BFD OVER VxLAN ON vPC UPLINKS

Patent metadata

Field	Value
Publication number	US-2019109759-A1
Application number	US-201816199467-A
Country	US
Kind code	A1
Filing date	Nov 26, 2018
Priority date	Mar 7, 2016
Publication date	Apr 11, 2019
Grant date	—

Abstract

Disclosed are systems, methods, and computer-readable storage media for synchronizing the secondary vPC node to the primary vPC node in a BFD protocol over a VxLAN channel with a remote node. In some embodiments of the present technology a primary vPC node can receive a packet from the remote node. The primary vPC node can then determine the packet includes either a MAC address corresponding to the primary vPC node or a secondary vPC node, and at least one inner packet identifier. Additionally, the primary networking switch can identify an access control list (ACL) entry from a set of ACL entries based on the at least one inner packet identifier. Subsequently, based on the ACL entry, the primary vPC node can generate a copy of the packet. After which, the primary vPC node can transmit the packet to the secondary vPC node.

First claim

What is claimed is:

1 . A method, comprising:
receiving, by a primary virtual port channel (vPC) node, a packet from a remote node; generating, by the primary vPC node, a copy of the packet; and based on a MAC address of the packet and after generating a copy of the packet, transmitting, by the primary vPC node to a secondary vPC node, the packet; receiving, by the primary vPC node in response to the transmitting, a second packet; authorizing, by the primary vPC node in response to determining the secondary vPC node generated a copy of the second packet, receipt of the second packet; and restricting by the primary vPC node in response to determining the secondary vPC node did not generate a copy of the second packet, receipt of the second packet.

2 . The method of claim 1 , further comprising:
determining, by the secondary vPC node, the primary vPC node generated a copy of the packet.

3 . The method of claim 1 , wherein the primary vPC node and the secondary vPC node include MAC addresses of both the primary vPC node and the secondary vPC node.

4 . The method of claim 1 , further comprising:
receiving, by the primary vPC node and from a second remote node, a second packet; determining, by the primary vPC node, the second packet includes the MAC address corresponding to either the primary vPC node or the secondary vPC node and an inner user datagram protocol (UDP) destination address; and identifying, by the primary vPC node, an access control list entry (ACL) entry from a set of ACL entries based on the inner UDP destination address, the ACL entry including an instruction to copy the second packet.

5 . The method of claim 4 , further comprising:
based on the identified ACL entry, generating, by the primary vPC node, a copy of the second packet; and based on the determined MAC address of the second packet and after generating a copy of the second packet, transmitting, by the primary vPC node to the secondary vPC node, the packet.

6 . The method of claim 1 , further comprising
determining a failover of the primary vPC node; and transmitting instructions to the node to initialize communications between the node and the secondary vPC node.

7 . The method of claim 1 , wherein the packet includes at least one of an inner destination internet protocol (IP) address, an inner user datagram protocol (UDP) destination port address and an inner IP time to live (TTL).

8 . A non-transitory computer-readable media containing instructions that, when executed by a primary vPC node, cause the primary vPC node to perform operations comprising:
receiving, by a primary virtual port channel (vPC) node, a packet from a remote node; generating, by the primary vPC node, a copy of the packet; and based on a MAC address of the packet and after generating a copy of the packet, transmitting, by the primary vPC node to a secondary vPC node, the packet; receiving, by the primary vPC node in response to the transmitting, a second packet; authorizing, by the primary vPC node in response to determining the secondary vPC node generated a copy of the second packet, receipt of the second packet; and restricting by the primary vPC node in response to determining the secondary vPC node did not generate a copy of the second packet, receipt of the second packet.

9 . The media of claim 8 , the operations further comprising:
determining, by the secondary vPC node, the primary vPC node generated a copy of the packet.

10 . The media of claim 8 , wherein the primary vPC node and the secondary vPC node include MAC addresses of both the primary vPC node and the secondary vPC node.

11 . The media of claim 8 , the operations further comprising:
receiving, by the primary vPC node and from a second remote node, a second packet; determining, by the primary vPC node, the second packet includes the MAC address corresponding to either the primary vPC node or the secondary vPC node and an inner user datagram protocol (UDP) destination address; and identifying, by the primary vPC node, an access control list entry (ACL) entry from a set of ACL entries based on the inner UDP destination address, the ACL entry including an instruction to copy the second packet.

12 . The media of claim 11 , the operations further comprising:
based on the identified ACL entry, generating, by the primary vPC node, a copy of the second packet; and based on the determined MAC address of the second packet and after generating a copy of the second packet, transmitting, by the primary vPC node to the secondary vPC node, the packet.

13 . The media of claim 8 , the operations further comprising
determining a failover of the primary vPC node; and transmitting instructions to the node to initialize communications between the node and the secondary vPC node.

14 . The media of claim 8 , wherein the packet includes at least one of an inner destination internet protocol (IP) address, an inner user datagram protocol (UDP) destination port address and an inner IP time to live (TTL).

15 . A computer system, comprising:
a primary virtual port channel (vPC) node, a memory comprising instructions which when executed by the primary vPC node cause the computer system to perform operations comprising:
receiving, by a primary virtual port channel (vPC) node, a packet from a remote node;
generating, by the primary vPC node, a copy of the packet; and
based on a MAC address of the packet and after generating a copy of the packet, transmitting, by the primary vPC node to a secondary vPC node, the packet;
receiving, by the primary vPC node in response to the transmitting, a second packet;
authorizing, by the primary vPC node in response to determining the secondary vPC node generated a copy of the second packet, receipt of the second packet; and
restricting by the primary vPC node in response to determining the secondary vPC node did not generate a copy of the second packet, receipt of the second packet.

16 . The system of claim 15 , the operations further comprising:
determining, by the secondary vPC node, the primary vPC node generated a copy of the packet.

17 . The system of claim 15 , wherein the primary vPC node and the secondary vPC node include MAC addresses of both the primary vPC node and the secondary vPC node.

18 . The system of claim 15 , the operations further comprising:
receiving, by the primary vPC node and from a second remote node, a second packet; determining, by the primary vPC node, the second packet includes the MAC address corresponding to either the primary vPC node or the secondary vPC node and an inner user datagram protocol (UDP) destination address; and identifying, by the primary vPC node, an access control list entry (ACL) entry from a set of ACL entries based on the inner UDP destination address, the ACL entry including an instruction to copy the second packet.

19 . The system of claim 18 , the operations further comprising:
based on the identified ACL entry, generating, by the primary vPC node, a copy of the second packet; and based on the determined MAC address of the second packet and after generating a copy of the second packet, transmitting, by the primary vPC node to the secondary vPC node, the packet.

20 . The system of claim 15 , the operations further comprising
determining a failover of the primary vPC node; and transmitting instructions to the node to initialize communications between the node and the secondary vPC node.

Assignees

• Cisco Tech Inc

Inventors

• Govindan Vengada Prasad
• Banerjee Ayan
• Mahajan Mehak
• Gidwani Abhayraj Kuldip
• Mallik Mudigonda Jwala

Classifications

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L41/0654 Primary

  using network fault recovery (ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437) · CPC title

• H04L41/0659

  by isolating or reconfiguring faulty entities · CPC title