Methods, systems, and apparatuses for dynamically tagging vlans

Patent metadata

Field	Value
Publication number	US-2016285647-A1
Application number	US-201615180931-A
Country	US
Kind code	A1
Filing date	Jun 13, 2016
Priority date	Jun 7, 2012
Publication date	Sep 29, 2016
Grant date	—

Abstract

Systems, mechanisms, apparatuses, and methods are disclosed for dynamically tagging VLANs. For example, in one embodiment such means include: means for receiving a packet having identified therein a source Media Access Control (MAC) address and a Virtual Local Area Network (VLAN) Identifier, wherein the VLAN identifier corresponds to a VLAN which is non-existent on a network switch; means for modifying the packet received to include two VLAN tags, a first VLAN tag corresponding to the VLAN identifier identified within the packet received and a second VLAN tag, distinct from the first; means for determining no forwarding database entry exists for the modified packet; and means for creating the VLAN on the network switch to handle received packets tagged with the VLAN identifier.

First claim

1 . (canceled)

2 . A method for dynamically tagging VLAN network traffic using a network switch having a processor and a memory therein, the method comprising:
receiving a packet including an indication of a source Media Access Control (MAC) address and an indication of a first Virtual Local Area Network (VLAN), wherein the indication of the first VLAN corresponds to a VLAN that is non-existent on the network switch; modifying the packet to include an indication of a second VLAN, the second VLAN being different from the first VLAN, wherein the second VLAN is associated with a Virtual Metro Area Network (VMAN); adding, to a MAC forwarding database, an entry that associates the source MAC address with the second VLAN; and transmitting the modified packet to the VMAN in accordance with the entry in the MAC forwarding database.

3 . The method of claim 2 , wherein modifying the packet to include the indication of the second VLAN comprises performing a push operation to add the indication of the second VLAN to an outer end of a tag stack.

4 . The method of claim 2 , wherein the method further comprises determining that no MAC forwarding database entry exists for the modified packet.

5 . The method of claim 4 , wherein determining that no MAC forwarding database entry exists for the modified packet comprises performing, using processing circuitry, a database lookup operation using a key characterized by the source MAC address and the indication of the second VLAN.

6 . The method of claim 2 , wherein the method further comprises creating a VLAN on the network switch to receive packets that include the indication of the first VLAN.

7 . The method of claim 2 , wherein the method further comprises configuring an ingress port as being tagged for the first VLAN, wherein the ingress port was used to receive the packet.

8 . The method of claim 2 , wherein the indication of the second VLAN is a Service VLAN Identifier (SVID) tag.

9 . The method of claim 2 , wherein the method further comprises:
creating a VMAN that is operative on one or more ingress ports of the network switch; and designating the one or more ingress ports as untagged ports.

10 . The method of claim 2 , wherein the VMAN processes one or more packets that include indications of a VLAN that does not correspond to any VLAN existent on the network switch, wherein processing the one or more packets prevents the network switch from dropping the one or more packets due to a lack of forwarding information.

11 . The method of claim 2 , wherein the method further comprises validating, using an outside policy profile, that the source MAC address and the indication of the first VLAN represent a valid dynamically tagged VLAN.

12 . A network switch, for dynamically tagging VLAN network traffic, comprising:
a memory configured to store a MAC forwarding database; processing circuitry configured to:
receive, using an ingress port, a packet including an indication of a source Media Access Control (MAC) address and an indication of a first Virtual Local Area Network (VLAN), wherein the indication of the first VLAN corresponds to a VLAN that is non-existent on the network switch;
modify the packet to include an indication of a second VLAN, the second VLAN being different from the first VLAN, wherein the second VLAN is associated with a Virtual Metro Area Network (VMAN);
add, to the MAC forwarding database, an entry that associates the source MAC address with the second VLAN; and
transmit the modified packet to the VMAN in accordance with the entry in the MAC forwarding database.

13 . The network switch of claim 12 , wherein the packet includes a tag stack, wherein modifying the packet to include the indication of the second VLAN comprises performing a push operation to add the indication of the second VLAN to an outer end of the tag stack.

14 . The network switch of claim 12 , wherein the processing circuitry is further configured to determine that no MAC forwarding database entry exists for the modified packet.

15 . The network switch of claim 14 , wherein determining that no MAC forwarding database entry exists for the modified packet comprises performing a database lookup operation using a key characterized by the source MAC Address and the indication of the second VLAN.

16 . The network switch of claim 12 , wherein the processing circuitry is further configured to create a VLAN on the network switch to receive packets that include the indication of the first VLAN.

17 . The network switch of claim 12 , wherein the processing circuitry is further configured to configure the ingress port as being tagged for the first VLAN.

18 . The network switch of claim 12 , wherein the indication of the second VLAN is a Service VLAN Identifier (SVID) tag.

19 . The network switch of claim 12 , wherein the processing circuitry is further configured to:
create a VMAN that is operative on one or more ingress ports of the network switch; and designate the one or more ingress ports as untagged ports.

20 . The network switch of claim 12 , wherein the system further comprises a VMAN packet catcher that processes one or more packets that include indications of a VLAN that does not correspond to any VLAN existent on the network switch, wherein processing the one or more packets prevents the network switch from dropping the one or more packets due to a lack of forwarding information.

21 . The network switch of claim 12 , wherein the processing circuitry is further configured to validate, using an outside policy profile, that the source MAC address and the indication of the first VLAN represent a valid dynamically tagged VLAN.

Assignees

• Extreme Networks Inc

Inventors

• Grosser Donald B
• Ramamurthy Shankara

Classifications

• H04L69/22

  Parsing or analysis of headers · CPC title

• H04L12/4658

  wherein a VLAN tag represents a service provider backbone VLAN, e.g. B-Tag, S-Tag · CPC title

• H04L12/4666 Primary

  Operational details on the addition or the stripping of a tag in a frame, e.g. at a provider edge node · CPC title

• H04L12/56

  Packet switching systems · CPC title

• H04L12/4654

  wherein a VLAN tag represents a customer VLAN, e.g. C-Tag · CPC title