A kind of method and physical router managing virtual routerTechnical field
The present invention relates to network communication technology field more particularly to a kind of method for managing virtual router and physics routingsDevice.
Background technique
Virtual router (Virtual Router) is also known as router logic (Logical Router, referred to as LR),The functional simulation of physical router is realized in soft and hardware layer, to form multiple void in logic on a physical routerQuasi- router, each virtual router individually runs respective Routing Protocol example, and has the I/O of oneself(Input/Output, input/output port) port, caching, address space, routing table, forwarding table and network management software.
Virtual router is generated to meet the needs of client, and Network integration, general may be implemented in virtual routerRead the business such as verifying, virtual router lease.
Network integration refers to that virtual router passes through tunnel by the configuration of multiple virtual routers in a physical routerIt exchanges routing iinformation and forwards customer flow to other virtual routers, while passing through relevant physical interface or logic interfacingIt exchanges routing iinformation and is used to other physical router (or configuring the virtual router in another physical router) forwardingsFamily flow.These virtual routers seem that just as individual physical router, only they all configure and operate in sameOn physical platform.
Proof of Concept function refers to for certain new technologies, due to the not overripened of technology and stablizes, directly in networkUpper deployment may have a huge impact existing network, cause the unstable of business or even interrupt, and if taken in physicsVirtual router functionality is enabled on business device, by new service deployment to virtual router, since virtual router has equipmentIsolation characteristic, the new business configured on virtual router do not interfere with support of the physical router to existing business.
Router charter business, i.e., in enterprise user market, many enterprise customers be may not want that on purchase physics roadIt by putting into a large amount of time and money in terms of device, and is desirable to buy router services from its service provider, be supplied from serviceAcquisition password at quotient is answered, router is then managed according to oneself specific purpose by user.Service supplier is configured at physics roadThis demand that can satisfy user by the virtual router on device, reduces the equipment input cost of enterprise customer.
The producers such as Cisco and Juniper are proposed the virtual router implementation method of oneself at present.In the IOS of CiscoIn (Internetwork Operating System, internet operating system) version, CRS-1 is routed by using distributionProcessing board is at best able to support 8 SDR(Secure Domain Router, security domain router), wherein including a defaultOwner SDR.The control plane expansion platform JCS1200 of Juniper introduces PSD(Protected System Domains,Protect system domain) concept, PSD is also a kind of realization of virtual router.
The virtual router of the above Cisco and Juniper is essentially all a kind of virtual road based on hardware isolatedBy device technology.In the router logic of hardware isolated, main LR creates other LR and carries out resource division, each LR monopolize master control,The hardware resources such as line card, once distributing resource, each LR independence O&M, administrator needs to be connected respectively to it and manages mouth/stringEloquence, which can be carried out, logins management, and can not the alarm of intercommunication shared resource and the alarm of LR rank between each LR.
As shown in Figure 1, the router of a physics is divided into virtual router LR0 and LR1, it is wherein virtual based on LR0Router.Each LR in this router is isolated based on software, and each virtual router has oneself independent process, address emptyBetween, routing table and forwarding table (depending on whether shared line card) etc., but infrastructure such as shared fan, power supply.Each LR is to veneerDegree of share can be different, veneer granularity can be arrived, logic interface granularity can also be arrived.Resource-sharing is to port/logic interface gradeNot.
The LS system (Logical System, flogic system) of Juniper is realized based on protocol process isolation technology,Only routing associated process is isolated, isolation is lower.Its chain of command is completely shared, can not individually be managed to some LRReason.
Summary of the invention
The invention proposes it is a kind of manage virtual router method and physical router, with overcome it is existing chain of command everyFrom under the premise of can not flexible management LR defect.
To solve the above problems, being applied to include system control the present invention provides a kind of method for managing virtual routerIn the physical router of system and virtual router (LR)；Include:
It is built-in with chain of command domain process in the system control, is built-in with managing process in each LR:
Managing process in chain of command domain process and each LR carries out information exchange.
Further,
Managing process in chain of command domain process and each LR carries out information exchange, specifically includes:
When detecting that user logs in, managing process in main LR is to the current online LR of chain of command domain process requestedIdentification information；
The managing process of the main LR shows current online LR after the response for receiving the return of chain of command domain processIdentification information；And after confirmation user has therefrom selected a LR, user is prompted to input username and password information；ConfirmingAfter user inputs, if judging, the username and password is correct, logins the LR of user's selection.
Further, the method also includes:
After the LR for logining user's selection, the managing process in the main LR is on the process registers of the chain of command domainLine notifies offline after user publishes.
Further, the method also includes:
The managing process of the main LR is after the response for receiving the return of chain of command domain process, if judging not having currentlyHave that LR is online, then directly prompt user inputs user name and password login enters the main LR.
Further,
Managing process in chain of command domain process and each LR carries out information exchange, specifically includes:
It is controlled by the LR or system that alert and the alarm for needing intercommunication is distributed to chain of command domain process, by describedChain of command domain process determines the managing process that corresponding LR is transmitted to after coverage.
Further,
Chain of command domain process determines the coverage of the alarm according to resource allocation table.
Further,
Receive the managing process of the LR of the alarm by the alarm output to terminal, be logged by and send simple netNetwork management agreement trap.
Further,
Managing process in chain of command domain process and each LR carries out information exchange, specifically includes:
The status information for each LR that chain of command domain process will acquire is sent to the managing process of main LR.
Further,
Managing process in the main LR by the main LR status query request initiated be sent to the chain of command domain intoJourney；
After chain of command domain process receives the status query request, the status query request is sent to each LR；
Chain of command domain process gets the status information of each LR, specifically includes:
The chain of command domain receives the status information that each LR is returned after receiving the status query request.
Further,
Chain of command domain process gets the status information of each LR, specifically includes:
Each LR periodically reports the status information of itself to the chain of command domain.
Correspondingly, the present invention provides a kind of physical router, include: system control and more than one virtual router(LR), comprising:
Be built-in with chain of command domain process in system control, chain of command domain process be used for the management in each LR intoCheng Jinhang information exchange；
Managing process is built-in in each LR, the managing process is used to carry out information exchange with chain of command domain process.
Further,
The managing process is used to carry out information exchange with chain of command domain process, specifically includes:
Managing process in main LR is used for when detecting that user logs in, currently online to chain of command domain process requestedLR identification information；After the response for receiving the return of chain of command domain process, the identification information of current online LR is shown；And after confirmation user has therefrom selected a LR, user is prompted to input username and password information；It has been inputted in confirmation userBi Hou, if judging, the username and password is correct, logins the LR of user's selection.
Further,
Managing process in the main LR is also used to after the LR for logining user's selection, to chain of command domain processIt registers online, is notified after user publishes offline.
Further,
The managing process of the main LR is also used to after the response for receiving the return of chain of command domain process, if judgingOnline currently without LR, then directly prompt user inputs user name and password login enters the main LR.
Further,
Chain of command domain process is used to carry out information exchange with the managing process in each LR, specifically includes:
Chain of command domain process be used for receive the LR alerted or the system control send need intercommunicationAlarm after, determine coverage and be transmitted to corresponding LR.
Further,
Chain of command domain process is used to determine the coverage of the alarm according to resource allocation table.
Further,
Managing process in the LR is used for after receiving the alarm, by the alarm output to terminal, charges to dayWill simultaneously sends simple network management protocol trap.
Further,
Chain of command domain process is used to carry out information exchange with the managing process in each LR, specifically includes:
The status information for each LR that chain of command domain process is used to will acquire is sent to the managing process of main LR.
Further,
Managing process in the main LR is used to the status query request that the main LR is initiated being sent to the chain of commandDomain process；
Chain of command domain process is used for after receiving the status query request, sends the status inquiry to each LRRequest；
Chain of command domain process gets the status information of each LR, specifically includes:
The chain of command domain is for receiving the status information that each LR is returned after receiving the status query request.
Further,
Each LR is used to periodically report the status information of itself to the chain of command domain.
The present invention is based on chain of command isolation, login under conditions of not entering main LR is allowed to jump to other LR, and realizeAlarm intercommunication between main LR and other LR can also be monitored the operating status of other LR, so that the independent LR of chain of commandIt is more flexible in management and O&M.In addition, the present invention is not only restricted to software isolation or hardware isolated.
Detailed description of the invention
Fig. 1 is virtual router architecture diagram in the prior art；
Fig. 2 is physical router structural framing figure in the embodiment of the present invention；
Fig. 3 is that LR logs in jump method flow chart in the embodiment of the present invention；
Fig. 4 alarm-monitor method flow diagram between LR in the embodiment of the present invention；
Fig. 5 is LR state monitoring method flow chart in the embodiment of the present invention.
Specific embodiment
To make the objectives, technical solutions, and advantages of the present invention clearer, below in conjunction with attached drawing to the present inventionEmbodiment be described in detail.It should be noted that in the absence of conflict, in the embodiment and embodiment in the applicationFeature can mutual any combination.
In the present embodiment, physical router system is made of system control and virtual router, and system control control is eachThe load operating of a virtual router simultaneously realizes the communication between virtual router.As shown in Fig. 2, being built-in with management in system controlFace domain process, as the administrative center between LR；Managing process is equipped in each virtual router.In chain of command domain process and each LRManaging process constitutes a domain, and referred to as management domain, the chain of command domain process can be with the managing process of each LR in the management domain(such as telnet, order line, alarm process) interacts.It can realize that login across LR and main LR can be with using the mechanismManage operating status and the fault warning etc. of other LR.Both it can guarantee chain of command isolation, and improved reliability and O&M safety, againFlexibility is taken into account, the managerial ability across LR is also enhanced.
In the present embodiment, the method logged in across LR, comprising: when detecting that user logs in, main LR is into management domainThe identification information of the current online LR of chain of command domain process requested；After the response for receiving the return of chain of command domain process, if sentencingIt is disconnected online currently without LR out, then it represents that LR is unallocated, and directly prompt user inputs user name at this time and password login enters masterLR；Otherwise the identification information of the current online LR of display, and after confirmation user has therefrom selected a LR, it prompts user to input and usesName in an account book and encrypted message, after confirming user's input, if judging, the username and password is correct, logins user choosingThe LR selected, and online (i.e. managing process in the LR sends user to above-mentioned chain of command domain process to chain of command domain process registersOnline notification message, to notify chain of command domain process user to log in the LR), it to be notified after publishing offline (i.e. in the LRManaging process sends user's offline notification message to above-mentioned chain of command domain process, to notify chain of command domain process user to exitThe LR).
In the present embodiment, the method for intercommunication is alerted, comprising: the alarm of intercommunication will be needed to be distributed to by LR or system controlChain of command domain process is determined that being transmitted to corresponding LR after the coverage of the alarm is handled by chain of command domain process.
In the present embodiment, the method for status monitoring, comprising: inquiry is initiated by main LR or is periodically reported to pipe by other LRReason face domain process is ok, and core is the centralized processing of chain of command domain process.
In the present embodiment, the prison to other virtual router operation conditions and failure can be realized by main virtual routerControl, realization jump login function by main virtual router, facilitate user that virtual router is flexibly operated and managed,It is illustrated below with three specific embodiments.
As shown in figure 3, user manages the method that mouth logs on to other LR by main LR, comprising:
Step 301: user passes through telnet logging device, link setup success；
Step 302: the managing process in telnet logging device and main LR establishes TCP(Transmission at this timeControl Protocol, transmission control protocol) it connects, the managing process in main LR controls chain of command domain process requested to systemObtain current online LR list；
Step 303: chain of command domain process returns to current online LR list, if list non-empty thens follow the steps 307, otherwiseContinue to execute step 304；
Step 304: the login interface of main LR is logined in prompt；
Step 305: detecting that user inputs user name and password, and confirmation input username and password it is correct after,It performs the next step rapid；
Step 306: LR is become owner of in login, executes step 312；
Step 307: the information for the online LR that will acquire is shown to user and selects；
Step 308: after confirmation user has therefrom selected a LR, executing step 309；
Step 309: prompt login interface, instruction user input user name and password；
Step 310: detecting that user inputs user name and password, and confirmation input username and password it is correct after,It performs the next step rapid；
Step 311: logging in the LR of access customer selection；
Step 312: the chain of command domain process registration user into system control is online.
Step 313: terminating.
If user is already logged into main LR, other LR can also be jumped to by the above method, process is similar, herein no longerIt is repeated.
According to coverage difference, the range showed is also different, it may be necessary to which the alarm of other LR is passed to LR0 for alarm(main LR) is presented；Or main LR shared resource is alerted to other LR and is noticed.The related alarm generated in system control is logicalIt crosses chain of command domain process and is advertised to the managing process of main LR and handled.Chain of command domain process is also the center of alarm control.Such asShown in Fig. 4, main LR is alerted to the process transmitted to other LR, comprising:
Step 401: shared resource alarm occurs for main LR；
Step 402: by the shared resource alarm report to the managing process in main LR；
Step 403: the chain of command domain that shared resource alarm is advertised in system control by managing process in main LR intoJourney；
Step 404: chain of command domain process determines the coverage of the alarm according to the resource allocation table of LR；Wherein, resourceAllocation table by system control in other processes safeguard；
Step 405: shared resource alarm is distributed to the managing process of each impacted LR；
Step 406: receiving the managing process of the LR of above-mentioned shared resource alarm, which is handled.SpecificallyProcessing mode is identical with minor alarm processing mode, that is, is output to terminal, is logged by, sends SNMP trap(SimpleNetwork Management Protocol trap, simple network management protocol trap) etc.；
Step 407: terminating.
And the transfer mode of other LR ranks alarm is similar with above-mentioned process, it will not be described herein.
Status monitoring can be by the way of inquiry or reporting, and status information may be from system control or some LR.As described in Figure 5, the method for LR state is inquired, comprising:
Step 501: main LR initiates status monitoring inquiry request；It, can be in the request if the only state of query portion LRThe identification information of each LR of inquiry is requested in middle carrying；
Step 502: the status monitoring inquiry request is sent to system control chain of command domain process by the management domain in main LR；
Step 503: system controls chain of command domain process and the status monitoring inquiry request is distributed to related LR；
If the state of all LR is inquired in main LR request, which can be distributed to other each LR；If the state of main LR request query portion LR, can inquire the status monitoring according to the identification information carried in the requestRequest is distributed to relevant LR；
Step 504: receiving the LR of status monitoring inquiry request, query-relevant data simultaneously returns to system control chain of command domainProcess；
Step 505: system control chain of command domain process receives query result and returns to main LR；
Step 506: main LR receives and processes monitoring state and (shows the detecting state as a result, reporting that relevant failure is wrongThe information such as mistake)；
Step 507: terminating.
In addition, in the present embodiment, a kind of physical router includes: system control and more than one virtual router(LR), comprising:
Be built-in with chain of command domain process in system control, chain of command domain process be used for the management in each LR intoCheng Jinhang information exchange；
Managing process is built-in in each LR, the managing process is used to carry out information exchange with chain of command domain process.
Preferably,
The managing process is used to carry out information exchange with chain of command domain process, specifically includes:
Managing process in main LR is used for when detecting that user logs in, currently online to chain of command domain process requestedLR identification information；After the response for receiving the return of chain of command domain process, the identification information of current online LR is shown；And after confirmation user has therefrom selected a LR, user is prompted to input username and password information；It has been inputted in confirmation userBi Hou, if judging, the username and password is correct, logins the LR of user's selection.
Preferably,
Managing process in the main LR is also used to after the LR for logining user's selection, to chain of command domain processIt registers online, is notified after user publishes offline.
Preferably,
The managing process of the main LR is also used to after the response for receiving the return of chain of command domain process, if judgingOnline currently without LR, then directly prompt user inputs user name and password login enters the main LR.
Preferably,
Chain of command domain process is used to carry out information exchange with the managing process in each LR, specifically includes:
Chain of command domain process be used for receive the LR alerted or the system control send need intercommunicationAlarm after, determine coverage and be transmitted to corresponding LR.
Preferably,
Chain of command domain process is used to determine the coverage of the alarm according to resource allocation table.
Preferably,
Managing process in the LR is used for after receiving the alarm, by the alarm output to terminal, charges to dayWill simultaneously sends simple network management protocol trap.
Preferably,
Chain of command domain process is used to carry out information exchange with the managing process in each LR, specifically includes:
The status information for each LR that chain of command domain process is used to will acquire is sent to the managing process of main LR.
Preferably,
Managing process in the main LR is used to the status query request that the main LR is initiated being sent to the chain of commandDomain process；
Chain of command domain process is used for after receiving the status query request, sends the status inquiry to each LRRequest；
Chain of command domain process gets the status information of each LR, specifically includes:
The chain of command domain is for receiving the status information that each LR is returned after receiving the status query request.
Preferably,
Each LR is used to periodically report the status information of itself to the chain of command domain.
Those of ordinary skill in the art will appreciate that all or part of the steps in the above method can be instructed by programRelated hardware is completed, and described program can store in computer readable storage medium, such as read-only memory, disk or CDDeng.Optionally, one or more integrated circuits can be used also to realize in all or part of the steps of above-described embodiment.AccordinglyGround, each module/unit in above-described embodiment can take the form of hardware realization, can also use the shape of software function moduleFormula is realized.The present invention is not limited to the combinations of the hardware and software of any particular form.
The foregoing is only a preferred embodiment of the present invention, is not intended to limit the scope of the present invention.According toSummary of the invention of the invention can also have other various embodiments, without deviating from the spirit and substance of the present invention, be familiar withThose skilled in the art makes various corresponding changes and modifications in accordance with the present invention, all in the spirit and principles in the present inventionWithin, any modification, equivalent replacement, improvement and so on should all be included in the protection scope of the present invention.