Automatic resolution of virtual network instance to VLAN mapping conflicts in dual-homed deployments in a dynamic fabric automation network architecture

Patent metadata

Field	Value
Publication number	US-9794085-B2
Application number	US-201615209354-A
Country	US
Kind code	B2
Filing date	Jul 13, 2016
Priority date	Dec 24, 2013
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

In accordance with one example embodiment, there is provided a system configured for virtual local area network (VLAN) blocking on a virtual port channel (vPC) member link to handle discrepant virtual network instance (VNI) to VLAN mappings. In other embodiments, the system can be configured for providing Virtual Switch Interface Discovery Protocol (VDP) and virtual switch enhancements to accommodate discrepant VNI to VLAN mappings. In another example embodiment, an apparatus is provided that includes a processor, and a memory coupled to the processor, where the apparatus is configured such that if a server is connected through a virtual port channel, a VDP is used to notify the server of different VNI to VLAN mappings. In another embodiment, the apparatus can extend a VDP Filter Info Field to carry a set of VLANs mapped to a VNI, keyed by leaf MAC addresses that serve as bridge identifiers.

First claim

What is claimed is:

1. A method comprising:
receiving, at a first peer leaf, information identifying a first virtual network instance (VNI) as being mapped to a second virtual local area network (VLAN) at a second peer leaf, wherein the first VNI is also being mapped to a first VLAN at the first peer leaf;
blocking a link over the first VLAN that connects the first peer leaf to a virtual machine associated with the first VNI in response to determining that the first VLAN is different than the second VLAN;
transmitting, to a dual-homed server, a mapping of the first VNI to the second VLAN; and
mapping the first VNI to the second VLAN in response to a request for a VLAN mapping for a virtual machine associated with the first VNI.

2. The method of claim 1 , wherein the dual-homed server is coupled to the first peer leaf and the second peer leaf over a virtual port channel.

3. The method of claim 1 , wherein blocking the link includes
blocking a virtual port channel link over the first VLAN connecting a virtual port at the first peer leaf to the virtual machine at the dual-homed server to disallow traffic from the virtual machine to the first peer leaf using the first VLAN.

4. The method of claim 1 , wherein the virtual machine was, prior to the first peer leaf receiving the request for the VLAN mapping, associated with the first VNI at a server connected to the second peer leaf and not to the first peer leaf.

5. The method of claim 1 , wherein the received information identifying the first VNI as being mapped to the second VLAN at the second peer leaf was received over a multi-chassis trunk link between the first peer leaf and the second peer leaf.

6. The method of claim 1 , wherein determining that the first VLAN is different from the second VLAN includes:
determining that the first VLAN is being mapped to the first VNI using a table mapping VNIs to VLANs; and
comparing the second VLAN against the first VLAN.

7. A first peer leaf comprising:
at least one memory element;
at least one processor coupled to the at least one memory element; and
a mappings module that when executed by the at least one processor is configured to:
receive, at the first peer leaf, information identifying a first virtual network instance (VNI) as being mapped to a second virtual local area network (VLAN) at a second peer leaf, wherein the first VNI is also being mapped to a first VLAN at the first peer leaf; and
transmit, to a dual-homed server, a mapping of the first VNI to the second VLAN; and

a blocking module that when executed by the at least one processor is configured to:
block a link over the first VLAN that connects the first peer leaf to a virtual machine associated with the first VNI in response to a determination that the first VLAN is different than the second VLAN, wherein the virtual machine was, prior to the first peer leaf receiving a request for the VLAN mapping, associated with the first VNI at a server connected to the second peer leaf and not to the first peer leaf.

8. The first peer leaf of claim 7 , wherein the dual-homed server is coupled to the first peer leaf and the second peer leaf over a virtual port channel.

9. The first peer leaf of claim 7 , wherein blocking the link includes blocking a virtual port channel link over the first VLAN connecting a virtual port at the first peer leaf to the virtual machine at the dual-homed server to disallow traffic from the virtual machine to the first peer leaf using the first VLAN.

10. The first peer leaf of claim 7 , wherein the information identifying the first VNI as being mapped to the second VLAN was sent in response to a request for a VLAN mapping for a virtual machine associated with the first VNI.

11. The first peer leaf of claim 7 , wherein the received information identifying the first VNI as being mapped to the second VLAN at the second peer leaf includes information that was received over a multi-chassis trunk link between the first peer leaf and the second peer leaf.

12. The first peer leaf of claim 7 , wherein the determination that the first VLAN is different from the second VLAN was made by analyzing a table mapping VNIs to VLANs, determining that the first VLAN was mapped to the first VNI, and comparing the second VLAN against the first VLAN.

13. At least one machine readable non-transitory storage medium having instructions stored thereon, wherein the instructions, when executed by at least one processor cause the at least one processor to:
receive, at a first peer leaf, information identifying a first virtual network instance (VNI) as being mapped to a second virtual local area network (VLAN) at a second peer leaf, wherein the first VNI is also being mapped to a first VLAN at the first peer leaf;
block a link over the first VLAN that connects the first peer leaf to a virtual machine associated with the first VNI in response to determining that the first VLAN is different than the second VLAN, wherein the determination that the first VLAN is different from the second VLAN was made by analyzing a table mapping VNIs to VLANs, determining that the first VLAN was mapped to the first VNI, and comparing the second VLAN against the first VLAN being mapped to first VNI; and
transmit, to a dual-homed server, a mapping of the first VNI to the second VLAN.

14. The at least one machine readable storage medium of claim 13 , wherein the instructions, when executed by the at least one processor further cause the at least one processor to:
receive, at the first peer leaf from the dual-homed server, a request for a VLAN mapping for a virtual machine associated with the first VNI, wherein the determination that the first VLAN was different than the second VLAN was performed in response to receiving the request.

15. The at least one machine readable storage medium of claim 13 , wherein the instructions, when executed by the at least one processor further cause the at least one processor to:
block a virtual port channel link over the first VLAN connecting a virtual port at the first peer leaf to the virtual machine at the dual-homed server to disallow traffic from the virtual machine to the first peer leaf using the first VLAN.

16. The at least one machine readable storage medium of claim 13 , wherein the information identifying the first VNI as being mapped to the second VLAN was sent in response to a request for a VLAN mapping for a virtual machine associated with the first VNI.

17. The at least one machine readable storage medium of claim 13 , wherein the information identifying the first VNI as being mapped to the second VLAN at the second peer leaf includes information received over a multi-chassis trunk link established between the first peer leaf and the second peer leaf.

Assignees

• Cisco Tech Inc

Inventors

• Kapadia Shyam
• Chang Rick
• Yang Yibin
• Nataraja Rajesh Babu

Classifications

• H04L41/0816

  the condition being an adaptation, e.g. in response to network events · CPC title

• H04L49/354

  for supporting virtual local area networks [VLAN] · CPC title

• H04L12/4641 Primary

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L12/4633

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L41/0803

  Configuration setting · CPC title