Autonomic control plane packet transmission method, apparatus, and system

Patent metadata

Field	Value
Publication number	US-11716332-B2
Application number	US-202117226801-A
Country	US
Kind code	B2
Filing date	Apr 9, 2021
Priority date	Jul 17, 2015
Publication date	Aug 1, 2023
Grant date	Aug 1, 2023

Abstract

A method includes: setting up, by a first network device, a MACSec channel to a second network device according to the MACSec protocol; and sending, by the first network device, an ACP packet to the second network device by using the MACSec channel, where the ACP packet is carried in a MACSec frame, and a frame header of the MACSec frame carries identification information used to identify the ACP packet. By means of the packet transmission method, MACSec channel is set up between adjacent nodes in a self-organizing network according to the MACSec protocol, and an ACP packet is transmitted between the adjacent nodes by using the MACSec channel and processed.

First claim

The invention claimed is:

1. A method implemented by a first network device in a self-organizing network (SON), the method comprising:
setting up, according to a Media Access Control Security (MACsec) protocol, a MACsec channel between the first network device and a second network device in the SON;
encapsulating, according to the MACsec protocol, an autonomic control plane (ACP) packet to produce a MACsec frame, wherein the MACsec frame comprises a frame header, and wherein the frame header comprises identification information indicating that the MACsec frame carries the ACP packet; and
sending, to the second network device using the MACsec channel, the MACsec frame.

2. The method of claim 1 , wherein the frame header comprises an Ethernet type field, and wherein the Ethernet type field comprises the identification information.

3. The method of claim 2 , wherein the Ethernet type field indicates that the MACsec frame comprises the ACP packet.

4. The method of claim 1 , wherein the frame header comprises a flag bit field, and wherein the flag bit field comprises the identification information.

5. The method of claim 4 , wherein the flag bit field is a field or a version field.

6. The method according to claim 1 , wherein the frame header comprises a medium access control (MAC) address field, and wherein the MAC address field comprises the identification information.

7. The method of claim 1 , wherein the MACsec channel between the first network device and the second network device comprises an ACP-dedicated secure MACsec channel.

8. A first network device in a self-organizing network (SON) and comprising:
a memory configured to store instructions; and
one or more processors coupled to the memory and configured to execute the instructions to:
set up, according to a Media Access Control Security (MACsec) protocol, a MACsec channel between the first network device and a second network device in the SON;
encapsulate, according to the MACsec protocol, an autonomic control plane (ACP) packet to produce a MACsec frame, wherein the MACsec frame comprises a frame header, and wherein the frame header comprises identification information indicating that the MACsec frame carries the ACP packet; and
send, to the second network device using the MACsec channel, the MACsec frame.

9. The first network device of claim 8 , wherein the frame header comprises an Ethernet type field, and wherein the Ethernet type field comprises the identification information.

10. The first network device of claim 9 , wherein the Ethernet type field indicates that the MACsec frame comprises the ACP packet.

11. The first network device of claim 8 , wherein the frame header comprises a flag bit field, and wherein the flag bit field comprises the identification information.

12. The first network device of claim 11 , wherein the flag bit field is a field or a version field.

13. The first network device of claim 8 , wherein the frame header comprises a medium access control (MAC) address field, and wherein the MAC address field comprises the identification information.

14. The first network device of claim 8 , wherein the MACsec channel between the first network device and the second network device comprises an ACP-dedicated secure MACsec channel.

15. A second network device in a self-organizing network (SON) and comprising:
a memory configured to store instructions; and
one or more processors coupled to the memory and configured to execute the instructions to:
set up, according to a Media Access Control Security (MACsec) protocol, a MACsec channel between the second network device and a first network device in the SON; and
receive, from the first network device and using the MACsec channel, a MACsec frame, wherein the MACsec frame comprises a frame header and an autonomic control plane (ACP) packet, wherein the frame header comprises identification information indicating that the MACsec frame carries the ACP packet, and wherein the ACP packet is encapsulated according to the MACsec protocol.

16. The second network device of claim 15 , wherein the one or more processors are further configured to execute the instructions to determine the ACP packet according to the identification information.

17. The second network device of claim 15 , wherein the frame header comprises an Ethernet type field, wherein the Ethernet type field comprises the identification information, and wherein the Ethernet type field indicates that the MACsec frame comprises the ACP packet.

18. The second network device of claim 15 , wherein the frame header comprises a flag bit field, wherein the flag bit field comprises the identification information, and wherein the flag bit field is a field or a version field.

19. The second network device of claim 15 , wherein the frame header comprises a medium access control (MAC) address field, and wherein the MAC address field comprises the identification information.

20. The second network device of claim 15 , wherein the MACsec channel between the first network device and the second network device comprises an ACP-dedicated secure MACsec channel.

Assignees

• Huawei Tech Co Ltd

Inventors

• Du Zongpeng
• Jiang Sheng
• Liu Bing

Classifications

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L67/104 Primary

  Peer-to-peer [P2P] networks · CPC title

• H04L9/40

  Network security protocols · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04L63/162

  at the data link layer · CPC title