter is a SmartGroup port;
acquiring, when the port is a SmartGroup port, a member port bound with SmartGroup, and then performing the sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list; and
performing the sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list when the port is not a SmartGroup port.

4. The method according to claim 3 , wherein before sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list, the method further comprises:
determining whether a device positioned at the source address is a distributed device or a centralized device;
performing the sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list when the device positioned at the source address is a centralized device; and
transmitting a message delivered to a card provided with an outgoing port when the device positioned at the source address is a distributed device, and then performing the sending the configuration parameter to an access control list and adding a rule used for receiving the ICMP response packet responded by the destination address into the access control list.

5. The method according to claim 1 , wherein before transmitting an ICMP request packet from the source address to the destination address through the configuration parameter and receiving an ICMP response packet responded by the destination address, the method further comprises:
encapsulating a load part of the ICMP request packet, and calculating a checksum of the ICMP packet;
encapsulating a load part of an IP request packet, and calculating a checksum of the IP packet;
matching a corresponding Address Resolution Protocol ARP entry in an ARP table according to the destination address;
performing the transmitting an ICMP request packet from the source address to the destination address through the configuration parameter and receiving an ICMP response packet responded by the destination address when a corresponding ARP entry is searched out; and
caching the ICMP request packet when no corresponding ARP entry is searched out, starting up a cache packet timer, transmitting an ARP broadcast packet request to learn an ARP entry at an opposite end, adding the learned ARP entry into the ARP table, and then performing the transmitting the ICMP request packet from the source address to the destination address through the configuration parameter and receiving an ICMP response packet responded by the destination address.

6. The method according to claim 5 , wherein after termination of a user node interface packet Internet groper command, the method further comprises:
deleting the created timer and/or emptying ARP entries in the ARP table.

7. The method according to claim 1 , further comprising:
calculating out maximum jitter time and/or minimum jitter time for continuously transmitting ICMP request packets according to a preset calculation strategy, wherein the preset calculation strategy comprises:
subtracting a round-trip time value calculated out last time from a round-trip time value calculated out this time to obtain a time difference of this jitter when a quantity of received ICMP response packets is greater than 1; maximum jitter time and minimum jitter time being current jitter time when the quantity of received ICMP response packets is 2; recalculating out current jitter time and comparing the current jitter time with previous maximum jitter time and minimum jitter time when the quantity of received ICMP response packets is greater than 2, and taking the current jitter time as present maximum jitter time when the current jitter time is greater than the previous maximum jitter time; or taking the current jitter time as present minimum jitter time when the current jitter time is smaller than the previous minimum jitter time.

8. An apparatus for detecting connectivity of user node interface in a virtual private network, comprising:
a processor; and
a memory configured to store instructions executable by the processor;
wherein the processor is configured to perform:
acquiring a configuration parameter used for detecting connectivity of a user node interface between a source address and a destination address in the virtual private network;
transmitting an Internet Control Message Protocol ICMP request packet from the source address to the destination address through the configuration parameter and receiving an ICMP response packet

Assignees

• Zte Corp

Inventors

• Zhang Yan
• Wu Rui

Classifications

• H04L43/0864

  Round trip delays · CPC title

• H04L43/10

  Active monitoring, e.g. heartbeat, ping or trace-route · CPC title

• H04L43/0811 Primary

  by checking connectivity · CPC title

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L43/087

  Jitter · CPC title