IEEE8021aq(SPB)协议详解.ppt

ShortestPathBridging802.1AQ,LuiSimonetti&GatesZeng,Wherearewecomingfrom?,L2BridgedNetworks,L2networksdidnotscaleWhy?TheMACaddressL2addressing=MACaddressTheMACaddressisaflataddresswithnosummarizationorhierarchypossibleNoScalableControlPlaneWithnoaddressinghierarchypossibleitwasnotpossibletohaveaLinkStateProtocolforL2networkswhichcouldscaleNoL2OAMtoolsLimitedVirtualizationOnly802.1QVLANtagging,L3IPRoutedNetworks,SoL3(IP)routinghadtobeusedintheCoreWhy?TheIPaddressstructurecanbesummarizedintonetworksusinganetmaskCorenodesdonotneedtoknoweverysingleIPaddressonthenetwork(theyhavenoARPcache)ScalableControlPlaneAvailabilityofLinkStateProtocolssuchas:IS-IS&OSPFIPOAMToolsping,tracerouteIPVirtualizationpossibleButrequiresBGP&MPLSforscalability,IEEEL2Ethernetevolution,Ethernet=IEEE,ThebalanceshiftstoSPB,L2SPBNetworks,NowaL2SPBnetworkscalesMACinMAC802.1ahbringsaddressinghierarchy&summarisationtoEthernetbasednetworksScalableControlPlane802.1aqSPBMleveragesMACinMACandusesIS-ISforBMACreachabilityL2OAMtool802.1agbringssophisticatedOAMtools,whichcancomplementandenhancetraditionalIPOAMtoolsDesignedforVirtualization802.1ahintroducesaServiceID(I-SID)whichcanscaleto16millionservices,L3IPRoutedNetworks,DifficulttovirtualizeonaIPCoreTheIPaddressstructurecanbesummarizedintonetworksusinganetmaskCorenodesdonotneedtoknoweverysingleIPaddressonthenetwork(theyhavenoARPcache)ScalableControlPlaneAvailabilityofLinkStateProtocolssuchas:IS-IS&OSPFIPOAMToolsping,tracerouteComplex/CostlyVirtualizationRequiresBGP&MPLSforscalabilityRequiresVPLSforL2virtualizationoveranL3core,VirtualizationTechnologyComparison,MPLSversusVENA,e.g.PIMProtocolInfrastructure,e.g.RIP/OSPFProtocolInfrastructure,e.g.RFC4364ProtocolInfrastructure,e.g.DraftRosenProtocolInfrastructure,e.g.802.1q/DProtocolInfrastructure,802.1Q(VLAN),802.1D(STP),UCIGP(IS-ISorOSPF),Layer3UnicastService,Layer3MulticastService,Layer3VirtualizedMulticastService,TopDownVerticaldependency,Layer3VirtualizedUnicastService,IP/SPB,SPBm/SPBmProtocolInfrastructure,HorizontallyIndependent,ConnectivityServicesindependentfromInfrastructure,e.g.VPLSProtocolInfrastructure,Layer2VirtualizedUnicastService,MPLS,UnderstandingShortestPathBridging,MacinMac802.1ahencapsulationControlPlaneSPBusesIS-ISDataPlaneSPBTerminology:BEB,BCB,BVLAN,CVLAN.LoadsharingtrafficwithSPBsEqualCostTreesLoopsuppressionusingRPFCSPBshierarchicaladdressing:L2VSN&L3VSNSPBusesMulticastTreesQOS&DiffServoverSPBOperations,Administration&Maintenance(OA&M)SPBleverages802.1agCFM&Y.1731PerformanceMonitoring,SPBm802.1ahMac-in-MacEncapsulation,DA,SA,Payload,VLANID,DA,SA,Payload,C-VID,B-DA,B-SA,B-VID,802.1Q,802.1ahProviderBackboneBridges,Legend:SA=SourceMACaddressDA=Dest.MACaddressVID=VLANIDC-VID=CustomerVIDI-SID=24BitServiceIDB-VID=BackboneVIDB-DA=BackboneDAB-SA=BackboneSA,I-SID,TunnelIdentifiers,ServiceIdentifiers,CustomerVLANs,DA,SA,Payload,CustomerwithNoVLANTags,or,ConsolidatedServiceandTunnel,SimplifiedandintegratedforwardinglikeMPLSwithoutthecomplexity,SPBServiceTypeencapsulations,UnderstandingShortestPathBridging,MacinMac802.1ahencapsulationControlPlaneSPBusesIS-ISDataPlaneSPBTerminology:BEB,BCB,BVLAN,CVLAN.LoadsharingtrafficwithSPBsEqualCostTreesLoopsuppressionusingRPFCSPBshierarchicaladdressing:L2VSN&L3VSNSPBusesMulticastTreesQOS&DiffServoverSPBOperations,Administration&Maintenance(OA&M)SPBleverages802.1agCFM&Y.1731PerformanceMonitoring,WhatisIS-IS?,IntermediateSystemtoIntermediateSystem(IS-IS)intra-domainroutingprotocolIsaLinkStateProtocollikeOSPFIsadynamicroutingprotocolbasedonSPFroutingalgorithmlikeOSPFCapableoffastreconvergencetimes100mslikeOSPF(whenOSPFdeployedoverpoint-pointIPsegments)1987:OriginallydevelopedastheroutingprotocolfortheISOConnectionlessNetworkProtocolCNLP1988:LaterextendedtoIPIntegratedIS-IS,alsoknownasDualIS-IS,wastoprovideasingleroutingprotocolwiththecapabilitiesofroutingbothConnectionlessNetworkService(CLNS)andIPOSPFv1RFCpublishedin1989DualIS-ISRFCpublishedin1990OSPFv2RFCpublishedin1991,IntegratedIS-ISvs.OSPF,IS-IS,WidelyusedbyISPsEncapsulationIS-ISrunsdirectlyoverL2(Ethernet)MoredifficulttospooforattackPacketencodingIS-ISisTLVbasedEasiertoextend(e.g.toSPB)AreaarchitectureRouterisinonlyonearea,plusperhapstheL2backboneIS-ISareaboundariesfallonlinks,OSPF,WidelyusedintheEnterpriseEncapsulationOSPFrunsontopofIPSubjecttospoofingandDoSattacksPacketencodingOSPFusesmanyLSAtypesTiedtoIPv4(evenIPv6requiresanewversionofOSPF)AreaarchitectureOSPFareaboundariesfallwithinarouter(ABRs)Eachlinkbelongstoonearea,IS-ISAdjacencies(alwaysPointtoPoint),LSP:LinkStatePDUCSNP:CompleteSequenceNumbersProtocolDataUnitPSNP:PartialSequenceNumbersProtocolDataUnit,IS-ISinterfacescanbeconfiguredon:DiscreteethernetinterfacesMLTbundles,MLT1,MLT1,Node1,Node3,Node2,2/11,2/12,2/11,2/12,L1LSP,L1CSNP,P2PHELLO,L1PSNP,TLVsusedwithSPB,13,Pre-existingIS-ISTLVs,NewSPBTLVs,SPBISISLSDBDetail,86-10:5#showisislsdblspid0000.beb0.0020.00-00detail=ISISLSDB(DETAIL)=Level-1LspID:0000.beb0.0020.00-00SeqNum:0 x0000024bLifetime:589Chksum:0 x674aPDULength:150Host_name:86-20Attributes:IS-Type1TLV:1AreaAddresses:149.0000TLV:3EndSystemNeighbors:Metric:000beb0000020(86-20)TLV:22ExtendedISreachability:Adjacencies:2TENeighbors:20000.beb0.0030.00(86-30)Metric:10SPBMSubTLV:portid:193num_port1SPBMetric:100000.beb0.0010.00(86-10)Metric:10SPBMSubTLV:portid:129num_port1SPBMetric:10TLV:129ProtocolSupported:SPBM,TLV:135TEIPReachability:2Metric:1PrefixLength:32UP/DownBit:FALSEIPAddress:0TLV:144SUB-TLV1SPBMINSTANCE:Instance:0bridge_pri:0OUI:00-00-20numoftrees:2vidtuple:u-bit1m-bit1ect-alg0 x80c201basevid4001vidtuple:u-bit1m-bit1ect-alg0 x80c202basevid4002TLV:144SUB-TLV3ISID:Instance:0Metric:0B-MAC:00-be-b1-00-00-10BVID:10NumberofISIDs:210(Both),11(Both)TLV:184SPBMIPVPNReachability:VrfISID:31112Metric:1PrefixLength:32IPAddress:0,UnderstandingShortestPathBridging,MacinMac802.1ahencapsulationControlPlaneSPBusesIS-ISDataPlaneSPBTerminology:BEB,BCB,BVLAN,CVLAN.LoadsharingtrafficwithSPBsEqualCostTreesLoopsuppressionusingRPFCSPBshierarchicaladdressing:L2VSN&L3VSNSPBusesMulticastTreesQOS&DiffServoverSPBOperations,Administration&Maintenance(OA&M)SPBleverages802.1agCFM&Y.1731PerformanceMonitoring,SPBTerminology,CustomerVLAN(CVLAN)AtraditionalVLANwithMAClearning&floodingwhereuserdevicesconnecttoBackboneEdgeBridge(BEB)SPBnodewhereVSNserviceterminatesBEBnodeperforms802.1ahMACinMACencapsulation/de-capsulationfortheVSNBEBisinvolvedinVSNaddressing,BackboneVLAN(BVLANorBVID)SpecialVLANwhereMACtablepopulatedbyIS-ISshortestpathcalculationsProvidesreachabilitytoEVERYBMACintheSPBnetworkBackboneCoreBridge(BCB)SPBnodewhichdoesnotterminateVSNserviceBCBperformsforwardingonlybylookingatouterBMACheaderBCBisunawareofservicenetworksittransports,ShortestPathBridging-EqualCostPaths,IS-ISsees2EqualCostpathsbetween2nodes(referredasEqualCostTreesECT)SPBnetworkwasprovisionedwith2BackboneVLANs(BVIDs)BVID-1BVID-2IS-ISprograms1stEqualCostpathinForwardingDatabaseofBVID1IS-ISprograms2ndEqualCostpathinForwardingDatabaseofBVID2ServiceNetworks(VSNs)arethenhashedagainstoneortheotherorboth(perflowhashing)BVIDsSPB802.1aqdefinesmaxof16BVIDs,ISIS,ISIS,ISIS,ISIS,ISIS,ISIS,Cost=30,Cost=30,BVID-1,BVID-2,ReversePathForwardingCheck(RPFC),LoopsuppressionSPBrequiresthattheshortestpathineachdirectionbethesamebetweenanytwodevicesforbothunicastandmulticastpathsLogicofReversepathForwardingCheckistoexamineallframesreceivedonainterfaceandmakesurethatthesourceaddressandingressinterfacearecorrect.Ifnottheframegetsdropped.,SPBHierarchicaladdressingL2VSN,4/1,4/30,3/5,4/1,8600DBEB00:bb:00:00:14:00,MLT1,MLT1,00:00:00:00:00:02,8600GBCB00:bb:00:00:10:00,8600CBEB00:bb:00:00:13:00,00:00:00:00:00:01,SPBHierarchicaladdressingL3VSN,4/1,4/30,3/5,4/1,8600DBEB00:bb:00:00:14:00,MLT1,MLT1,8600GBCB00:bb:00:00:10:00,8600CBEB00:bb:00:00:13:00,L3VSNI-SID30001,vlan10/24,vlan10/24,0/24,0/24,L2VSNSPBMulticasttrees,1L2VSNTerminatedat4BEBs=4multicasttrees/BVLAN=8multicasttreesin2BVLANsEachmulticasttreeuniquetoI-SID+BEBtowhichitisrooteduniquemulticastBMACallocated:consumesforwardingrecordsinSPBnodesonlyonSPBnodeswhichareonthemulticasttreepath,L2VSNI-SID1000,Only1(of4)multicasttreeshown,ShortestPathBridgingL2ServiceVSN,Congruentunicast&multicastpathsCongruentforward&reversepath,ImportantPropertiesAlltraffictypes(known,unknowntraffic,broadcast)usethesamepathnooutoforderpacketspossibleTrafficABwillfollowthesamepathasBAMulticasttreesareROOT-edatsourcenodewithineveryserviceinstanceandonlyfloodpacketstoI-SIDservicenodemembersNoMAClearning&floodingintheCoreFullyQoSawareinfrastructure,Vlan20,Vlan20,Vlan20,组播地址通过动态I-SID映射到专用VSN上,a.当节点上有Receive时，组播数据才会传给该节点；b.IS-IS协议维护组播拓扑.，整个网络恢复时间小于1秒,MulticastSenderGrp0,Join0,IGMP,IGMP,Join0,IGMP,Join0,I-SID300,IPMC,Receiver,Receiver,Receiver,重要特性：边缘节点启用IGMPVENA架构为核心不再需要PIM或者DVMRP等复杂的协议,VENAIP组播服务VSN,SPBQOSmodel&DiffServ,IntheSPBmodel,allQOSwithintheSPBFabricisbasedontheBackbone-VLANp-bitsThereforeitisessentialthatthedesiredQOSmarkings(IPDSCPorCustomer-VLANp-bits)orQOSpoliciesattheedgeBEBsaretranslatedintocorrectB-VIDp-bitssothatinnerBCBnodescanpreservethedesiredDiffServPHB(PerHopBehaviour),8600G,MLT1,MLT1,SPBFabricQOSbasedonBVLANp-bits,IPDSCP=EF,IPDSCP=EF,BVIDp-bit=6,BVIDp-bit=6,BCB,BEB,BEB,SummaryofSPBUnicastServices,SummaryofSPBMServices,McastoverL2VSN,I-SID13990001,vlan10/24,vlan10/24,McastoverVRFs,McastReceiver,McastSender,McastReceiver,McastSender,GRT(overnativeIS-IS),vlan20/24,vlan20/24,McastOverGRT,McastReceiver,McastSender,UnderstandingShortestPathBridging,MacinMac802.1ahencapsulationControlPlaneSPBusesIS-ISDataPlaneSPBTerminology:BEB,BCB,BVLAN,CVLAN.LoadsharingtrafficwithSPBsEqualCostTreesLoopsuppressionusingRPFCSPBshierarchicaladdressing:L2VSN&L3VSNSPBusesMulticastTreesQOS&DiffServoverSPBOperations,Administration&Maintenance(