Method and device thereof for automatically finding and configuring virtual network

Patent metadata

Field	Value
Publication number	US-9485147-B2
Application number	US-201314416865-A
Country	US
Kind code	B2
Filing date	Jun 21, 2013
Priority date	Jul 24, 2012
Publication date	Nov 1, 2016
Grant date	Nov 1, 2016

Abstract

A virtual network auto-discovery and auto-configuration method and device thereof are provided. The method includes a tenant end system automatically discovering network virtualization edges (NVEs), the NVE initiating a VN identity authentication of the tenant end system, and the NVE automatically configuring a VN forwarding table of the VN after the tenant end system passes the VN identity authentication. The method and device solve the technical problem that virtual network configuration efficiency is low due to manually configuring the virtual network, and achieve the technical effect of improving the virtual network configuration efficiency.

First claim

What is claimed is:

1. A virtual network auto-discovery and auto-configuration method, comprising:
a tenant end system automatically discovering network virtualization edges (NVEs);
the NVE initiating a virtual network (VN) identity authentication of the tenant end system;
the NVE automatically configuring a VN forwarding table of the VN after the tenant end system passes through the VN identity authentication;
wherein, the step of the tenant end system automatically discovering network virtualization edges (NVEs) comprises:
the tenant end system sending a network virtualization edge (NVE) auto-discovery broadcast message carrying a virtual network attribute;
the tenant end system receiving a NVE existing message returned by the NVEs;
the tenant end system selecting one of the NVEs which send the NVE existing message as a serving NVE of the tenant end system, and sending a NVE request message to the serving NVE;
the tenant end system receiving a NVE confirmation message sent by the serving NVE.

2. The method of claim 1 , wherein, the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message are specified types of messages, wherein, a message type field is included in the specified types of messages, and a value of the message type field is pre-defined.

3. The method of claim 1 , wherein, the virtual network attribute is a virtual network's identifier (VN-ID) and/or a virtual network's name.

4. The method of claim 1 , wherein,
all of the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message comprise a field indicating the VN-ID; the NVE auto-discovery broadcast message and the NVE request message comprise a field indicating the virtual network's name; or
the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message are messages in a point to point protocol over Ethernet (PPPoE) with a new version number, wherein, the messages in the PPPoE with the new version number comprise a field indicating VN-ID information; or
the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message comprise a TAG field indicating the virtual network (VN) and/or NVE attributes, wherein, the TAG field comprises at least one of the following: virtual local access network (VLAN) information, quality of service (QoS) requirement information, internet protocol (IP) address information of the tenant end system, NVE type information, NVE capability information, and public keys supported in messages between the tenant end system and the NVEs.

5. The method of claim 1 , wherein, the tenant end system comprises at least one of the following: a virtual machine (VM), a physical computer, or a server.

6. The method of claim 1 , wherein, the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message are implemented with layer 3 (L3) messages;
wherein, the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message comprise: fields used to indicate the VN's name, the VN-ID, the NVE's physical address, and the NVE's IP address;
wherein, the fields used to indicate the VN's name, the VN-ID, the NVE's physical address and the NVE's IP address are standalone fields in the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message, or are represented with option fields;
wherein, the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message are messages in a dynamic host configuration protocol (DHCP) with a new version number, wherein, the messages in the DHCP with the new version number comprise fields indicating the VN's name, the VN-ID, the NVE's physical address, and the NVE's IP address; the fields used to indicate the VN's name, the VN-ID, the NVE's physical address and the NVE's IP address are obtained by adding new fields into the DHCP messages with an old version number or implemented with new option fields.

7. The method of claim 1 , wherein, the step of the NVE initiating a virtual network (VN) identity authentication of the tenant end system comprises:
the NVE initiating a VN identity authentication of the tenant end system after sending the NVE confirmation message;
wherein, the VN identity authentication is implemented by Point to Point Protocol (PPP), or Extensible Authentication Protocol (EAP), or 802.1x.

8. The method of claim 1 , wherein, the step of the NVE automatically configuring the VN forwarding table of the VN comprises:
judging whether there exists a VN instance in the NVE or not;
if there exists a VN instance, the NVE directly adding an entry corresponding to the tenant end system into the VN forwarding table in the existing VN instance;
if there exists no VN instance, the NVE generating a VN instance, wherein the VN instance comprises: a VN forwarding table; the NVE adding an entry corresponding to the tenant end system into the VN forwarding table in the generated VN instance.

9. The method of claim 1 , wherein, the VN forwarding table is a forwarding table based on MAC address, or a routing and forwarding table based on IP address.

10. A tenant end system, comprising:
a sending unit, configured to send a network virtualization edge (NVE) auto-discovery broadcast message carrying a virtual network attribute;
a receiving unit, configured to receive a NVE existing message returned by NVEs;
a processing unit, configured to select one of the NVEs sending the NVE existing message as a serving NVE of the tenant end system;
wherein the sending unit is further configured to send a NVE request message to the serving NVE, and the receiving unit is further configured to receive a NVE confirmation message sent by the serving NVE;
the system further comprises:
an authenticating unit, configured to perform a virtual network (VN) identity authentication with the NVE after the receiving unit receives the NVE confirmation message sent by the serving NVE.

11. The tenant end system of claim 10 , wherein, the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message are specified types of messages, wherein, the specified types of messages comprise a message type field, and a value of the message type field is pre-defined.

12. The tenant end system of claim 10 , wherein, the tenant end system comprises at least one of the following: a virtual machine (VM), a physical computer, or a server.

13. The tenant end system of claim 10 , wherein, the NVE auto-discovery broadcast message, the NVE existing message, the NVE request message and the NVE confirmation message are layer 2 (L2) messages, or are implemented with layer 3(L3) messages.

14. The tenant end system of claim 10 , wherein, the authenticating unit comprises:
an authenticating module, configured to support using Point to Point Protocol (PPP) or Extensible Authentication Protocol (EAP) or 802.1x to perform a VN identity authentication of the tenant end system.

15. A network virtualization edge, comprising:
a receiving unit, configured to receive a network virtualization edge (NVE) auto-discovery broadcast message carrying a virtual network attribute sent by the tenant end system;
a sending unit, configured to send a NVE existing message to the tenant end system in response to the NVE auto-discovery broadcast messag

Assignees

• Zte Corp

Inventors

• Gu Zhongyu

Classifications

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L41/0886 Primary

  Fully automatic configuration · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L61/2015

  Electricity · mapped topic