JP4614846B2 - Loop control bridge apparatus and control method for detecting single and multiple loops in system using the same - Google Patents

Description

  The present invention relates to a loop control bridge device and a control method at the time of loop detection in a system using the same, and in particular, a bridge device that transmits and receives an Ethernet (registered trademark) frame based on the IEEE 802 standard, and a network system including the bridge device or The present invention relates to a control method when detecting a loop in a network system including a bridge device having a management device.

  When a loop occurs in the frame delivery route of a network provided by a bridge device that transmits and receives Ethernet frames based on the IEEE 802 standard, broadcast and multicast frames and unknowns that are flooded because the route is not learned (Unlearned) Unicast frames continue to loop around while being flooded at each bridge in the loop, and since they are accumulated in the loop, they eventually devour the network bandwidth and the sender that sent the frame Incorrect address learning and a fatal effect that disables communication within the network.

As a conventional method for removing the influence of a loop, port blocking (see Non-Patent Document 1) by STP (Spanning Tree Protocol) is known.
In the method described in Non-Patent Document 1, that is, port blocking by STP, the root bridge is determined from the bridge ID assigned to the bridge device, and among the ports of bridges other than the root bridge, the port closest to the root bridge Of the link between the bridges, and the port closest to the root bridge is designated as the representative port, so that the port that is neither the root port nor the representative port is blocked, and the tree structure of the bridge that has the root bridge as the root By forming, a transfer path without a loop is realized.

IEEE Std 802.1D-2004, IEEE, 2004, pp.57-65

In the method of Non-Patent Document 1, that is, the deletion of the loop by STP, in order to determine the representative port and the root port according to the proximity to the root bridge, the port to be blocked is determined based on the proximity to the loop bridge. There was a possibility of blocking high communication paths.
Blocking ports can be set systematically based on bridge priority and port priority, but priority cannot be set according to the importance of the communication path for any combination of connections due to failures or human error. . In other words, STP has a problem that it cannot block ports according to the importance of the communication path.

  Therefore, an object of the present invention is to solve these conventional problems, and when a single or a plurality of loops occur in a bridge network due to some cause, while protecting a highly important communication path in the network, the traffic of the port It is possible to eliminate or reduce the influence of one or a plurality of loops without miscontrolling the above.

  In order to achieve the above object, according to the present invention, priorities are assigned to the ports of one or more bridge devices in advance according to the importance of the communication path to which the ports belong. Port related to loop is extracted, port information extracted within a certain time is regarded as a port related to one loop, and the port with the lowest priority is determined as a port to be controlled (blocked etc.) from among them In this case, the influence of one or more loops is deleted or reduced by repeatedly blocking the input / output traffic of the port or limiting the flow rate.

  Also, in the present invention, by not adopting the port information related to the loop extracted or transmitted within a predetermined time from the time when control or control instruction is performed for the port traffic, in determining the port to be controlled. In this case, the influence of the loop is deleted or reduced without erroneously controlling the port that is erroneously extracted due to the delay from the control or control instruction until the loop is not detected.

  In the present invention, when determining a port to be controlled from information of one or a plurality of ports related to a loop, a port that has already been controlled for the traffic is not selected as a port to be controlled. Further, even if the controlled port is a complicated loop extracted as a port related to the loop, the influence of the loop is surely deleted or reduced.

  In the present invention, the port control method includes a method for blocking port input / output traffic, a method for restricting the flow rate of port input / output traffic, and a multicast / broadcast / unknown unicast address of the port input / output traffic. A method of restricting the flow rate or the flow of the frame is used.

  Further, in the present invention, as a loop detection method, a method of periodically transmitting a loop detection frame having a multicast, broadcast or unknown unicast address to a destination address including information on an identifier of a transmission port and a transmission bridge device, Among multiple methods, such as a method of observing changes in the forwarding table of a learning bridge device, a method of observing the occupancy rate of a multicast frame and a broadcast frame of a port, and a method of detecting the same frame from an input / output frame of a port, It is characterized by combining one or more methods.

  The present invention is embodied as a device (bridge device) as shown below, or a system including this device and a management device.

  (1) A bridge device including a plurality of physical ports or logical ports that transmit and receive Ethernet (registered trademark) frames, and a transfer processing unit that transfers Ethernet (registered trademark) frames received from the ports to other ports. A port priority management unit that holds a correspondence relationship between the physical port or the logical port and the physical port, and priority information set in advance for the logical port, and a loop associated with the loop, A loop detection / extraction unit that extracts a plurality of ports and a loop-related port collection timer for collecting port information related to the loop extracted by the loop detection / extraction unit for a certain period of time are related to the collected loops. Control from one or more ports based on the priority information held by the port priority manager. A control port determining unit that selects one port, bridge device characterized in that it comprises a port control unit which performs control for traffic port selected by said control port determining unit.

  (2) One or more physical ports or logical ports that transmit and receive Ethernet (registered trademark) frames, and one or more transfer processing units that transfer Ethernet (registered trademark) frames received from the ports to other ports A system comprising a bridge device and a management device that controls the bridge device, the bridge device detecting at least a loop and extracting one or a plurality of ports related to the loop; A loop information transmission unit that transmits information on a port related to the loop extracted by the loop detection / extraction unit and a self-bridge identifier to the management device as loop information, and a port based on a port control instruction received from the management device And a port control unit that controls at least a physical device of the bridge device. Port priority management unit that maintains a correspondence relationship between a port or a logical port, the physical port, and priority information set in advance for the logical port, and receives loop information from the bridge device and collects loop information Loop information collection unit, and a loop-related port collection timer for collecting port information related to the loop for a certain period based on the loop information received by the loop information collection unit. Control for selecting one port to be controlled from a plurality of ports based on the priority information held by the port priority management unit, and instructing the bridge device having the selected port to control the port to be controlled And a port determination unit.

(3) In the bridge device or system described above, the control port determination unit performs loop control for discarding or ignoring loop-related port information collected for a certain period in consideration of the control delay time after port control or port control instruction. It is preferable to have a timer.
In the bridge device or system described above, when the port to be controlled is selected, the control port determination unit determines whether or not the selected port has already been controlled. When the port selected as the port to be controlled has been controlled, it is preferable to delete the port from the ports associated with the loop and select the control port again.

  (4) In the bridge device or system described above, the control port determination unit determines whether or not the port has been controlled with respect to a device having the port. Send a request to confirm whether or not to determine by the response, or determine the port to be controlled, and at the same time, memorize the information of the time and the port to be controlled, refer to the history information, When the same port is determined as a port to be controlled again within a certain time, it is preferable to determine that the port has been controlled.

  (5) In the bridge device or system described above, the port control unit blocks the input / output traffic of the designated port or the input / output traffic flow of the designated port in advance. It is limited to the set value, or one or two or all of the multicast frame, the broadcast frame, the unknown unicast frame among the input / output traffic of the designated port is blocked, or the It is preferable that the flow rate flowing through the port is limited to a preset value.

  (6) Still further, in the bridge device or system described above, the loop detection / extraction unit includes information on the identifier of the transmission port and the transmission bridge device so that the destination address is a multicast, broadcast, or unknown unicast address. When a loop detection frame having the address selected for is periodically transmitted from all physical ports and logical ports, and the loop detection frame is received, the identifier of the transmitting bridge device matches the identifier of the own bridge device, and the same again When the transfer condition is transmitted from the transmission port, the loop is detected and the transmission port and the reception port of the detection frame are extracted as the ports related to the loop, or each port of the own bridge device Multicast frames and The bandwidth occupancy rate of the multicast frame and the broadcast frame is detected as a port related to the loop by detecting the bandwidth occupancy rate of the multicast frame and detecting a loop when the bandwidth occupancy value exceeds a preset threshold value. Is used to extract the ports that exceed the threshold, or the loop frames input to and output from each port of the local bridge device are observed, stored for a predetermined time, and exceeded the predetermined number of times. When the same frame is observed, a loop is detected and a port where the same frame is observed is extracted as a port related to the loop, or the loop detection / extraction unit described above It is preferable to detect a loop by combining a plurality and extract a port related to the loop.

  According to the present invention, when one or a plurality of loops are generated, while protecting a highly important communication channel, the influence of all the generated loops is reliably deleted without erroneously controlling the single loop as a plurality of loops. Alternatively, it can be reduced.

  Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

[Example 1] Single bridge device:
FIG. 1 is a schematic diagram of equipment installation according to an embodiment of the present invention.
The bridge device 2001 has a plurality of physical ports 2101 to 2140 and logical ports 2121 to 2142 that identify each physical port as a plurality of ports by VLAN ID, and VLANs are defined for traffic input from these ports. Then, it has a transfer processing unit 2010 that transfers to another port in the same VLAN, and transfers to another physical port if not defined. The transfer processing unit 2010 holds a transfer table 2011 that holds the correspondence between the destination address and the transmission port by learning the transmission source address of the reception frame from the reception port.

  Each port of the bridge device 2001 is connected to a plurality of networks 2310 to 2342 having different importance levels, and the port priority management unit 2020 has a priority level according to the importance level of the communication path to the network. Here, although different ports have different priorities, they may have the same priorities. However, in the case of the same priority, there is a method in which one can be selected.

  The bridge device 2001 includes a loop detection / extraction unit 2030 that extracts a loop detection and a port related to the loop. The loop detection / extraction unit 2030 includes information on the identifiers of the transmission port and the transmission bridge device, and the loop detection frame having an address selected so as to be a multicast, broadcast, or unknown unicast address as a destination address. When a periodic transmission is performed from a logical port and a loop detection frame is received, if the identifier of the transmission bridge device matches the identifier of the local bridge device and the transfer condition is transmitted from the same transmission port again, the loop is The detected frame transmission port and the reception port may be extracted as the ports related to the loop, and the bandwidth occupancy rate of the multicast frame and the broadcast frame input to each port of the own bridge device may be checked. The bandwidth occupancy value is When a set threshold value is exceeded, a loop may be detected, and as a port related to the loop, a port in which the global occupancy rate of the multicast frame and the broadcast frame exceeds the threshold value may be extracted. Loop frames input to and output from each port are observed, stored for a predetermined time, and when the same number of frames are observed exceeding the predetermined number of times, a loop is detected and Even if a port in which the same frame is observed is extracted as a related port, it is limited to these examples as long as the occurrence of a loop can be detected and port information related to the loop can be extracted. The loop is detected by combining a plurality of loop detection / extraction methods including the above description. It may be configured to extract a port communicating.

The bridge device 2001 acquires priority information corresponding to the port related to the loop extracted by the loop detection / extraction unit 2030 from the port priority management unit 2020 and selects a port to be controlled based on the priority. A determination unit 2040 is included.
Further, the control port determination unit 2040 has the loop related port information notified from the loop detection / extraction unit 2030 as the loop related port information table 2041, and the loop related port collection timer 2042 for collecting the loop related port information for a certain period. And a loop control timer 2043 for ignoring loop related port information for a certain period after the loop control.
The control port determination unit 2040 includes a port control unit 2050 that controls the traffic of the selected port.

  As a method for loop control, whether to block input / output traffic of a specified port, or to limit the flow rate of input / output traffic of a specified port to a preset value, Blocking one or two or all of the multicast frame, broadcast frame, or unknown unicast frame in the input / output traffic of the specified port, or limiting the flow rate flowing to the port to a preset value. In addition, the present invention is not limited to these examples.

  The processing procedure when a loop occurs in the bridge device 3001 will be described below with reference to FIGS. As shown in FIG. 2, here, it is assumed that there is a loop 2091 that connects the physical port 3110 and the physical port 3130, and a loop 2092 that connects the logical port 3122 and the logical port 3142.

The loop detection / extraction unit 3030 detects the occurrence of a loop using the implemented loop detection means (S401), and extracts a port related to the loop (S403). At this time, the loop-related port collection timer 2042 is started (S402), loop detection (S405) is performed for a predetermined period, and port-related extraction (S403) is continued.
The loop detection / extraction unit 3030 notifies the control port determination unit 3040 of the physical port 3110, the physical port 3130, the logical port 3122, and the logical port 3142 that are detected as loop-related ports during this period.

  In response to the expiration of the loop-related port collection timer 3042 (S404), the control port is determined based on the extracted one or more loop-related port information tables 3041. The control port determination unit 3040 extracts priority information corresponding to the loop-related port from the port priority management unit 3020, and determines the port with the lowest priority value as the control port (S406). In this case, since the priority of the physical port 3110 is the lowest at 10, the physical port 3110 is determined as the control port.

  Here, the priority is set as a value with a high priority when the importance of the line is high, and a port having a low importance and a low priority value is determined as a control port. The mapping of the priority values may be performed by setting the priority of the high importance to low, setting the priority of the low importance high, and determining the high priority as the control port.

It is determined whether loop control has already been performed for the determined control port (S407). Here, as a judgment of whether or not the control for the traffic of the port has already been performed, the control state may be confirmed with the port control unit, or the control for the traffic of the port is performed within a certain period of time. It may be confirmed whether or not.
If the traffic for the port has already been controlled, the port is deleted from the port information related to the loop (S408), and the port to be controlled is determined again (S406).

In this case, since the physical port 3110 is not controlled, the processing is continued using the physical port 3110 as the control port.
In the port control unit 3050, the port traffic determined by the control port determination unit 3040 is controlled by the port control unit 3050 or the port control means installed in each port (S409).
In this case, for example, port blocking is performed on the physical port 3110. As a result, the loop 2091 is released.

After performing the control in the port control unit 3050, the loop control timer 3043 is activated (S410), and the loop detection / extraction unit 3030 controls the extraction of the loop related port for a predetermined period (S411).
After the timer of the loop control timer 3043 expires, the information in the loop related port information table 2041 is discarded (S412), the loop detection / extraction of the loop related port is restarted (S401), and the loop detection loop control is continuously performed. .

Of course, the information in the loop related port information table 2041 may be discarded (S412) immediately before or after the loop control timer 3043 is activated (S410).
As a result, the information of the physical port 3110 and the physical port 3130, the logical port 3122 and the logical port 3142 collected as the loop-related ports is once discarded, and the detection of the loop is resumed.

Since the loop 2091 is released, the logical port 3122 and the logical port 3142, which are the ports related to the loop 2092, are extracted by the loop detection / extraction unit 3030 and notified to the control port determination unit 3040 by the processing from S401 to S405. Is done.
In the control port determination S406, since the priority of the logical port 3122 is 25 and lower than the priority 45 of the logical port 3142, the logical port 3122 is determined as the control port.

  At this time, for example, if the physical port 3110 is detected as a loop-related port, the priority of the physical port 3110 is the lowest at 10, and the physical port 3110 is determined again as the control port. In step S407, the physical port 3110 is deleted from the target as the control port and the loop-related port, and the logical port 3122 is correctly set as the next control port. It is determined.

In step S409, for example, port blocking is performed on the logical port 3122. Thereby, the loop 2092 is also released.
As described above, according to the present invention, even when a plurality of loops occur at the same time, it is generated by controlling the traffic of the ports with low importance from the ports related to all the extracted loops one by one. It is possible to reduce the influence of all the loops.

  In addition, it is possible to prevent a single loop from being erroneously controlled as a plurality of loops by discarding port information related to a loop extracted or transmitted immediately after extraction immediately after control for port traffic. . In addition, the control of the next candidate port to be controlled that causes the loop is performed without double control of the port traffic related to the extracted loop. It can be deleted or reduced.

[Embodiment 2] A system comprising a bridge device and a management device:
FIG. 4 is a schematic diagram of equipment installation according to the implementation of the present invention.
The bridge devices 50100, 50200, and 50300 respectively include a plurality of physical ports 51110 to 51130, 51210 to 51230, 51310 to 51330, and logical ports 51131 to 51132, 51231 to 51232, which identify each physical port as a plurality of ports by VLAN ID. If the VLAN is defined, the traffic inputted from these ports is transferred to another port in the same VLAN, and if not defined, the traffic is transferred to another physical port. Transfer processing units 50110, 50210, and 50310.

Each transfer processing unit holds transfer tables 50111, 50211, and 50311 that hold the correspondence between the destination address and the transmission port by learning from the transmission source address and the reception port of the reception frame.
Each port of each bridge device is connected to a plurality of networks 53110 to 53342 having different importance levels and a communication path 50060 that relays between the bridge devices 50100, 50200, and 50300.

Each bridge device has a loop detection / extraction unit 50130, 50230, 50330 that extracts a loop detection and a port related to the loop.
Each loop detection / extraction unit includes information on identifiers of transmission ports and transmission bridge devices, and loop detection frames having addresses selected to be multicast, broadcast, or unknown unicast addresses as destination addresses. When a periodic transmission is performed from a logical port and a loop detection frame is received, if the identifier of the transmission bridge device matches the identifier of the local bridge device and the transfer condition is transmitted from the same transmission port again, the loop is It is possible to detect and extract the transmission port and reception port of the detection frame as ports related to the loop, and to determine the bandwidth occupancy rate of the multicast frame and broadcast frame input to each port of the own bridge device. The bandwidth occupancy value is set in advance. A loop may be detected when a threshold value exceeds a threshold value, and a port whose global occupancy rate of a multicast frame and a broadcast frame exceeds the threshold value may be extracted as a port related to the loop. Loop frames input and output to each port are observed, stored for a predetermined time, and when the same frame is observed after a predetermined number of times, a loop is detected and related to the loop Even if a port where the same frame is observed is extracted as a port, it is not limited to these examples as long as the occurrence of a loop can be detected and port information related to the loop can be extracted. The loop is detected by combining a plurality of loop detection / extraction methods including the above description, and related to the loop. Port may be configured to extract.

Each bridge device includes loop information transmission units 50140, 50240, and 50340 that transmit the identifiers of a plurality of ports extracted by the loop detection / extraction unit and the identifiers of the own bridge device to the management device 50000.
Each bridge device has a port control unit 50150, 50250, 50350 that receives the notification of the port information determined by the control port determination unit 50400 of the management device 50000 and controls the traffic of the selected port. .

  As a method for loop control, whether to block input / output traffic of a specified port, or to limit the flow rate of input / output traffic of a specified port to a preset value, Blocking one or two or all of the multicast frame, broadcast frame, or unknown unicast frame among the input / output traffic of the specified port, or limiting the flow rate flowing to the port to a predetermined value. In addition, the present invention is not limited to these examples.

The management device 50000 has a priority according to the importance of the communication path to the network in the port priority management unit 50020.
Here, although different ports have different priorities, they may have the same priorities. However, in the case of the same priority, there is a method in which one can be selected. In addition, the management device 5000 has a loop information collection unit 50030 that collects port information related to the loop transmitted from the loop information transmission unit of each bridge device, and displays priority information corresponding to each collected port as port priority. A control port determination unit 50040 is selected from the management unit 50020, selects a port to be controlled from its priority, and transmits it to the corresponding bridge device.

  The control port determination unit 50040 has the loop-related port information notified from the loop information collection unit 50030 as the loop-related port information table 50041, and a loop-related port collection timer 50042 for collecting the loop-related port information for a certain period of time. A loop control timer 50043 for ignoring loop related port information for a certain period after the loop control is provided.

Hereinafter, a processing procedure when a loop occurs in the bridge devices 60100, 60200, and 60300 and the management device 60000 will be described with reference to FIGS.
As shown in FIG. 5, here, a loop 60091 connecting the physical port 61110 of the bridge device 60100 and the physical port 61220 of the bridge device 60200, and a loop 60092 connecting the logical port 61132 of the bridge device 60100 and the logical port 61332 of the bridge device 60300 are included. Suppose it exists.

The loop detection / extraction units 60130, 60230, and 60330 of each bridge device detect the occurrence of a loop and extract ports related to the loop using the loop detection means that is mounted (S7101).
Each bridge device assigns identifiers and bridge identifiers to the ports extracted by the respective loop detection / extraction units 60130, 60230, and 60330, and communicates with each other via the communication path 60060 by the respective loop information transmission units 60140, 60240, and 60340. The information is transmitted to the loop information collection unit 60030 of the management apparatus 60000 using a Simple Network Management Protocol (Trap) or a reference request command (S7102).

Here, the transmission means from each bridge device to the management device 60000 is not limited to SNMP, and any communication including the above information may be used.
The communication path 60060 between the management apparatus 60000 and each bridge apparatus 60100, 60200, 60300 is separate from the communication path between the bridge apparatuses 60100, 60200, 60300 that transfers frames by the transfer processing units 60110, 60210, 60310. It may be provided.

The loop information collection unit 60030 in the management device 60000 receives the loop detection and the loop related port information from the bridge device (S701). At this time, the loop information collection unit 60030 starts the loop related port collection timer 60042 (S702) and detects the loop for a predetermined period. (S705) is performed, and the extraction of ports related to the loop (S703) is continued.
During this time, each bridge device notifies the loop information collection unit 60030 of the management device 60000 of the loop related port information detected as the loop related port from each loop information transmission unit.

That is, the bridge device 60100 transmits the physical port 61110 and the logical port 61132 detected by the loop detection / extraction unit 60130 from the loop information transmission unit 60140 to the loop information collection unit 60030 of the management device 60000.
Similarly, the bridge device 60200 receives the physical port 61220 detected by the loop detection / extraction unit 60230 from the loop information transmission unit 60240, and the bridge device 60300 uses the logical port 61332 detected by the loop detection / extraction unit 60330 as loop information. The information is transmitted from the transmission unit 60340 to the loop information collection unit 60030 of the management device 60000.

The loop information collection unit 60030 of the management device 60000 notifies the control port determination unit of the loop related information transmitted to the control port determination unit 60040.
The management device 60000 receives the expiration of the loop-related port collection timer 60042 (S704), and determines the control port based on the loop-related port information table 60041, which is a table of one or more extracted loop-related port information. I do.
The control port determination unit 60040 extracts priority information corresponding to the loop-related port from the port priority management unit 60020, and determines the port having the lowest priority value as the control port (S706).

In this case, since the priority of the physical port 61110 of the bridge device 60100 is the lowest, the physical port 61110 of the bridge device 60100 is determined as the control port.
Here, the priority is set as a value with a high priority when the importance of the line is high, and a port having a low importance and a low priority value is determined as a control port. The mapping of the priority values may be performed by setting the priority of the high importance to low, setting the priority of the low importance high, and determining the high priority as the control port.

Also, each bridge may hold priority information regarding each port, and in that case, it is notified together with the port information at the time of notification of the loop related port and used.
It is determined whether loop control has already been performed for the determined control port (S707).

In order to determine whether control for the traffic of the port has already been performed, the control state may be confirmed with the port control unit of each bridge device, or the control port determination unit holds the history information of the control port, and there is It may be confirmed whether or not control is performed on the traffic of the port within a certain time.
If the traffic for the port has already been controlled, the port is deleted from the port information related to the loop (S708), and the port to be controlled again is determined (S706).

In this case, since the physical port 61110 of the bridge device 60100 is not controlled, the processing is continued using the physical port 61110 of the bridge device 60100 as the control port.
In the management device 60000, the determined control port that has not been controlled is determined, and the control port determination unit 60040 transmits the SNMP (Simple Network) to the port control unit of the bridge having the port via the management communication path 60070. Communication of the port control instruction is performed using a Management Protocol trap or a reference request command.

Here, the transmission means from the management apparatus A to each bridge is not limited to SNMP, and any communication including control port information may be used.
In this case, the management device 60000 issues a control instruction from the control port determination unit 60040 to the port control unit 60150 of the bridge device 60100 using the physical port 61110 as the control port (S709).

In the port control unit 60150 of the bridge device 60100 that has received a control instruction from the management device 60000 (S7201), the port control unit 60150 or the physical port 61110 is used for the port traffic determined by the control port determination unit 60040 of the management device 60000. The control is performed by the port control means mounted on (S7202).
In this case, for example, port blocking is performed on the physical port 61110. As a result, the loop 60091 is released.

In the management device 60000, after giving a control instruction to the port control unit 60150 of the bridge device 60100, which is the bridge device, the loop control timer 60043 is started (S710), and in the loop information collection unit 60030 for a predetermined period of time. The collection of the loop related ports is suppressed (S711).
After the timer of the loop control timer 60043 expires, information in the loop related port information table 60041 is discarded (S712), loop detection / collection of loop related ports is resumed (S701), and loop detection / loop control is continued. Do.

Of course, the information in the loop related port information table 60041 may be swept (S712) immediately before or after the loop control cannabis 60043 is activated (S710).
Thereby, the information of the physical port 61110 and the physical port 61220, the logical port 61132 and the logical port 61332 collected as the loop related ports is once discarded, and the detection of the loop is restarted again.

  Since the loop 60091 is released, the logical port 61132 of the bridge device 60100, the logical port 61132 of the bridge device 60300, and the logical port 61332 of the bridge device 60300, which are ports related to the loop 60092, are processed by the processing of S701 to S705. The data are extracted by the loop detection / extraction units 60130 and 60330, transmitted to the loop information transmission unit 60140 and the loop information collection unit 60030 of the management device 60000, respectively, and notified to the control port determination unit 60040.

  In the control port determination S706, since the priority of the logical port 61332 of the bridge device 60300 is 25 and lower than the priority 45 of the logical port 61132 of the bridge device 60100, the logical port 61332 of the bridge device 60300 is determined as the control port.

At this time, for example, if the physical port 53110 of the bridge device 60100 is detected as a loop-related port, the priority of the physical port 53110 of the bridge device 60100 is the lowest at 10, and the physical port 53110 of the bridge device 60100 is controlled again. Although the port is determined, since it is determined whether loop control has already been performed for the determined control port (S707), the physical port 53110 of the bridge device 60100 is symmetrical as both a control port and a loop-related port. The logical port 61332 of the bridge device 60300 is correctly determined as the next control port.
In this case, the management device 60000 determines the logical port 61332 as the control port 61332 from the control port determination unit 60040 to the port control unit 60350 of the bridge device 60300.

  In the port control unit 60350 of the bridge device 60300 that has received a control instruction from the management device 60000 (S7201), the port traffic determined by the control port determination unit 60040 of the management device 60000 is sent to the port control unit 60350 or the physical port 61330. Port control such as port blocking is performed on the logical port 61332 of the bridge device 60300 by the mounted port control means (S7202). As a result, the loop 60092 is also released.

  As described above, according to the present invention, even when a plurality of loops occur at the same time, it is generated by controlling the traffic of the ports with low importance from the ports related to all the extracted loops one by one. It is possible to reduce the influence of all the loops. In addition, it is possible to prevent a single loop from being erroneously controlled as a plurality of loops by discarding the port information related to the loop extracted or transmitted immediately after the control of the port traffic.

  In addition, the control of the next candidate port to be controlled that causes the loop is performed without double control of the port traffic related to the extracted loop. It can be deleted or reduced.

  The above embodiments are merely examples of the present invention, and the present invention is not limited to these embodiments, and appropriate modifications and improvements are made without departing from the scope of the present invention. It goes without saying.

1 is a configuration diagram of a bridge device according to a first embodiment of the present invention. It is operation | movement explanatory drawing of the bridge apparatus which concerns on the 1st Example of this invention. It is an operation | movement flowchart of the bridge apparatus which concerns on 1st Example of this invention. It is a block diagram of the system which consists of a bridge | bridging apparatus and management apparatus based on 2nd Example of this invention. It is operation | movement explanatory drawing of the system which consists of a bridge | bridging apparatus and management apparatus based on 2nd Example of this invention. It is the operation | movement flowchart (the 1) of the system which consists of a bridge | bridging apparatus and management apparatus which concern on 2nd Example of this invention. It is an operation | movement flowchart (the 2) of the system which consists of a bridge | bridging apparatus and management apparatus which concern on 2nd Example of this invention.

Explanation of symbols

2001, 3001, 50100, 50200, 50300, 60100, 60200, 60300 Bridge device 2010, 3010, 5011, 50210, 50310, 60110, 60210, 60310 Transfer processing unit 20111, 3011, 50111, 50211, 50311, 60111, 60211, 60311 Forwarding table 2020, 3020, 50020, 60020 Port priority management unit 2030, 3030, 50130, 50230, 50330, 60130, 60230, 60330 Loop detection / extraction unit 50030, 60030 Loop information collection unit 2040, 3040, 50040, 60040 Control port Determination unit 2041, 3041, 50041, 60041 Loop related port information table 2042, 3042, 50042, 60042 Loop-related port collection timers 2043, 3043, 50043, 60043 Loop control timers 50140, 50240, 50340, 60140, 60240, 60340 Loop information transmission units 50150, 50250, 50350, 60150, 60250, 60350 Port control units 2110, 2130 , 3110, 3130, 50070, 50170, 50270, 50370, 51110, 51120, 51210, 51220, 51310, 51320 Physical port 2120, 2140, 3120, 3140, 51130, 51230, 51330 Logical port 2121, 2122, 2141, 1422, 3121 , 3122, 3141, 3142 VLAN
2310,2321,3222,2341,2342,50060,53110,53120,53131,53132,53210,53220,53231,532322,53310,53320,53331,53332 network 2091,2092,60091,60092 loop

Claims (5)

From one or more bridge devices having a plurality of physical ports or logical ports for transmitting and receiving Ethernet (registered trademark) frames, and having a transfer processing unit for transferring the Ethernet (registered trademark) frames received from the ports to other ports A control method at the time of loop detection in a communication system comprising a bridge network and a management device that controls them,
In the bridge device,
Extracting a port or ports associated with the loop when detecting the loop; and
A step of notifying the management device of port information and the own bridge identifier related to the extracted loop;
In the management device,
Collecting information of one or more ports related to the loop notified from the bridge device (loop related port information) for a predetermined time;
A step of selecting one port to be controlled based on the priority determined in advance for each port from the ports related to the collected loops;
When a port to be controlled is selected, determining whether the selected port is already controlled;
If the port selected as the port to be controlled has been controlled as a result of the determination, the step of deleting the port from the port associated with the loop and returning to the step of selecting the control port again;
Transmitting information of a port to be controlled to a bridge device having the selected port;
In the bridge device,
Based on the information of the port to be controlled received from the management device, controlling the traffic of the port, deleting or reducing the influence of the loop,
In the management device, the step of discarding the loop related port information of the port whose traffic is controlled by the bridge device;
And the above steps are repeated until no loop is detected. It is a control method at the time of loop detection according to claim 1 ,
A control method at the time of loop detection, wherein after a predetermined time has elapsed after loop control, the loop detection step is resumed after the collected loop-related port information is discarded or ignored. In the control method at the time of loop detection according to claim 2 ,
In determining whether the port is already controlled,
Whether to send a request to the device having the port to check whether the port is already controlled, and to determine from the response;
Or, at the same time as determining the port to be controlled, the information of the time and the port to be controlled is stored, the history information is referred to, and the same port is determined as the port to be controlled again within a certain time. If it is, a control method at the time of loop detection is characterized in that it is determined that the control has been completed. In the control method at the time of the loop detection in any one of Claims 1-3 ,
Control over the traffic on the port is:
Is it intended to block the input / output traffic of the specified port?
Or the input / output traffic flow rate of the specified port is limited to a preset value,
Or block one or two or all of the multicast frame, broadcast frame or unknown unicast frame in the input / output traffic of the specified port,
Alternatively, the control method at the time of loop detection is characterized in that the flow rate flowing through the port is limited to a preset value. In the control method at the time of the loop detection in any one of Claims 1-4 ,
The step of detecting the loop and extracting the port includes:
A loop detection frame that contains information on the identifiers of the transmission port and transmission bridge device and that has a destination address selected to be a multicast, broadcast, or unknown unicast address is periodically transmitted from all physical ports and logical ports. When the loop detection frame is received, if the identifier of the transmission bridge device matches the identifier of the own bridge device and the transfer condition is transmitted again from the same transmission port, the loop is detected and related to the loop. As a port, the transmission port and the reception port of the detection frame are extracted.
Alternatively, the bandwidth occupancy rate of the multicast frame and the broadcast frame input to each port of the own bridge device is observed, and when the value of the bandwidth occupancy exceeds a preset threshold value, a loop is detected, and the loop As a related port, a port whose bandwidth occupancy rate of a multicast frame and a broadcast frame exceeds a threshold value is extracted.
Or, observe the loop frame input / output to / from each port of its own bridge device, store it for a predetermined time, and detect the loop when the same frame is observed exceeding the predetermined number of times. , Or a port where the same frame is observed as a port related to the loop,
Alternatively, a control method at the time of detecting a loop, wherein a plurality of loop detection / extraction methods described above are combined to detect a loop and extract a port related to the loop.

Images