CA2189394A1

CA2189394A1 - Virtual network management method

Info

Publication number: CA2189394A1
Application number: CA002189394A
Authority: CA
Inventors: Atsuhiko Suzuki; Masanori Horiguchi
Original assignee: Furukawa Electric Co Ltd
Current assignee: Furukawa Electric Co Ltd
Priority date: 1995-11-02
Filing date: 1996-11-01
Publication date: 1997-05-03
Also published as: JPH09130421A; US5892912A

Abstract

A method is provided for managing virtual networks wherein switching hubs, each having ports to which nodes are respectively connected and having a bridging function, are interconnected via an ATM network, and predetermined ones of the ports of the switching hubs are grouped in order to construct virtual LANs. Data from a source node is transmitted to nodes belonging to the same group as the source node. A VLAN server, which stores MAC addresses of these nodes and VLAN identifiers in association with each other, is connected to the ATM network and collectively manages all nodes by means of the MAC addresses.
The switching hub makes an inquiry for a VLAN identifier, and reconstructs or modifies the VLAN in accordance with a VLAN
identifier responded from the VLAN server.

Description

21 893~4 -VIRTUAL NETWORK MANAGEMENT METHOD

BACRGROUND OF THE lNV~N ~ lON
Field of the Invention S This invention relates to a virtual network management methodformanagingvirtualnetworks, for example, virtualLANs or the like, which are configured over a backbone network such as an ATM (Asynchronous Transfer Mode) network.
Desaription of the Related Art In the case of using switching hubs as connecting devices connected to a high-speed network such as an ATM network, it is conventionally known to construct a plurality of separate LANs (virtual LANs) irrespective of physical configuration.
The configuration of a typical virtual LAN will be explained below. In the virtual LAN, a switching hub which is designedaccordingto,forexample,the standard ATM-IEEE 802.3 (hereinafter merely referred to as "switching hub") has an ATM
interface for high-speed backbone. Utilizing LAN Emulation standardized by the ATM Forum, the switching hub transfers a packet structured according to the standard IEEE 802.3 (hereinafter merely referred to as packet") to an ATM-side interface.
WithLANEmulation,itispossibletoconstructaplurality ofdifferentemulatedLANs(hereinafterreferredtoas n ELANs n ) .
Namely, according to LAN Emulation, software permits any one of switching hub ports which are designed in conformity with the standard IEEE 802.3 (hereinafter merely referred to as "ports") to be allocated to a desired ELAN. Consequently, a plurality of independentLANs (virtualLANs)canbeconstructed without reconfiguring physical wiring. A broadcast packet is inhibited from passing through different virtual LANs, and nodes belongingto different virtualLANs are isolated from one another and are unable to communicate directly.
In such virtual LANs, since the individual ports are allocated to different networks by means of software, there arises a difference between the physical wiring and the actual networks, making it difficult to grasp the network configuration. Also, it is unnecessarytoreconfigurethehard wiring each time the networks are modified; however, when S network modification is made by means of software, virtual LANs must be set manually with a thorough understanding of the hardwareconnections,requiringconsiderabletimeandlaborfor the settings.
Here let it be assumed that network wiring is installed, for example, in a building and that switching hubs are arranged on the individual floors of the building. The wiring for the switching hubs is extended above ceilings or behind walls and the individual ports are arranged in the form of sockets at predetermined locations on the floors. To each socket is connected a lOBase-T type hub which in turn is wired to respective nodes in a group or department, followed by the setting of virtual LANs.
With such network wiring installed, there may arise a situation where the nodes of a department at a certain location on the second floor are moved to the first floor and connected to sockets of the switching hub on the first floor. In such a case, the virtual LAN setting for a conventional network system involves checking and setting the port number of the switching hub having sockets to which the nodes were newly connected. It is therefore necessary to grasp with accuracy the wiring relationship between the sockets and physical ports connected thereto.
In practice, however, it is difficult to keep a thorough understanding of the port numbers of the switching hubs in relation to the sockets connected thereto, inclusive of the wiring within the building. Especially in the case of a larger-scale network, the difficulty in the virtual LAN
settings through the switching hubs increases for the above reason. If a setting error exists because of erroneous information about the port numbers, there is a possibility that 2 1 P~ 9 ~

a grave communication fault will occur in the network.
Consequently, modification of the virtual LAN settings during operation of the network is always accompanied by great risks that can affect the LAN operation.
In view of the foregoing, there has conventionally been proposed a concept of relational LAN wherein packet protocols or network numbers are detected, and identical network protocols or identical network numbers are automatically allocated to the same virtual LAN, as described on pages 58-81 of Nikkei Communications, No. 186 (November 21, 1994 issue, Japan). The relational LAN facilitates the reconstruction of virtual LANs according to identical protocols or identical network numbers as well as modification of the virtual LANs, thus making it possible to modify the virtual LANs while the network is in operation.
The concept of relational LAN involves the function of isolatingnetworkswiththesamenetworknumberfromoneanother or making different networks coexist on the same virtual LAN, the security functionofexcludinganetworknodethatwasadded on purpose to cause a network fault, and other functions. When these functions are executed on the virtual LAN, however, calculations must be performed taking account of upper-layer frames and thus are complicated, entailing difficulty in achieving the functions. It is also necessary that all protocols such as IP (Internet Protocol) and IPX (Internet Packet eXchange) should be recognized and handled, requiring complicated operation.

SUMMARY OF THE lNV~.~ lON
This invention was created in view of the above circumstances, and an object thereof is to provide a virtual network management method which facilitates collective management of complicated virtual networks and also is capable of automatically reconstructing and modifying the virtual networks.

2i 8~3~4 Another object of this invention is to facilitate data transfer based on the contents of data stored in a table, as well as modification of the contents of the table in accordance with a virtual network identifier responded from a virtual network server.
Still another object of this invention is to permit a server to collectively manage nodes connected to virtual networks.
A further object of this invention is to preserve consistency of data and also to permit reduction in scale of the system to thereby facilitate the system management.
The above objects are achieved by a virtual network management method according to this invention. In a system to which the virtual network management method of this invention is applied, switching hubs, each having ports to which nodes are respectively connected and having a bridging function, are interconnected via an ATM network. Predetermined ones of the ports of the switching hubs are grouped in order to construct virtualLANs(hereinafterreferredtoas~VLANs"),anddatafrom asourcenodeistransmittedtonodesbelongingtothesamegroup as the source node. Also connected to the ATM network is a virtual network server which stores MAC addresses of the nodes connected to the respective ports of the switching hubs and virtual network identifiers indicative of groups to which the individual nodes belong, in association with each other. A
switching hub sends a frame including a MAC address of a node tothevirtualnetworkserverinordertoinquireforthevirtual network identifier associated with the node. In accordance with the identifier responded from the virtual network server, the switching hub performs virtual network setting for the corresponding port, thereby automatically reconstructing or modifying the virtual networks.
Preferably, each of the switching hubs has a preset switching hub identifier distinguishable from those of the other switching hubs and preset port numbers associated with its respective ports, and is also provided with a table for storing the MAC addresses of the nodes, the port numbers of the ports to which the nodes are connected, and the virtual network identifiers in association with one another. Each switching hub performs data transfer in accordance with the contents of the table, and also modifies the contents of the table in accordance withavirtualnetwork identifierrespondedfromthe virtual network server.
The virtual network server preferably stores the MAC
addresses of the nodes, the virtual network identifiers, the switching hub identifiers of the switching hubs and the port numbersoftheswitchinghubs, towhichthenodes areconnected, in association with one another.
Preferably, the ATM network includes a LAN Emulation server and a LAN Emulation configuration server for LAN
Emulation. The LAN Emulation server and the LAN Emulation configuration server share the database of the virtual network server to preserve consistency of data, and the virtual network server complies with data retrieval requested by the LAN
Emulation server or the LAN Emulation configuration server.
The switching hub searches its table for a virtual network identifier associated with a destination MAC address in a frame transmitted from a predetermined node, or searches its table for a virtual network identifier associated with a source MAC
address in a frame transmitted to the predetermined node, and automatically recognizes the virtual network identifier of the predetermined node through learning.
The virtual network server changes a virtual network identifier associated with a specific one of the stored MAC
addresses in accordance with a predetermined modification command, and transmits a modification notice frame indicative of the change of the virtual network identifier to the related switchinghubs. Whenthemodificationnoticeframeisreceived, the switching hub automatically changes the virtual network identifier associated with the corresponding one of the MAC

2 1 8q394 addresses in its table.

BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a diagram showing the configuration of a VLAN
system using a virtual network management method according to one embodiment of this invention;
FIG. 2 is a diagram of a logical network of the VLAN system shown in FIG. 1;
FIG. 3 is a diagram illustrating the case where a node connection is changed in the VLAN system shown in FIG. l;
FIG. 4 is a process chart illustrating the process of operation of nodes shown in FIG. 3 according to a first embodiment;
FIG. 5 is a diagram showing the format of a frame used in this invention;
FIG. 6 is a flowchart illustrating how a switching hub shown in FIG. 1 operates when a packet is received;
FIG. 7 is a flowchart illustrating how a VLAN server operates when an inquiry frame is received;
FIG. 8 is a flowchart illustrating how a switching hub operates when a modification notice frame is received;
FIG. 9 is a flowchart illustrating how a switching hub operates when a response frame is received;
FIG. 10 is a diagram illustratingthe case where a new node is connected to one of the switching hubs shown in FIG. l;
FIG. 11 is a process chart illustrating the process of operation of nodes shown in FIG. 10 according to a second embodiment;
FIG. 12 is a flowchart illustrating a VLAN identifier learning mode according to this invention;
FIG. 13 is a flowchart also illustrating the VLAN
identifier learning mode;
FIG. 14 is aflowchart illustrating how a VLANservershown in FIG. 10 operates when a learn/modify frame is received;
FIG. 15 is a process chart illustrating the process of 2 1 8~39~

operation of nodes shown in FIG. 10 according to a third embodiment;
FIG. 16 is a process chart illustrating the process of operation of nodes shown in FIG. 1 according to a fourth embodiment; and FIG. 17 is a diagram illustrating the relationship of the VLAN server with an LECS and LESs for LAN Emulation according to still another embodiment of this invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
A virtual network management method according to this invention willbehereinafter describedwithreference toFIGS.
1 through 17.
FIG.lillustratestheconfigurationofaVLANsystemusing a virtualnetworkmanagement method accordingto oneembodiment of this invention.
Referring to FIG. 1, the VLAN system has a high-speed network, for example, an ATM network 10, as a backbone network, and a plurality of switching hubs 11, 12 and 13 are connected to respective branch lines of the ATM network 10.
The switching hubs 11, 12 and 13 are constructed with an ATM network-side port (not shown) connected to the ATM network 10, and IEEE 802.3 ports 1 to 5 connected to respective network nodes (hereinafter merely referred to as "nodes"). Each of theseswitchinghubsprovidesabridgingconnectionofMAClayer level between its ports 1 to 5, as well as between its ports and the ATM network-side ports of other switching hubs.
Also connected to the ATM network 10 are a VLAN server 14 and afile server 15. These servers 14 and 15 provide resources to the individual switching hubs 11, 12 and 13. TheVLANserver 14 stores MAC addresses ofthe nodes etc. connectedtothe ports of the individual switching hubs 11, 12 and 13, and VLAN
identifiersspecifyinggroupstowhichtherespectivenodesetc.
belong. Thefileserver15storesdocumentordatafiles. Each of the servers 14 and 15 also is a node having a communication 21 ~9394 function, like the other nodes, and has a MAC address associated therewith and a VLAN identifier specifying a group(s) to which it belongs.
The description below is based on the assumption that the 5 procedure for conversion between an IEEE 802.3 frame and a frame on the ATM network, the method of handling a VCC (Virtual Channel Code) identifier specifying a target of connection on the ATM
network 10, the broadcasting method, etc., are all in conformity with the LAN Emulation v. 1.0 (specification that allows the 10 use of existing LAN resources in an ATM environment) based on the ATM Forum. Accordingly, an LES (LAN Emulation Server), a BUS (Broadcast Unknown Server), and an LECS (LAN Emulation Configuration Server) are connected to respective ATM nodes, though not shown in the figure.
Each of the switching hubs 11, 12 and 13 has a VLAN function and permits individual ports 1 to 5 to be allocated to any desired LAN(s) independently of one another. In this case, the switching hubs 11, 12 and 13 permit a setting such that one port belongs to more than two VLANs. On the ATM network 10, different VLANs are identified as respective different emulated LANs (hereinafter referred to as "ELANsn). This makes it possible to construct VLANs across the switching hubs 11, 12 and 13.
According to this VLAN function, multicast packets (including broadcast packets) are not transferred between different VLANs.
The VLAN server 14 is a node which forms the basis of this invention. The VLAN server 14 may be either located in an ATM
switch (a switch in the ATM network which enables high-speed connection between a switching hub and a server) or connected to the IEEE 802.3 side insofar as it can be readily accessed from a global network management apparatus and can communicate with all related switching hubs. Preferably, in this embodiment, to permit communications equally with all switching hubs 11, 12 and 13, a separate VLAN having coverage of the entire network is set as a management VLAN and a VLAN identifier is allocated to this management VLAN.

2 1 893q4 In this embodiment, as shown in the logical network of FIG.
2, the switching hubs 11, 12 and 13, the VLAN server 14, and the file server 15 are assigned MAC addresses "SW-HUB X", nSW-HUB yn~ nSW-HUB zn~ ~VS~ and "Sa", respectively, and their S ATM addresses are ~xn~ ~yn~ ~zn~ ~V~ and "sn, respectively. It is also assumed that nodes 21 to 25 connected to the ports 1 to 5 of the switching hub 11 are assigned MAC addresses "an, "bn, "cn, "d" and "e, respectively, that nodes 26 to 29 connected to the ports 1 to 4 of the switching hub 12 are assigned 10 MAC addresses n f~ n g", "h" and n i n ~ respectively, and that nodes 30 and 31 connected to the ports 1 and 2 of the switching hub 13 are assigned MAC addresses "j" and "kn, respectively.
As shown in FIG. 2, the file server 15 and the nodes 21, 22 and 26 belong to a VLAN with a VLAN identifier "Va", the nodes 23, 24 and 26 to 28 belong to a VLAN with a VLAN identifier "Vb, the nodes 25, 30 and 31 belong to a VLAN with a VLAN identifier "Vcn, and the switching hubs 11 to 13 and the VLAN server 14 belong to a VLAN of the management with a VLAN identifier "Vm".
Therefore, the ports 1 to 5 of the individual switching hubs 20 11 to 13 are configured in accordance with the VLANs to which the nodes connected thereto belong, as shown in FIG. 1. In this embodiment, two or more VLANs may be allocated to a single node, like the node 26 which belongs to the two VLANs with the VLAN
identifiers "Va" and "Vb". Also, in the illustrated embodiment, 25 the individual VLANs are logically independent of one another, but they can communicate with other VLANs. In this case, however, it is necessary to connect external routers or to utilize a virtual router function of each switching hub.
The switching hubs 11 to 13 each have an address table shown 30 in TABLE 1 below, and can change the addresses in the address table by means of their VLAN learning function. The address tables of the switching hubs 11 to 13 have a similar arrangement, and therefore, the address table of the switching hub 11 is shown below as a typical example.

MAC address Port No./ VLAN identifier VCC identifier a 1 Va b 2 Va c 3 Vb d 4 Vb e 5 Vc f Vxya Va + Vb g Vxyb Vb k Vxzc Vc Sa Vxsa Va As shown in TABLE 1, in the address table of each switching S hub are stored "MAC addresses" of the nodes, "port numbers" to which the respective nodes are connected or "VCC values" to be sent via LAN Emulation if the node is not connected to its port, and "VLAN identifiersn to which the respective nodes belong.
This addresstable isusedas anordinary bridgetransfertable.
Bridge transfer of a packet is made to a port or VC (Virtual Channel) identified through a search of the MAC addresses.
In TABLE 1, "Vxyan, "Vxybn, Vxzcn and "Vxsa" are VCC
identifiers which serve to establish connections between the switching hubs 11 and 12, between the switching hubs 11 and 12, between the switching hubs 11 and 13, and between the switching hub 11 and the file server 15, respectively, and which permit packets to be passed via the VLANs "Van, "Vbn, "Vc" and "Van, respectively. In this embodiment, the address table of each switching hub is designed to permit entry of VLAN identifiers in order to deal with VLANs. Also, the address table is constructed in such a manner that information added as MAC
address entries ages out or is lost when no reference is made for more than a predetermined time period, by means of the bridging learning function of the switching hub. The VLAN
identifiers of the ports of each switching hub, however, are retained even if MAC address information associated with the portsagesout. ThispermitsquickrestorationofMACaddresses on the address table in the case where a MAC address once ages 2 1 893q4 out due to temporary absence of communication and is recorded again thereafter, because it is unnecessary to search for the corresponding VLAN identifier.
The VLAN server 14 has a table shown in TABLE 2 below.
s MAC SW-HUB identifier Port VLAN
address(ATM Address) No. identifier a X 1 Va b X 2 Va c X 3 Vb d X 4 Vb e X 5 Vc f Y 1 Va + Vb g Y 2 Vb h Y 3 Vb i Y 4 Vc Z 1 Vc k Z 2 Vc Sa S - Vm SW-HUB X X - Vm SW-HUB Y Y - Vm SW-HUB Z Z - Vm VS V - Vm As shown in TABLE 2, in the table of the VLAN server 14 are stored ~MAC addresses" of the nodes, "identifiers of the switching hubs" to which the nodes are connected (in this embodiment, ATM addresses are used as identifiers), "port numbers" to which the nodes are connected, and "identifiers of the VLANs~ to which the nodes belong. Basically, this table retainsthe MACaddressesof all nodesassociatedwiththeVLANs and the VLAN identifiers related thereto, regardless of operatingstatesofthenodes. Inthisembodiment,thecontents of the table are stored in a nonvolatile memory and are not lost unless they are intentionally deleted by a network administrator. Also, in this embodiment, the contents of this table are basically not lost due to aging.
The following explains the case where the network is modified.

21 a9394 FIG. 3 is a diagram illustrating a case where the network is modified in accordance with a first embodiment, or more specifically, in the VLAN system shown in FIG. 1, the node 31 connected to the switching hub 13 is moved and connected to the switching hub 12. FIG. 4 is a process chart showingtheprocess of operation of nodes according to the first embodiment.
In the following description of the embodiment, it is assumed that frames using specific UDP port numbers of TCP/IP, for example, are transferred between switching hubs (including theVLANserver14 andthefileserver15)viatheaforementioned VLAN ~Vm n .
As shown in FIG. 5, the frame has a format which is made up of a frame header including source and destination MAC
addressesetc.onEthernet,forexample,anIPheaderindicative of the protocol TCP/IP, a UDP header having a specific UDP port number, a l-byte command identifier indicating the type of command, a 6-byte MAC address, a 32-byte VLAN identifier, a 20-byte switching hub identifier (SW-HUB identifier), a l-byte port number, etc.
As shown in TABLE 3 below, for example, frames can be roughly classified into four types, that is, inquiry frame,"
"response frame," nlearn/modify frame" and "modification notice frame" corresponding to the command identifiers ~On to n 3 n, respectively.

2 1 8~394 -. _ .,1 .
~ ~ ~ ' p,, Z ~ O ~; o O O ~ O~ O

,. ~Qu~ 4~
D ~ O
n-~Q m ~ ~ ~ ~ ~ 3 ~ ~
~ o ~ o ~ ~ U~
z ~ Z o a~
z ~ ~ ~ D :~;
~1 1 ~ Z ~4- Z ~ ~Z
~D O ~ Z ~ I Z ~ S Z
Z ~
D ~ ~ ~D ~ r¢ tD ~1 O O O
L ~n n ~n ~D ;~ U~ q I ~0 ~ ~D
D U~ e ~ ~
n ~ ~ ~ ~
D a~ r~ S
~¢ ~D L ~ ~ ~D ~ tD
~5E .0 H ¢~
,~ a ~ ~ o o a ~ u~
D ~ 1' /~ 1' C~
~D ~ ~D
~D e o a .~ E i E à

,_ a ~-,1 ~,-,~
O G O
e ~ ~

Referring to TABLE 3, the "inquiry frame" identified by the command identifier "0" is a frame transmitted from a switching hub "H" to the VLAN server "sn, as indicated by the direction "H ~ sn. This frame includes a "MAC address"
indicating the "MAC address of the node" which is making an inquiry aboutaVLANidentifier, a"VLAN identifier"indicating the "identifier of the VLAN" corresponding to the MAC address in question (in this case, "V? n because the identifier is unknown), a "switching hub (SW-HUB) identifier" indicating the "ATM address of the switching hub" which is making the inquiry, and a "port number" indicating the "port number" to which the node making the inquiry is connected.
The "response frame" identified by the command identifier n 1 n is aframetransmittedfromtheVLANserver n S n toaswitching hub "Hn. In the response frame are stored the "MAC address"
indicating the "MAC address of the node" which made the inquiry about theVLANidentifier, andthe"VLAN identifier" indicating the"VLANidentifier(ELANname) n toberesponded. Inthiscase, the "switching hub identifier" and the "port number" retain no data.
The "learn/modify frame" identified by the command identifier "2" is a frame transmitted from a switching hub "H"
to the VLAN server "S~. In the learn/modify frame, the "MAC
address" indicates the "MAC address of the node" which is the subject of learning/modification, the "VLAN identifier"
indicates the learned "VLAN identifier (ELAN name)n, the n switching hub identifier" indicates the "ATM address of the switching hub," and the "port number" indicates the n corresponding port number. n The "modification notice frame" identified by the command identifier "3" is a frame transmitted from the VLAN server "S"
to a switching hub "Hn. In the modification notice frame, the "MAC address" indicates the "MAC address of the node" which is the subject of modification, the "VLAN identifier" indicates the VLAN identifier (ELAN name) n to be changed to, the 2 1 ~39394 switching hub identifier" indicates the "ATM address of the switching hub, n and the n port number n indicates the ~corresponding port number." In the case of the modification notice frame," the "switching hub identifier" and the port S number" may retain no data when the VLAN identifier" alone is modified.
In the first embodiment, the switching hub 12 performs the process shown in the flowchart of FIG. 6 upon receiving apacket from the node 31 connected to the port 5. The following description of the embodiment is based on the assumption that a packet is transferred via Ethernet, by way of example. Also, the address table of the switching hub 12 has the content shown in TABLE 4 below.

lS TABLE 4 MAC address Port No./ VLAN
VCC identifier identifier d Vyxb Vb e Vyxc Vc f 1 Va + Vb g 2 Vb h 3 Vc Sa Vysa Va :
:

In TABLE 4, Vyxb" and Vysa" are VCC identifiers which serve to establish connections between the switching hubs 12 and 11 and between the switching hub 12 and the file server 15, respectively, and which permit packets to be passed via the VLANs Vb" and Van, respectively.
Referring now to FIG. 6, the switching hub 12 first determines whether or not the destination address DA in the frame exists in its address table (Step 101). The destination address DA in this case is the MAC address e" of the node 25, as shown in FIG. 4, and therefore, the switching hub 12 judges that the destination address DA is registered in its address table. The switching hub 12 then transmits the frame to the 2 1 89~94 ~i6 port 5 of the switching hub 11 as specified by the destination address DA (MAC address "e") (Step 102).
If it is judged in Step 101 that the destination address DA of the frame is not registered in the address table of the switching hub 12 or if the frame is a broadcast frame, the switching hub 12 executes an unknown frame processing in which the frame is transmitted to all nodes (Step 103).
Subsequently, the switching hub 12 determines whether or not the source address SA in the frame exists in its address table (Step 104). If the source address SA is registered as a MAC address entry in the address table, the address table learns the source address, as in normal bridge transfer, and the MAC address and the port number are added as new entries.
If, however, the VLAN identifier number associated with the node 31 is not found, the switching hub 12 temporarily sets "V?n as the VLAN identifier in the address table, as shown in TABLE 5 below, for example (Step 105).

MAC address Port No./ VLAN
VCC identifier identifier d Vyxb Vb e Vyxc Vc f 1 Va + Vb g 2 Vb h 3 Vc Sa Vysa Va .
k 5 V?

The switchinghub 12thensends an inquiry frame(seeTABLE

3) to the VLAN server 14 via the ATM network 10 to inquire about the VLAN identifier associated with the MAC address in question (Step 106), and ends the receiving operation for this packet.
The inquiry frame transmitted in this case stores n O n as the command identifier following the UDP header, the MAC address of the node 31 as the MAC address, ~V?" as the VLAN identifier, the ATM address of the switching hub 12 as the switching hub identifier, and n 5 n as the port number.
Subsequently, the switching hub 12 determines whether or not it is in VLAN learning mode (Step 107); since in this case, the switching hub 12 is not in VLAN learning mode, the receiving operation for this packet is ended. In the case where the switching hub 12 is in VLAN learning mode, the hub 12 executes a subroutine for VLAN identifier learning mode (Step 108).
Onreceivingtheinquiryframe,theVLANserver14executes the process shown inthe flowchart of FIG. 7. Referringto FIG.
7, first, based on the MAC address in the inquiry frame (see FIG. 5), the VLAN server 14 searches its table for this MAC
address (Step 201), to determine whether or not the MAC address is recorded in the table (Step 202). In this case, the table has an entry of the MAC address "kn corresponding to the node 31, as shown in TABLE 2. If the switching hub identifier and port number described in the inquiry frame differ from the contents of the table, then it means that the port to which the node 31 is connected has been changed. Accordingly, the VLAN
server 14 rewritesthe switching hub identifier andport number stored in its table in association with the MAC address in question (Step 203).
Then, the VLAN server 14 searches for a VLAN identifier associated with this MAC address, to determine whether the VLAN
identifier is "V?" or not (Step 204). The VLAN identifier stored in association with the MAC address of the node 31 is, in this case, ~Vc" and not "V?n; therefore, a response frame including this VLAN identifier "Vc" is created. The response frame (see TABLE 3) is then transmitted to the switching hub 12 (Step 205). Namely, the VLAN server 14 rewrites the switching hub identifier and the port number, which are stored in its table in association with the MAC address of the node 31, to "Y" and "5n, respectively, and sends the response frame totheswitchinghub12fromwhichtheinquiryframewasreceived.
The response frame includes the MAC address "k" of the node 31, -and the VLAN identifier "Vc~.
Further, the VLAN server 14 sends a modification notice frame (see TABLE 3) to the switching hub 13 from which the node 31 was removed. The modification notice frame transmitted in S this case includes "3n as the command identifier following the UDP header, "k" as the MAC address of the node 31 which is the subject of modification, "Vcn as the VLAN identifier, the ATM
addressoftheswitchinghub12towhichthenode31wasconnected, and n 5 n as the port number.
Referring now to the flowchart of FIG. 8, when the modification notice frame is received, the switching hub 13 rewrites the entry of the corresponding MAC address (the MAC
address "kn of the node 31) in its own address table (Step 301).
In this embodiment, the address associated with the node 31 is deleted.
If it is judged in Step 204 in FIG. 7 that the VLAN
identifier stored in association with the MAC address of the node 31 is "V?n, the VLAN server 14 creates a response frame includingtheVLAN identifier"V?n andsends it totheswitching hub 12 (Step 206).
Referringnowto theflowchartofFIG.9, when theresponse frame is received, the switching hub 12 determines based on the MAC address in the frame whether or not this MAC address exists in its address table (Step 401). Since the MAC address "kn of the node 31 is already recorded, the switching hub 12 then determines whether the VLAN identifier in the response frame is "V?n or not (Step 402). The VLAN identifier is ~Vcn and not "V?n therefore, the address table is searched for a VLAN
identifier corresponding to the MAC address "kn of the node 31, and "V?nstored as the VLAN identifier is replaced by "Vcn (Step 403)-In this manner, according to this embodiment, the port 5 of the switching hub 12 becomes available as a port connected to the VLAN "Vcn.
In the address table of the switching hub 12, "V?n remains 2 1 8~3~4 set as a VLAN identifier until a response frame is receivedfrom the VLAN server 14. During this period of time, it may be assumed that connections with all VLANs are provisionally unavailable. Alternatively, assuming that connections with S all VLANs are available, a broadcast or multicast frame whose source is the port in question or its corresponding MAC address may be transferred/sent to all VLANs.
Therefore, in this embodiment, the switching hub 12 can inquire about an unknown VLAN identifier of a node by means of its MAC address, and can acquire a correct VLAN identifier from the VLAN server 14. Thus, even inthe case where a node ismoved and connected to a different switching hub, the switching hub 12 can automatically and readily acquire the correct VLAN
identifier as soon as a frame is generated by the node.
Further, according to this embodiment, a modification notice frame is transmitted from the VLAN server 14 to the switching hub from which the node was moved, whereby this switching hub also can readily recognize the movement (change) of the node.
Namely, inthisembodiment,theVLANserverstoresnotonly the MAC addresses and VLAN identifiers of the nodes, but also the identifiers and port numbers of the switching hubs to which the nodes are connected, in association with the respective nodes. Aswitchinghubmakes aninquiry about aVLAN identifier by sending to the VLAN server a frame including the MAC address of a node in question, modifies the contents of its table in accordancewithaVLANidentifierrespondedfromtheVLANserver, andperformsrequiredVLANsettingforthe port. Consequently, complicated virtual networks can be collectively managed with ease via the VLAN server, and it is also possible to facilitate the data transfer of each switching hub on the basis of the contents of the table, as well as the modification of the contents of the table in accordance with a VLAN identifier responded from the VLAN server. This embodiment, therefore, permits automatic reconstruction and modification of virtual networks.
Referring now to FIG. 10, another modification of the network, or more specifically, an addition of a new node 32 to the switching hub 12, will be explained. Such a modification S can take place in one of two ways, that is, the case where the MAC address "m" of the node 32 is not yet recorded in the VLAN
server 14 (second embodiment), and the case where the MAC
address "m" is already recorded in the VLAN server 14 (third embodiment). The process of operations of nodes according to the second embodiment will be explained first with reference to the process chart of FIG. 11.
In the second embodiment, on receiving a packet destined for the node 25 from the node 32 connected to the port 5, the switching hub 12 performs the operation shown in the flowchart of FIG. 6.
Referring to FIG. 6, the switching hub 12 first determines whether or not the destination address DA in the frame exists in its address table (Step 101). In this case, the destination address DA is the MAC address "e" associated with the node 25, as shown in FIG. 11. Therefore, the switching hub 12 sends the frame via the ATM network 10 to the node 25 connected to the switching hub 11 (Step 102), and then judges in Step 104 that the MAC address "m"of the node 32 is not recorded in its address table.
Subsequently, in Step 105, the switching hub 12 checks the port from which the packet was received or the VCC, and records "m" as a MAC address entry in the address table corresponding to the port 5, as shown in TABLE 6 below. The switching hub 12 then temporarily sets "V?" as a VLAN identifier associated with this MAC address, and sends an inquiry frame to the VLAN
server 14 to inquire about the VLAN identifier associated with the MAC address "m" (Step 106).

MAC address Port No./ VLAN
VCC identifier identifier d Vyxb Vb e Vyxc Vc f 1 Va + Vb g 2 Vb h 3 Vc Sa Vysa Va m 5 V?

Referring now to FIG. 7, on receiving the inquiry frame, the VLAN server 14 searches its table for a MAC address entry ofthenode32includedintheinquiryframe(Step201). However, it is concluded that no corresponding MAC address exists (Step 202), and therefore, the VLAN server 14 judges that a new node hasbeenadded. TheVLANserver14thencreatesaresponseframe including the MAC address "m" of the node 32 and the VLAN
identifier "V?n, which indicates that the node in question is not recorded, and sends this response frame to the switching hub 12 from which the inquiry frame was received (Step 207).
Further, the VLAN server 14 adds the MAC address entry "m"
lS of the node 32 to its table, temporarily records "V?" as the corresponding VLAN identifier, and notifies the administrator of the addition of the new MAC address "m" (Step 208).
Referring to FIG. 9, on receiving the response frame, the switching hub 12 judges that the MAC address "m" in the frame exists in its address table and also that the VLAN identifier in the response frame is ~V? n ( Steps 401, 402), and then determines whether the operation mode of the system is security mode or not (Step 404). In this case, the system is previously not set in security mode; therefore, the switching hub 12 switches to the VLAN identifier learning mode so as to learn the VLAN identifier (Step 405). If the system is in security mode, the MAC address in question is not forwarded (Step 406), and the routine is ended.

2 1 ~393q4 When a broadcast frame whose source is the node 32 with the MAC address m" is generated, the switching hub 12 sends the broadcast frame, of which the destination address DA is set to n 1 n ~ to all nodes.
On the other hand, when a frame is transmitted from a node with the VLAN identifier "Vcn, for example, the node 25, to the node 32, the VLAN identifier of the node 32 is learned in accordance with the flowchart of FIGS. 12 and 13 showing the VLAN identifier learning mode. Here it is assumed that the address table of the switching hub 12 is in the state shown in TABLE 6.
Referring to FIGS. 12 and 13, on receiving the frame destined for the node 32 with the MAC address "m from the node 25 (see FIG. 11), the switching hub 12 determines whether or notthedestinationaddressDAintheframeexistsinitsaddress table(Step501). Also,theswitchinghub12determineswhether the corresponding VLAN identifier in the address table is "V?"
or not (Step 502).
The MAC address "m" is recorded in the address table and its corresponding VLAN identifier in the table is "V?";
therefore, the switching hub 12 determines whether or not the source address SA in the frame exists in the address table (Step 503). The switching hub 12 also determines whether the corresponding VLAN identifier in its address table is "V?" or not (Step 504).
The MAC address "e" is recorded in the address table, and its corresponding VLAN identifier in the table is "Vc" and not "V?n. Accordingly, the switching hub 12 records, as the VLAN
identifier entry associated with the MAC address "m"
(corresponding to the destination address DA), the VLAN
identifier "Vc" associated with the source address "e" in the address table (Step 505). Then, the switching hub 12 transmits a learn/modify frame (see TABLE 3), which includes the learned data (the data indicating that the VLAN identifier of the node 32 with the MAC address "m" is "Vc"), to the VLAN server 14 (Step 506), and terminates the learning mode (Step 507).
In the case where a unicast frame is generated of which the source address SA is the MAC address "m" of the node 32 and which specifies a destination node (e.g., the node 25 with the S MAC address "en) by the destination address DA, the switching hub 12 searches its address table for the destination address, as in ordinary bridge transfer. If the address table has an entryofthedestinationaddress,theswitchinghub12transmits the unicast frame to the port 5 of the switching hub 11 or to the VC (Virtual Channel).
Also in this case, the switching hub 12 learns the VLAN
identifier of the node 32, following the VLAN identifier learning procedure shown in the flowchart of FIGS. 12 and 13.
ReferringtoFIGS. 12 and 13,onreceivinga framedestined for the node 25 with the MAC address "e" from the node 32, the switching hub 12 determines whether or not the destination address DA in the frame exists in its address table (Step 501).
Then, theswitchinghub12 determines whetherthecorresponding VLAN identifier in its address table is "V?" or not (Step 502).
The MAC address "e" is recorded in the address table and its corresponding VLAN identifier in the table is "Vc" and not ~V?"; therefore, the switching hub 12 determines whether or not the source address SA in the frame exists in its address table (Step 508). Further, the switching hub 12 determines whether the corresponding VLAN identifier in its address table is "V?"
or not (Step 509).
Since the MAC address ~m" is recorded in the address table and its corresponding VLAN identifier in the table is V?n, the switching hub 12 determines whether or not the destination address DA in the frame exists in its address table (Step 510), and then determines whether the corresponding VLAN identifier in the address table is "V? n or not (Step 511).
The MAC address "e" is recorded in the address table and its corresponding VLAN identifier in the table is "Vc" and not V?n. Accordingly, the switching hub 12 records, as the VLAN

identifier entry associated with the MAC address "m"
(corresponding to the source address SA), the VLAN identifier "Vc" associatedwith thesource address"e"inthe address table (Step512). Then,theswitchinghub12transmitsalearn/modify frame,whichincludesthelearneddata(thedataindicatingthat the VLAN identifier of the node 32 with the MAC address "m" is "Vc"), to the VLAN server 14 (Step 513), and terminates the learning mode (Step 514).
Referring now to FIG. 14, on receiving the learn/modify frame, the VLAN server 14 searches its table for the correspondingentryinaccordancewiththecontentsoftheframe.
The VLAN server 14 then changes the VLAN identifier associated with the MAC address "m" to "Vc" (Step 601).
Thus, in this embodiment, the VLAN identifier of a newly added node is determined based on the VLAN identifier of the destination or source address in a transmitting or received frame, whereby the VLAN identifier of the newly added node can be automatically detected and the addition of new nodes is facilitated.
Since a port can belong to a plurality of VLANs, the embodiment may be modified in such a manner that the learning mode of the switching hub is continued and is not terminated when a VLAN identifier is learned once.
Theremayalsobeacasewherethenewlyaddednode32should be rendered incapable of communicating until the administrator completes a certain process for the node. In such a case, the nodes shown in FIG. 10 are operated in accordance with a third embodiment, as shown in the process chart of FIG. 15, so that the switching hub 12 may not enter the VLAN identifier learning mode.
Specifically, in the third embodiment, the system is in advance set in security mode. When a response frame in answer to an inquiry is received from the VLAN server 14, the switching hub lZ judges that the MAC address m~ in the frame is recorded in its address table and also that the VLAN identifier in the 218939~

responseframeis"V?"(Steps401,402inFIG.9). Theswitching hub 12 then determines whether the operation mode of the system is security mode or not (Step 404).
The security mode is in this case on; therefore, in accordance with this setting, the switching hub 12 discardsthe received frame including the MAC address "mn, instead of forwarding the same (Step 406).
When the VLAN identifier entry for the node 32 with the MACaddress"m"ischangedfrom"V?"to"Vc bytheadministrator, the VLAN server 14 transmits a modification notice frame, which indicates that the VLAN identifier for the node 32 with the MAC
address "m" has been changed to "Vcn, to the switching hub 12.
Referring to FIG. 8, on receiving the modification notice frame, the switching hub 12 checks the contents of the frame and searches its address table for the corresponding entry.
Then, the switching hub 12 sets "Vc" as the VLAN identifier associated with the MAC address "m" (Step 301).
Thus, in the third embodiment, VLAN identifier setting is made in response to a modification notice from the VLAN server after the administrator completes the required process for a new node, whereby the VLAN management by the administrator is facilitated and the security of the system is enhanced.
Also, in this embodiment, a newly added node may be displayed at the VLAN server so that the addition of the node can be recognized at a glance, to permit the administrator to identify the new MAC address entry and set the VLAN identifier with ease. In this case, even if a node is connected with a view to intentional obstruction of the network or illegal entry to the network, it is possible to avoid such situations because theadministratorcanreadilydetecttheconnectionofthenode.
Now, how the VLAN setting of the node 29 shown in FIG. 1 is changed from Vc" to "Vb" according to a fourth embodiment will be described with reference to the process chart of FIG.
16. As shown in FIG. 16, the administrator first accesses the table of the VLAN server 14 andthen changes the VLAN identifier associated with the MAC address "i" from "Vc" to ~Vbn.
In accordance with this change in setting, the VLAN server 14 transmitsamodificationnotice frame includingthemodified data (the data indicating that the VLAN identifier associated S with the node 29 with the MAC address in is "Vb") to the switching hub 12 which requires modification of the contents of its address table.
On receiving the modification notice frame, the switching hub 12 checks the contents of the frame and searches its address table for the corresponding entry. Then, the switching hub 12 changes the VLAN identifier associated with the MAC address "i"
from "Vc" to "Vbn, and performs required VLAN setting for the port.
Thus, in this embodiment, when the VLAN identifier of a specific node among the nodes recorded in the VLAN server is changed, the corresponding part in the address table of the switching hub is modified in accordance with the change. This permits centralized management of logical LAN configuration, and also the VLAN identifier setting of a specific node can be easily modified without the need to take account of the information about the wiring between the port of the switching hub and the node. This embodiment can therefore facilitate the management of a network constituted by VLANs and can provide a very useful VLAN system.
In the foregoing embodiments, each switching hub stores MAC addresses and VLAN identifiers associated therewith.
Therefore, where the switching hub is designed so as to compare the VLAN identifier of the source address in a frame with that of the destination address in the same frame and to transfer the frame only when the two coincide, excellent isolation of VLANs fromoneanotherisensured. Especially inthecasewhere security of individual VLANs is a matter of importance, such a switching hub may be employed to construct a high-security VLAN system.
Also, in the above embodiments, VLANs are managed by means 218~39~

ofMACaddresses,andthus itispossibletomanageVLANswithout relying upon network protocols.
Although the embodiments described above use frames including a specific UDP port number of TCP/IP, the frames to be used in this invention are not particularly limited and may be a get frame (inquiry frame/response frame), set frame (modificationnoticeframe)andtrapframe(learn-modifyframe) based on SNMP (Simple Network Management Protocol) which also is a popular standard, for example.
FIG. 17 shows the relationship of the VLAN server 14 with an LECS and LESs for LAN Emulation according to another embodiment.
In this embodiment, the VLAN server has a table which stores MAC addresses, ATM addresses of switching hubs, port numbers and VLAN identifiers (ELAN names) and which are identical in arrangement with data tables that ordinary LECS
and LES have.
It is assumed in the embodiment shown in FIG. 17 that an LECS 16 and LESs 17 and 18 have no data table, and that the VLAN
server manages all the information about the MAC addresses, the switching hub ATM addresses, and the VLAN identifiers.
When supplied with an "LE_ARP_REQUEST" inquiring about an ATM address from the switching hub 11, for example, the LES 17 outputs an inquiry "ARP_REQUEST" to the VLAN server 14 and acquires the ATM address from the VLAN server 14. Then, the LES 17 sends a response LE_ARP_RESPONSE" including the ATM
address to the switching hub 11 which originated the request.
A similar operation takes place also in response to an n LE_ CONFIGURE_REQUEST" sent from the ATM node 19 to the LECS 16.
Thus, in this embodiment, the VLAN server alone has a common database and can comply with data retrieval requested by the LECS or LES. Accordingly, consistency of data can be preserved with ease, compared with the case where a plurality of databases exist independently of one another, and the system can be reduced in scale, facilitating the system management and 218q39~

reducing the manufacturing cost.
Alternatively,asystemconfigurationmaybeemployedsuch that no VLAN server is provided and all data is transferred between switching hubs, for example. Also in this case, S advantages similar to those mentioned above can be achieved.
In the foregoing embodiments is employed the ATM network, but this invention is not particularly limited in this regard and can be applied to construction of virtual LANs via an ISDN, for example. In this case, each of the switching hub identifiers is a telephone number.

Claims

1. A virtual network management method for managing virtual networks connected over a backbone network,comprising:
interconnecting a plurality of connecting devices over the backbone network, each of the connecting devices having a plurality of ports to which nodes are respectively connected and having a bridging function;
connecting data storing means to the backbone network or to a branch network capable of communicating with the backbone network, the data storing means storing MAC addresses of the nodes connected to the respective ports of each of the connecting devices and virtual network identifiers indicative of groups in association with the respective MAC addresses;
sending a frame including a MAC address of a node from a connecting device to the data storing means to inquire for a corresponding virtual network identifier;
performing virtual network setting for a predetermined port in accordance with a virtual network identifier responded from the data storing means, to thereby permit the port to be grouped in relation to other connecting devices; and transmitting data to nodes belonging to a group to which a source node belongs.

2. The virtual network management method according to claim 1, wherein said backbone network is an ATM network.

3. The virtual network management method according to claim 1, wherein each of said connecting devices comprises a switching hub having a preset switching hub identifier distinguishable from those of other switching hubs and having preset port numbers associated with respective ports thereof, each of the switching hubs having a table for storing the MAC
addresses of the nodes, the port numbers of the ports to which the nodes are connected, and the virtual network identifiers in association with one another, each of the switching hubs performing data transfer in accordance with contents of the table, and modifying the contents of the table in accordance with the virtual network identifier responded from the data storing means.

4. The virtual network management method according to claim 1, wherein said backbone network is an ATM network connected to the connecting devices by means of LAN Emulation according to ATM Forum, emulated LANs configured by the LAN
Emulation according to the ATM Forum being used as virtual networks on the ATM network.

5. The virtual network management method according to claim 4, wherein said ATM network includes a LAN Emulation server and a LAN Emulation configuration server for LAN
Emulation, the LAN Emulation server and the LAN Emulation configuration server sharing a database of said data storing means.

6. The virtual network management method according to claim 1, wherein said data storing means comprises a virtual network server and stores the MAC addresses of the nodes, the virtual network identifiers, switching hub identifiers of switching hubs to which the nodes are connected, and port numbers of the switching hubs in association with one another.

7. The virtual network management method according to claim 1, wherein said backbone network is an ATM network connected to the connecting devices by means of LAN Emulation according to ATM Forum, emulated LANs configured by the LAN
Emulation according to the ATM Forum being used as virtual networks on the ATM network, and said data storing means comprises a virtual network server and stores the MAC addresses of the nodes, the virtual network identifiers, switching hub identifiers of switching hubs to which the nodes are connected, and port numbers of the switching hubs in association with one another.

8. The virtual network management method according to claim 7, wherein said ATM network includes a LAN Emulation server and a LAN Emulation configuration server for LAN
Emulation, the LAN Emulation server and the LAN Emulation configuration server sharing a database of a virtual network server, the virtual network server complying with data retrievals requested by the LAN Emulation server and the LAN
Emulation configuration server.

9. The virtual network management method according to claim 3, wherein when the virtual network identifier of a predetermined node is unknown, the switching hub searches the table for a virtual network identifier associated with a destination MAC address in a frame transmitted from the predetermined node, and learns the virtual network identifier of the predetermined node.

10. The virtual network management method according to claim 3, wherein when the virtual network identifier of a predetermined node is unknown, the switching hub searches the table for a virtual network identifier associated with a source MAC address in a frame transmitted to the predetermined node, and learns the virtual network identifier of the predetermined node.

11. The virtual network management method according to claim 7, wherein said virtual network server changes a virtual network identifier associated with a specific one of the stored MAC addresses in accordance with a predetermined modification command, and transmits a modification notice frame indicative of the change of the virtual network identifier to related ones of the connecting devices.

12. The virtual network management method according to claim 3, wherein when the modification notice frame is received, the switching hub changes the virtual network identifier associated with a corresponding one of the MAC addresses in the table.

13. The virtual network management method according to claim 9, wherein when the modification notice frame is received, the switching hub changes the virtual network identifier associated with a corresponding one of the MAC addresses in the table.

14. The virtual network management method according to claim 10, wherein when the modification notice frame is received, the switching hub changes the virtual network identifier associated with a corresponding one of the MAC addresses in the table.