CN100550829C - By the monitoring link status port re-enabling - Google Patents

Abstract

Feature of the present invention is the embodiment that reactivates a disabled port or physical medium interface by the Link State of monitors physical layer interface automatically.Any variation in the Link State all reactivates a previous disabled port automatically, thereby the data that allow to come in by previous disabled port are entered switch by admittance and automatically transmit or route/exchange, manually reactivate this port and needn't the network manager manually send any order.

Description

By the monitoring link status port re-enabling

The cross reference of related application

It is No.60/624 that the application requires the sequence number of on November 1st, 2004 application, 416, name is called the priority of the U.S. Provisional Patent Application of " Port Re-enabling by Monitoring Link Status ", with it by with reference to introducing the application.

Technical field

The present invention relates generally to and is used for enabling automatically exchange and/or the media interface of routing device or the technology of port.Especially, the present invention relates to be used for to provide the Link State supervisory control system in exchange and/or routing device inside and use such Link State enable automatically one since comprise safety in violation of rules and regulations various violations and the system and method for the previous disabled or port that gets clogged.

Background technology

Now, can obtain many switches that the ability of forbidding or obstruction physical port is provided to the network manager.Forbidding or close port mean the all-network communication that is blocked on those ports usually.Do like this and prevent network because because safety of coming in from those ports or the caused unnecessary data service of policy violation and service disruption.These can comprise in violation of rules and regulations: virus attack, excessive ping request, have not related Internet Protocol (IP) address with the particular port subnet excessive import grouping into, be assigned to the ARP(Address Resolution Protocol) data cell of another exchange or routing device and above the protocol Data Unit (PDU) of bandwidth constraints or other network thresholding.

Yet these disabled ports are not permanent disabled.If in violation of rules and regulations or the standard of stipulating these interface disablings be repaired or no longer exist, then enable these ports and use it for Web portal and export business.

Yet in order to enable these disabled ports, the network manager must discern each particular exchange/routing device of the port-mark number of each disabled port and these ports.In addition, the keeper must manually send Management Information Base and gives exchange/routing device so that enable these ports.This process bothers very much, labour intensity is big, and expends time in, particularly when the keeper is catenet of management.

Thereby therefore need a kind of avoiding manually to enable the mechanism that port also reduces the heavy burdens for the keeper.The invention solves this needs.

Summary of the invention

Feature of the present invention is the embodiment that reactivates a disabled port or physical medium interface by the Link State of monitors physical layer interface automatically.Any variation in the Link State all reactivates a previous disabled port automatically, thereby the data that allow to come in by previous disabled port are entered switch by admittance and automatically transmit or route/exchange, manually reactivate this port and needn't the network manager manually send any order.

In first embodiment, the invention provides a forwarding unit, it comprises one or more physical layer interfaces, one or more data link layer controller and an exchange/routing module.These physical layer interfaces receive the data from communication network.The data link layer controller comprises one or more media access controllers (MAC) port, port designator and at least one mac processor.The data that the data link layer controller abandoned or admitted the Link State of determining based on physical layer interface according to the numerical value that is included in the port designator.On the other hand, exchange/routing module is suitable for transmitting these data cells of being transmitted by the data link layer controller.

In another embodiment, the invention provides a kind of method that one in the forwarding unit port that before got clogged is automatically terminated obstruction.Port and the indication port blocked designator whether port get clogged that gets clogged that gets clogged is associated.This method comprise the steps: via with a physical layer interface receiving data units of the port association that gets clogged; The Link State of monitors physical layer interface; When in monitored Link State, changing, reset the port blocked designator automatically; And when port blocked designator indication unblocking, admit and import data cell into.This method can also comprise following additional step: be received in one or more network strategies that network internal is carried out; The port blocked designator is set; And when blocking, port blocked designator indication abandons data cell.

In another embodiment, the invention provides a kind of forwarding unit, comprising: one or more physical layer interfaces are suitable for receiving the one or more data cells from communication network; One or more data link layer controllers; And the forwarding module that operationally is coupled to one or more data link layer controllers.Each data link layer controller comprises one or more media access controllers (MAC) port, and each MAC port is suitable for operationally being coupled to one or more physical layer interfaces; One or more port designators, wherein each port designator is associated with one of MAC port, and each port designator is suitable for indicating that related MAC port gets clogged or unblocking; And at least one mac processor, operationally be coupled to one or more MAC port, be suitable for reading one or more port designators and be suitable for selecting to abandon or admit the one or more data cells that receive by one or more physical layer interfaces based on these one or more port designators.Forwarding module is suitable for receiving one or more data cells of being admitted by one or more data link layer controllers, and is suitable for transmitting the one or more data cells that receive from the data link layer controller.

Description of drawings

In the accompanying drawings with example but the mode of not limiting to shows the present invention, wherein:

Fig. 1 is the senior state transition diagram according to a port of the embodiment of the invention;

Fig. 2 illustrates according to a unblocking port of the embodiment of the invention and the high level block diagram of two ports that get clogged;

Fig. 3 is the high level schematic diagram according to a forwarding unit of the embodiment of the invention;

Fig. 4 is the high level flow chart that illustrates according to the operation of the port that gets clogged of the embodiment of the invention;

Fig. 5 is the high level flow chart that illustrates according to the operation when link-state change takes place of the embodiment of the invention;

Fig. 6 is the block diagram according to an exchange/routing device of the embodiment of the invention, shows this equipment and how to handle the variety of protocol data cell;

Fig. 7 is the chart that illustrates according to the numerical value of the sign of the embodiment of the invention or designator, and wherein whether particular port of this sign or designator indication should get clogged and illustrate when Link State to change how to revise such numerical value when taking place;

Fig. 8 is that according to the embodiment of the invention is suitable for carrying out the Link State monitoring and port reactivates the multilayer exchange/route of operation or the functional block diagram of forwarding unit;

Fig. 9 is the high level schematic diagram of layer 1 and layer 2 processor or module according to the preferred embodiment of the invention; And

Figure 10 illustrates according to each module of the embodiment of the invention and the interactional high level, functional block diagram of parts.

Embodiment

Clearly to make those skilled in the art can realize and use mode of the present invention be not to understand the present invention concerning the principle of the invention limits by example to the following detailed description with a kind of, and described a plurality of embodiment of the present invention, modification, distortion, possibility and purposes, comprised the pattern that is considered to realize the best of the present invention at present.

In order to understand accompanying drawing better, similarly numbered Reference numeral in different accompanying drawings and the description and be used for referring in the following description identical or similar structure, action, operation or process step.In addition, the Reference numerals in 100 series, for example 102 and 104, in Fig. 1, introduce at first, the Reference numeral of 200 series, for example 222 and 224, in Fig. 2, introduce at first, and so on.Therefore, the Reference numeral of 900 series, for example 920 and 940, in Fig. 9, introduce at first.

Generally speaking, one embodiment of the present of invention comprise whether a definite particular port exists certain port forbidding condition.If any such condition exists, then port is forbidden by automatic or manual, thereby preventing from further to admit enters switching equipment and outwards transmit or the transmitting and receiving data unit from exchange or forwarding unit.If the Link State of this particular port is changed into link-down (link down) from link operation (linkup), then short of forbidding condition exists, and this port is just enabled automatically, thereby can carry out the transmission of receiving data units.Thereby, the reactivating of the handover trigger port of Link State, and network manager that needn't be other gets involved.Thereby the network manager do not need to determine which port be block or which equipment comprise the port that gets clogged, even do not need to give an order so that activate previous disabled port again.

Fig. 1 is the senior state figure that illustrates according to each state of a port of the embodiment of the invention.In initial condition, during system start-up, port is activated or is disengaged and blocks 102 usually.If but any port block condition 104 exists, then port is disabled or block 106.Whenever existing a Link State to change or switching 108---especially run to link-down or when from the link-down to the link, moving, the port one 06 that gets clogged is become unblocking or is activated 110 once more from link.Whenever any port block condition occurs at 112 o'clock, the port one 10 that will not block then become get clogged or forbidding 106.

Fig. 2 is the high level block diagram according to a preferred duplex port of the embodiment of the invention.In a preferred embodiment, duplex port has two parts---and receiving unit is called as the ingress port parts and spreads out of part and be called as port of export mouthpiece.In the preferred embodiment, a unblocking port 200 has the inlet part that is in the unblocking state, is referred to herein as unblocking inlet part 202 and is in the spout member of unblocking situation, is referred to herein as unblocking spout member 204.

On the other hand, first port 210 that gets clogged has to be in and gets clogged or the inlet part of disabled status, is referred to herein as the inlet part 212 that gets clogged.This embodiment operates so that the protocol Data Unit (PDU) that is sent to the ingress port parts that get clogged is received by physical interface layer or layer one (PHY) but further do not entered in the switching equipment by admittance.Be meant seven levels of open system interconnection (OSI) (OSI) reference model at the level of this discussion.If a port of export mouthpiece 214 gets clogged, it can not be used to transmit and spread out of PDU.But if it is disengaged obstruction or enables, then it can be used to further transmit spread out of PDU.

In a preferred embodiment, second port 220 that gets clogged has the inlet part of getting clogged 222 and removes and block spout member 224.In another embodiment, first port 210 that gets clogged has inlet part 212 and the spout member 214 that is configured to blocking data.In another embodiment, port is a non-duplex port, therefore, one receive or incoming port by total blockage or unblocking fully.It also is feasible also having another embodiment of the present invention, and wherein the ingress port parts are disengaged and block simultaneously that port of export mouthpiece gets clogged.

Fig. 3 is the high level schematic diagram according to the forwarding unit with the port that gets clogged 300 of the embodiment of the invention.In the preferred embodiment, the port that gets clogged only makes its ingress port parts get clogged---and the spout member unblocking allows to spread out of business thus.Even the ingress port parts get clogged, also receive and import into or inbound data unit 302 via physical layer interface/layer one (PHY) 330.

Forwarding unit 300 of the present invention comprises any switch, router or anyly preferably operate the forwarding unit of (comprising exchange in the layer 2 and the route in the layer 3) in a plurality of layer of osi model.In addition, each exchange of the present invention or forwarding unit 300 preferably comprise a plurality of physical ports 330, and these physical ports preferably move with dual-mode.

In certain embodiments, phy interface 330 is embodied in the integrated circuit (IC) chip that merges one or more network ports, application-specific integrated circuit (ASIC) (ASIC) for example, and each port operationally is coupled to a network link.Preferably, phy interface 330 is suitable for monitoring related Link State, and when link is non-running the informing network keeper.For the PHY chip, if PHY 330 is closed, then physical link state usually can not be monitored.Therefore, in a preferred embodiment of the invention, according to embodiments of the invention, even port gets clogged, PHY layer 330 is not disabled or close.On the contrary, preferably, the inlet Network on media access controller (MAC)/2 grade of 340 place's port blocked of layer, and allow physical link PHY 330 maintenance activities simultaneously, come monitoring link status to enable embodiments of the invention.Therefore, import data cell 302 into and be dropped, and further its further admittance is not entered forwarding unit 300 thus at layer 2 or MAC layer 340 place.

In a preferred embodiment of the invention, even inlet part is in the state of getting clogged, outgoi8ng data unit 304 also may still be transmitted or send from forwarding unit via a port with the spout member that is in the unblocking state.Outgoi8ng data unit 304 uses the unblocking spout member of port to send out PHY 330.Therefore, this preferred embodiment of the present invention can be received PDU or data cell by the ingress port parts at PHY layer place, but can't help this forwarding unit transmits, and the port of export mouthpiece of same port still can be utilized to transmit the PDU that spreads out of that may receive from other port (not shown).

Forwarding unit 300 of the present invention preferably also comprises batch processing instruction or program module 310, if it is carried out by processor (preferably, computer processor), then network layer 3 parts 350, MAC layer 340 and PHY layer 330 is controlled.For example, program module 310 control MAC layers 306 abandon and import data cell into, and the Link State of monitoring 308PHY layer 330.In one embodiment, program module is with the form specific implementation of software.

Fig. 4 illustrates forbidding or blocks the high level flow chart of the logical operation of a port.In first operation 450, identification port block condition group.These congestion condition are relevant with network utilisation that come into force and effective, and can depend on other activity of data service threshold value, virus attack, service-denial, broadcast storm, safety problem and possibility negative influence network.

In one embodiment, predefine congestion condition in forwarding or switching equipment 300.But, can make amendment to these predefine conditions.Additional congestion condition also can be by the network manager, and preferably by a device configuration management device, manual definition also is incorporated in the equipment.

After identification port block condition group (step 450), judge the entry data unit or go into port service and whether satisfied one or more congestion condition, and import PDU into and whether should be dropped (checking 452).If PDU will be entered into switching equipment by admittance or be forwarded from switching equipment---mean that they do not meet congestion condition, then switching equipment is correspondingly handled these PDU or data cell, if and be fit to thus, then they are transmitted (step 454) from that equipment.

To get clogged if import PDU into, then by using a Boolean sign, a register or any similar numerical indicators forbidding ingress port parts (step 456).Inlet blocks sign and is set to the numerical value that this port of indication should get clogged, for example value " very " or " 1 ".Block sign (step 456) in case be provided with inlet, then block and import PDU into, mean via disabled ingress port parts and from this switching equipment, do not transmitted by the PDU that switching equipment receives---they are abandoned (step 458).Therefore in a preferred embodiment, port of export mouthpiece is not disabled and can use it for and spread out of PDU, and therefore, is unwanted for the sign of port of export mouthpiece.Sign, set of landmarks or other numerical indicators also can be used for single worker (non-duplex) port.

Fig. 5 has illustrated a high level flow chart, show a Link State or Link State change how to be used to automatically enable one disabled/port gets clogged.Use can obtain the link-state information of each port according to port interface of the layer 1 (PHY) of osi model and by interrupting.Preferably, also link-state information is monitored continuously.Fig. 5 utilizes the port explanation that preferably gets clogged, and promptly the ingress port parts get clogged and port of export mouthpiece is disengaged obstruction.

In first operation (step 530), the Link State/situation of detection port.(check 532), monitoring link status (step 530) so once more if do not change in the Link State.If but the Link State of that port (run to link-down or move from link) changes, determine ingress port parts whether disabled (check 534) so from the link-down to the link.This can be determined by the numerical value of checking inlet obstruction sign or any similar designator.Preferably, monitor the Link State of each port continuously.

If the ingress port parts obtain for example " very " value disabled (check 534) by blocking at inlet in the sign, then blocking sign by entering the mouth is re-set as, for example, " vacation " automatically reactivate that ingress port parts (step 536).This operation means, via those ingress port parts, no longer block now and import PDU into, and therefore switching equipment should and be handled to be used for further forwarding its admittance.

Forwarding unit according to prior art, the variation of Link State also initiates to relate to the changed condition process (step 538) of one or more functions and responsibility, its function and responsibility for example comprise: send first message to the IP address, the link of stating that particular port is closed and sends a trap (trap) and gives a simple network protocol manager.

Fig. 6 is illustrated in block diagram how to handle various PDU in the forwarding unit 600 of the present invention.In first example, the first inbound PDU 602 is received via PHY by a duplex port, and duplex port has inlet 620B and outlet 620A port part.Ingress port parts 620B and port of export mouthpiece 620A are disengaged and block/be activated.Because ingress port parts 620B is disengaged obstruction, so the port of export mouthpiece 620A that the first inlet PDU 602 that imports into is handled then by same port or other port by equipment 600 transfers PDU 604.

In another example, duplex port has disabled/get clogged ingress port parts 624B and one and enables/unblocking port of export mouthpiece 624A.The get clogged physical layer of the second inbound PDU 606 by this port of ingress port parts 624B of use is received.But switch 600 abandons this second inbound PDU 608, means that PDU 608 is no longer entered switch by admittance and do not transmit from switch 600.

In another example, the 3rd PDU 628 uses it to be activated the reception of one of port part by equipment.It can be via unblocking ingress port parts 620B or any other unblocking port part (not shown) and is received.Can or by any being activated/unblocking port of export mouthpiece the 3rd PDU 628 be transmitted 634 via unblocking port of export mouthpiece 620A, 624A goes out outside the switch 600.But, if port of export mouthpiece gets clogged or is disabled---not shown, then can not use this port of export mouthpiece that gets clogged to transmit and spread out of PDU.

Fig. 7 has illustrated two example port blocked state tables 702 in the embodiment of the invention, 708 and indicate 704,710 exemplary value.In this example, have only the ingress port parts of duplex port #999 disabled---port of export mouthpiece is activated.

The some application that comprise strategy (comprising security strategy), Control Network can realize in forwarding unit 600,300.A web portal limit value criterion for example can be identified as to be used or tactful ID (sign) " 0001 ".In one embodiment of the invention, use a strategy or application ID in switch 600, to discern each application or strategy, each strategy/application has its oneself sign, and indication comprises whether a particular port of its inlet, outlet or two port parts should be disabled.Though not shown, also exist indication to block the mode which port mark relates to or represent.

According to embodiments of the invention, each port in the switch 600 can have its oneself mark, indicating that particular port is be activated or disabled, if and be fit to, whether just enter the mouth, export or two port parts all get clogged or unblocking---for example, port #999: enter the mouth disabled/get clogged, the outlet be activated/unblocking; And port #888: the disabled/obstruction that enters the mouth, disabled/as to block.In a preferred embodiment, this port block sign is the one or more registers in the layer 2.Those of ordinary skills should understand: have many modes to indicate such numerical value, for example by bit manipulation, by " very " and " vacation " value and pass through " 0 " or " 1 " and be worth.For example, can use the alternate manner of realizing this characteristic via different data or object construction and register array.

It is possible that the strategy of realizing in switch 600 can have different value at any given time.According to some condition and in the different time, each strategy or application can get clogged its request and change into unblocking from port, and vice versa.First form 702 indication strategy " 001 " request port #999 get clogged---indicate by " very ".On the other hand, strategy " 0002 " and " 0003 " request port #999 unblocking---indicate by " vacation ".As long as exist a request port to get clogged/disabled strategy, then the embodiment of the invention is preferably all application and the tactful ingress port parts that block or forbid that port.This be by port block sign (port is #999 in this case) is set to " very " finish 704.This means that also the PDU that comes in by these ingress port parts should be dropped and not transmit from switching equipment.

Usually monitor the Link State of each port continuously, thereby the variation of Link State particularly runs to the variation of closing from link, triggers the change of value of statistical indicant, promptly sign be reset 710 so that previous disabled port be activated now.All application or the strategy held for the mark of that particular port also are reset as shown in exemplary table 708.One embodiment of the present of invention use in the Link State this to change automatically to reactivate one previous disabled/port that gets clogged, and therefore, can handle the incoming call PDU that receives now so that it can be transmitted by forwarding unit.

Below, the exemplary pseudo-code of the higher-order logic of presentation graphs 7 has been shown in Table I.

Table I

// by a link monitoring module or function, a sign can be set
	// aPort-＞blockFlag=TRUE is set;
	// this module monitors Link State, it can also can be a drives interrupts via Infinite Cyclic both
	void aPortLinkStateMonitor(void)
{
	// initialization
aPort-＞blockFlag ＝FALSE；
	aPort-＞aPhyLinkStatus ＝LINK_DOWN；
aPort-＞aLocalLinkStatus＝LINK_DOWN；
// other suitable characteristic or operation

while(1){
// other suitable characteristic or operation
getLinkStatus(aPort)
// other suitable characteristic or operation
if(aPort-＞aPhyLinkStatus＝＝LINK_DOWN){
	if(aPort-＞aLocalLinkStatus＝＝LINK_UP){
// or by unpluging port or restarting a remote port
	// that aPort is become is inactive
aPort-＞aLocalLinkStatus＝LINK_DOWN
	if(aPort-＞blockFlag＝＝TRUE){
// mark will be released-be re-set as FALSE
	aPort-＞blockFlag＝FALSE；
…
	}
}
	}

	if(aPort-＞aPhyLinkStatus＝＝LINK_UP){
if(aPort-＞aLocalLinkStatus＝＝LINK_DOWN){
	//aPort becomes movable
// insert port or recover remote port
// enable switching port
	setSwitchingPort(aPort，RX，ENABLE)；
…
	}
}
}//_end_of_while
}//_end_of_aPortLinkStateMonitor
	// this is a routine, it is provided with/resets sign (the mark port is activated or is disabled)-port manager
int aPortBlockIngressFlow(int appid，int portid，bool block)

{
	// record attempt the getting clogged application id of port
	// acquisition port organization
aPort＝getAPortStructure(portid)；
// this is effective for active port
	if(aPort-＞aLocalLinkStatus＝＝LINK_UP){
If sign is held in // some application, do not reset this sign
	// because to allow a plurality of application hold this sign be possible
	if(entry(appid)exists){
// it is called
	return OK；
}
addEntry(appid)
if(block＝＝TRUE){

// forbidding inlet stream
	SetSwitchingPort (aPort, RX, DISABLE);
	// will not receive
// in logic, link will be closed.Make the application that comprises administration module understand
	ReportLinkStatus (aPort, LINK_DOWN);
	APort-＞blockFlag=TRUE;
}
	Else if (checkEntry (appid)==TRUE)
RemoveEntry (appid);
	APort-＞blockFlag=FALSE;
}
	}
Else{
	// as long as the situation of link is to close
// then walk around routine
	Return ERROR;
}

return OK；
	}

Fig. 8 is a functional block diagram that is suitable for carrying out the multilayer switch 800 of Link State monitoring of the present invention and Port Management.The switch 800 of an embodiment comprises one or more osi layers 1 and layer 2 processor (L1﹠amp; 2 processors) 804, one or more Switching Module 806 and an administration module 820, wherein all module cooperations are so that receive inlet data services and send the outlet data service via each physical port 802.For the purpose of this embodiment, the data that flow into switch 800 from another network node are referred to herein as entry data unit or protocol Data Unit (PDU).On the contrary, the unblocking data that are used to send to another network node at internal communication to a physical port 802 are called as outlet data or spread out of PDU or data cell.

In one embodiment, enter the mouth or import into PDU by means of one or more entry data bus 805A from L1﹠amp; Be sent to Switching Module 806 in 2 processors 804.Similarly, the PDU that further will enter the mouth if desired sends from switch 800, then they is handled so that they have been ready to send to a plurality of L1﹠amp via one or more outlet data bus 805B from Switching Module 506; 2 processors 504.

Administration module 820 generally includes a policy manager 824 that is used to keep and realizes the Network strategy, configuration manager 822, a link monitor 862 and a port manager 828.Preferably, the strategy realized of policy manager 824 or applying portion ground are based on the layer 2 of deriving from the learning manipulation of source and/or layer 3 addressing information, the routing iinformation that receives from other routing device and the filtering rule from using Simple Network Management Protocol (SNMP) message 826 for example to be uploaded by the network manager via configuration manager 822.Make business/network strategy of from source study, other network node and keeper, obtaining to route engine 830 can with and represent jointly by transmitting 854.

Preferably, link monitor 862 is monitored each L1﹠amp continuously; The Link State of 2 processors 804, and the part of administration module 820 preferably.In one embodiment of the invention, link monitor 562 is integrated in the port manager 528.

There are many methods to change the Link State of a port.For instance, Microsoft (TM) is connected to a port, for example port #999 based on the personal computer (PC) of window.Just can change link circuit condition by just unpluging network cable from network wall socket or the connector on the network interface unit of PC.Just restart PC or outage or just open Link State is switched to link-down from the link operation again, perhaps switch to the link operation from link-down.If link circuit condition is changed/switches---the link running status to link-down state or link-down state to the link running status, then link monitor 862 detects such change, and correspondingly notifies port manager 828 to enable that particular port with that link association.By utilizing the variation of Link State, can be easy to reactivate a port.For example, the user need only restart their system or need only unplug their network cable and its network that turns back to them again connected in just can reactivate their port.Thereby alleviated the network management intervention.

This link monitor 862 is communicated by letter with port manager 828, port manager 828 is correspondingly discerned and suitable port, preferably duplex port (inlet, export or two port parts) be set to be activated/unblocking or disabled/get clogged.Port manager 828 is also reset and is used or strategy obstruction sign, perhaps this information is sent to policy manager 824, and policy manager 824 is provided with suitable application or strategy then again.In a preferred embodiment, port manager 828 and L1﹠amp; 2 processors communicate and are provided with/reset suitable control register (Rx and Tx), and its indication comprises whether a port of corresponding entrance and exit port part should get clogged.Therefore, at L1﹠amp; Treatment of selected imports abandoning of data cell in 2 processors.

Preferably, switch 800 comprise can but be not restricted at least one Switching Module 806 that carries out layer 2 (data link) and layer 3 (network) swap operation.The possible layer 2 protocol group that is used for port 802 operationally is coupled to wired and/or wireless communication link comprises: Institute of Electrical and Electronics Engineers (IEEE) 802.3 and IEEE 802.11 standards, and possible layer 3 protocol groups comprise: the Internet engineering duty group (IETF) consults on the IP version 6 of definition among Internet protocol (IP) edition 4 of definition in the data (RFC) 791 and the IETF RFC 1883.

Preferably, Switching Module 806 comprises that a routing engine 830, one transmit 854 and queue management devices 840.Routing engine 830 comprises a grader 832 successively, and its receives the inlet PDU from data/address bus 805A, checks one or more fields of PDU, and the memory 833 that uses content addressing becomes a stream in a plurality of streams to the PDU classification.In one embodiment, administration module 820, especially for port manager 828, order Switching Module 806 or cooperate with Switching Module 806 and to realize obstruction of the present invention and to abandon characteristic.In the present embodiment, routing engine 830 abandons the data cell of importing into from the port that gets clogged.But, if PDU will be dropped---admitted, then routing engine 830 also transmitting from remain on high-speed memory obtain forwarding information in 854.Preferably include from transmitting the forwarding information that obtains 854, but be not restricted to, for example a flow identifier is used to specify needed those of the specific suitable substance P DU for preparing outlet and transmits operation.

Forwarding processor 834 receives to be disengaged and blocks inlet PDU and related forwarding information and the one or more forwardings operations of execution before sending to suitable port of export mouthpiece.In another embodiment, in this processor 834, handle abandoning of the entry data unit that gets clogged that comes by a disabled port.

For those outlet data unit that will be sent out, transmitting operation preferably includes, but be not restricted to: be used for again the header conversion of encapsulation of data, be used for the VLAN mark that one or more VLAN marks append on the PDU is pushed, be used for ejecting from the VLAN mark of the one or more VLAN marks of PDU deletion, the service quality (QoS) that is used for reserving network resources, be used to monitor the charging and the record keeping of client's business, be used for the checking of selective filter PDU, access control, comprise the higher level study of ARP(Address Resolution Protocol) control, source study, and be used for determining that PDU is assigned with the service type (CoS) of the relative priority level of switch resource.

After forwarding processor 834, PDU is transferred to and is stored in the queue management device 840 up to bandwidth to can be in order to till PDU being sent to suitable port of export mouthpiece.Especially, outlet PDU is buffered in one or more priority queries in the buffer 842 up to them and is scheduled till device 844 sends to suitable port of export mouthpiece 802 via output data bus 805B.

Fig. 9 is a preferred L1﹠amp of the present invention; The functional block diagram of 2 processors 804.In this preferred embodiment, a L1﹠amp; 2 processors 804 generally include a plurality of physical layer interfaces (PHY) 940 and medium access control (MAC) interface that is suitable for via network communication link exchange PDU (for example ethernet frame).Preferably, L1﹠amp; 2 processors also comprise at least one data link layer controller 900.Legacy network interface function in each PHY 940 execution that physical layer is moved comprise the reception of PDU (such as the Ethernet symbols streams) and are sent in.

When one in the communication link that receives auto correlation inlet PDU 902, be converted into a byte stream from electricity in the communication link or light signal by PHY 940, it is sent to the MAC media interface/port 910 of an association then.In sending mode, 940 byte streams from the MAC port 910 of an association of PHY are converted into electricity or the light signal that is suitable for this medium.PHY 940 is specific for the media type that it connected.

Data link layer controller 900 in the preferred embodiment comprises one or more MAC port/interfaces 910.Preferably, each of a plurality of ports 910 is the duplex port that is suitable for receiving entry data and sends outlet data.The MAC port 910 of layer two place operations carry out comprise the reception of Ether frame and be sent in the legacy network interface function.In receiving mode, preferably, MAC port 910 is carried out various functions, these functions comprise, but be not restricted to: (a) mac frame is resolved, and is used for for example extracting the TOS byte that packed protocol type, frame priority, VLAN is labeled the User Priority of frame and has the IP frame of preferential or DiffServ mapping from ethernet type/length field; (b) use receives the error checking of Frame Check Sequence (FCS) value of data and grouping decapsulation; (c) asymmetrical and symmetrical current control comprises: for example accept the current control frame to be stopped frame transmission or Abort Frame transmission by People Near Me.Frame from MAC port 910 carries out this locality processing then at mac processor 920 places.According to feature of the present invention, preferably, finish by the abandoning of inlet PDU that the port 952 that gets clogged receives by mac processor 920.

Consistent with the traditional media access controller, MAC port 910 is carried out various functions, for example comprises: (a) conflict is handled, (b) access control of communication media being carried out according to the CSMA/CD host-host protocol, (c) generation of frame check sequence (FCS) value, (d) encapsulation and (e) send and delay.In a preferred embodiment, MAC port 910 is suitable for using ten bit interface of simplifying in the interface (RTBI) or gigabit Media Independent Interface (RGMII) type of simplifying to support the throughput of 10,100 or 1000 mbit/independently.

Figure 10 is a high level, functional block diagram, illustrates generally how to handle characteristic of the present invention.This figure also illustrates in greater detail data link layer controller 900, though be its some part.A MAC port 910 of preferred embodiment comprises two control registers or related with two control registers: receive (Rx) control register 1010 and send (Tx) control register 1020.Rx control register 1010 and Tx control register 1020 are meant and are shown into mouthful and sign that whether port of export mouthpiece should get clogged respectively.These registers preferably are provided with and are reset by port manager 828.

Policy manager 824 communicates with port manager 828, thereby is provided at various application or the strategy of realizing in the forwarding unit of the present invention 1040 to port manager 828.Above-mentioned application or policy flag can be stored in the policy manager, but are preferably stored by port manager 828 and keep.

Link manager 862 communicates with port manager 828, and the link information 1030 of each PHY 940 is provided to port manager 828.In one example, PHY is a GigaBit Interface Converter (GBIC).It is the control register 1010,1020 that is provided with or resets in layer 2/Mac port 910 that link manager 862 also provides its information so that judge to port manager.

In a preferred embodiment, mac processor 920 reads and is included in control register---the one or more values 952 in Rx control register 1010 and the Tx control register 1020.If the ingress port parts of these one or more value indication ports should get clogged, then mac processor 920 abandons or does not admit and come from importing into/the entry data unit of that port 910, promptly do not handle and import data cell into, further to send from forwarding unit.On the other hand, if the data cell of importing into that this numerical value indication is come in by that port 910 should be processed, then mac processor 920 deal with data unit are so that further send.As mentioned above, according to the present invention, if port of export mouthpiece does not get clogged, the MAC port 910 that then its ingress port parts are disabled still can send from its port of export mouthpiece.

Therefore MAC layer or layer 2 communicate with PHY or layer 1.MAC layer/layer 2 communicates with layer 3 or network layer again then.The administration module that comprises policy manager, port manager and link manager can be the part of one of the part of layer 3 or higher level of osi model.

The present invention is described according to a present preferred embodiment in the above, so that can pass on a understanding of the present invention.But switch of the present invention, forwarding unit, link monitor module, port manager module, port block sign and policy tag many are configured in this and describe especially, are applicable but the present invention utilizes these configurations.Therefore the present invention should be considered as being limited to specific embodiment described herein, but should be appreciated that the present invention with respect to, for example, switch, link monitoring module, port manager and sign have extensive applicability usually.For example, can be to realize port part, entrance and exit at this alternate manner of clearly not discussing, in switch, how to be identified as disabled or to be activated.For example, their numerical value can not be stored or handle in administration module itself, but is stored or handles in switch module itself.Another distortion is: the function of link manager is merged into the part of port manager with the form of a software program, preferably, is stored in the computer-readable medium and can carries out invention step of the present invention by computer.These features of the present invention also can realize with hardware, software or the two form in conjunction with (firmware).As directedly can for example finish in the layer 3 at another layer for the distortion that where abandons entry data.Can also use radio port.

Therefore, all modifications within the scope of the appended claims, be out of shape or be equal to and be provided with and implement and think within the scope of the present invention.

Claims (9)

1. forwarding unit that is used for operationally being coupled to communication network via one or more links, this forwarding unit comprises:

At least one has the interface of associated ports state, and wherein this at least one interface is suitable for:

Operationally be coupled to a related link circuits in these one or more links;

If this port status is unblocking, then via this related link reception of inbound data unit, and

If this port status then abandons the inbound data unit from this related link circuits for blocking; And

Link monitor is suitable for detecting the variation of the Link State of each link in these one or more links; And

Port manager is suitable in response to the variation in the Link State of detected this related link circuits, and the port status of at least one port is automatically changed to unblocking from blocking.

2. forwarding unit as claimed in claim 1, port status that wherein should association also comprise inlet port status and outlet port status.

3. forwarding unit as claimed in claim 1 also comprises:

Policy manager is suitable for realizing one or more strategies of this communication network and operationally is coupled to this port manager;

Wherein this port manager also is suitable for the one or more strategies in response to this communication network, and the port status of at least one port is changed to obstruction from unblocking.

4. forwarding unit as claimed in claim 2, wherein this at least one interface also is suitable for:

If this outlet port status is unblocking, then transmit data cell via this related link.

5. method that the port that gets clogged in the forwarding unit is automatically terminated obstruction, this forwarding unit is used for operationally being coupled to communication network, this port that gets clogged is related with a port blocked designator, this port blocked designator is suitable for indicating this port that gets clogged to get clogged or is disengaged obstruction, and this method comprises the steps:

From with an interface of the port association that gets clogged receive one or more data cells;

Monitor the Link State of this interface;

When in this monitored Link State, changing, reset the port blocked designator with the indication unblocking; And

When this related port blocked designator indication unblocking, admit the one or more data cells that from this interface, receive.

6. method as claimed in claim 5 also comprises the steps:

Receive one or more strategies of this communication network;

The port blocked designator is set with the indication port that gets clogged based on these one or more strategies that receive; And

When this of port blocked designator indication gets clogged port, abandon the one or more data cells that from this interface, receive.

7. forwarding unit that is used for operationally being coupled to communication network, this equipment comprises:

One or more physical layer interfaces are suitable for receiving the one or more data cells from this communication network;

One or more data link layer controllers, wherein each data link layer controller comprises:

One or more media access controller MAC port, each MAC port are suitable for operationally being coupled in these one or more physical layer interfaces;

One or more port designators, wherein each port designator is associated with one of MAC port, and each port designator be suitable for indicating this related MAC port be block or unblocking; And

At least one mac processor, operationally be coupled to this one or more MAC port, be suitable for reading this one or more port designators, and be suitable for blocking one or more data cells of selecting to abandon by receiving in these one or more physical layer interfaces, and select to admit one or more data cells by receiving in these one or more physical layer interfaces based on these one or more port designators indication unblockings based on this one or more port designators indication;

Forwarding module, operationally be coupled to this one or more data link layer controllers, be suitable for receiving these one or more data cells of being admitted, and be suitable for transmitting these one or more data cells that from this data link layer controller, receive by these one or more data link layer controllers;

Link monitor operationally is coupled to a plurality of physical layer interfaces, is suitable for monitoring the Link State of a plurality of physical layer interfaces; And

Port manager operationally is coupled to link monitor, is suitable for these one or more port designators alternately being provided with and being re-set as the indication of blocking indication and removing obstruction based on the Link State of this monitoring.

8. equipment as claimed in claim 7, wherein each of these one or more MAC port also comprises:

The ingress port parts and

Port of export mouthpiece.

9. the equipment of claim 8, wherein each of these one or more port designators also comprises:

With the ingress port parts designator of this ingress port part relation, this ingress port parts designator be suitable for indicating these ingress port parts be block or be disengaged obstruction; And

The port of export mouthpiece designator related, this port of export mouthpiece designator with this port of export mouthpiece be suitable for indicating this port of export mouthpiece be block or be disengaged obstruction.

Images