Abstract: Embodiments of this application disclose a configuration method that may be applied to a software-defined wide area network (SD-WAN). The method includes: receiving a correspondence between a device identifier of a first device and a first location; sending, to the first device, a verification request related to verifying whether the first device is located at the first location; receiving a verification response to the verification request; and determining, based on the verification response, whether to send configuration information corresponding to the first location to the first device. The methods in the embodiments of this application may be implemented by a software-defined network (SDN) controller.

Abstract: A first network device obtains a first route, where a first route prefix of the first route includes an identifier of a route advertiser. The first network device generates a first route entry based on the first route. The first network device obtains a second route, where the second route includes a second route prefix and the identifier of the route advertiser. The first network device generates a second route entry based on the identifier of the route advertiser and the second route prefix, to associate the first route entry with the second route entry.

Abstract: A first network device obtains first information. The first information indicates that a first link is faulty, and the first link is a link between any two network devices in a network system to which the first network device belongs. The first network device sends the first information to a second network device by using BGP, for example, sends a link fault message to the second network device by using BGP. The link fault message carries the first information. The second network device is a neighbor device of the first network device. The first network device determines an unreachable route in a routing table of the first network device based on the first information and a topology of the network system. A path corresponding to the unreachable route includes the first link. The first network device marks the unreachable route as invalid.

Abstract: Embodiments of this application disclose a configuration method that may be applied to a software-defined wide area network (SD-WAN). The method includes: receiving a correspondence between a device identifier of a first device and a first location; sending, to the first device, a verification request related to verifying whether the first device is located at the first location; receiving a verification response to the verification request; and determining, based on the verification response, whether to send configuration information corresponding to the first location to the first device. The methods in the embodiments of this application may be implemented by a software-defined network (SDN) controller.

Abstract: This application provides a packet processing method and a network device. A third network device is multi-homed to a first network device and a second network device, the first network device is configured with a first physical MAC address and a virtual MAC address, the second network device is configured with a second physical MAC address and the virtual MAC address, and the virtual MAC address is used to forward a user data packet to a network side. The method includes: a first network device receives a protocol packet from a third network device, where the protocol packet includes the second physical MAC address; and the first network device forwards the protocol packet to the second network device based on the second physical MAC address. Thus, the protocol packet can be normally forwarded without special configuration on a server, so that a cumbersome configuration process is avoided.

Abstract: A data packet forwarding method and an apparatus, where the method includes: receiving, by a forwarding device, a first default flow entry of the virtual network from a controller, where the first default flow entry of the virtual network instructs the forwarding device to send a data packet to a specified forwarding device when the forwarding device looks up a first flow table based on a match item of the data packet but no flow entry is hit; receiving, a first data packet from an end system; and when the controller is faulty and the forwarding device looks up the first flow table based on a match item of the first data packet but no flow entry is hit, sending, by the forwarding device, the first data packet to the specified forwarding device using the first default flow entry of the virtual network.

Abstract: A troubleshooting method and apparatus for an edge routing bridge (RB) in a Transparent Interconnection of Lots of Links (TRILL) campus, which belong to the field of communications technologies, where the method includes detecting, by a first edge RB in a multi-homing access group, whether an access link of the first edge RB is faulty, and sending, by the first edge RB, a fault notification message to one or more other edge RBs except the first edge RB in the multi-homing access group using the TRILL campus, when the access link of the first edge RB is faulty, where the fault notification message is used to notify the one or more other edge RBs that the access link of the first edge RB is faulty, and hence effectively increase a network convergence speed and network reliability.

Abstract: The present disclosure provide a packet processing method, a related apparatus, and an NVO3 network system. A first NVE receives a first packet sent by a first CE, where the first packet includes a MAC address of the first CE and a VLAN ID; the first NVE determines a VNI of the first CE according to an inbound interface of the first packet and the VLAN ID; the first NVE performs NVO3 encapsulation on the first packet to obtain an NVO3 encapsulated first packet, where the NVO3 encapsulated first packet includes the VNI of the first CE, and a source IP address in an NVO3 header of the NVO3 encapsulated first packet is a first shared VTEP IP address shared by the first NVE and a second NVE; and the first NVE forwards the NVO3 encapsulated first packet to a remote NVE.

Abstract: An apparatus configured to provide active-active access to a transparent interconnection of lots of links (TRILL) campus. The apparatus includes a first access port associated with a first customer equipment (CE) and a second access port associated with a second CE. The first access port is configured to receive a frame from the first CE. The apparatus includes a processor configured to replicate the frame to generate a replicated frame, determine that a pseudo-nickname associated with the first access port and the pseudo-nickname associated with the second access port are the same, and determine that the first access port and the second access port are associated with different multi-chassis link aggregations (MC-LAGs). The apparatus also includes a transmitter configured to forward the replicated frame to the second CE using the second access port.

Abstract: A method of implementing a service chain in a service chain-enabled domain network includes: receiving, by an intermediate service node (SN), an extended first Border Gateway Protocol (BGP) packet from a downstream SN that is on a service chain path and immediately adjacent to the intermediate SN, the extended first BGP packet including a service chain path identifier identifying the service chain path and a first service chain path including a service chain path from an ingress SN to the intermediate SN, determining an upstream SN that is on the first service chain path and immediately adjacent to the intermediate SN, and sending an extended second BGP packet to the upstream SN, the extended second BGP packet including the service chain path identifier and a second service chain path including a service chain path from the ingress SN to the upstream SN.

Abstract: A data packet forwarding method and an apparatus, where the method includes: receiving, by a forwarding device, a first default flow entry of the virtual network from a controller, where the first default flow entry of the virtual network instructs the forwarding device to send a data packet to a specified forwarding device when the forwarding device looks up a first flow table based on a match item of the data packet but no flow entry is hit; receiving, a first data packet from an end system; and when the controller is faulty and the forwarding device looks up the first flow table based on a match item of the first data packet but no flow entry is hit, sending, by the forwarding device, the first data packet to the specified forwarding device using the first default flow entry of the virtual network.

Abstract: This application discloses a method for implementing communication between an NVO3 network, to implement inter-AS communication between an NVO3 network and an MPLS VPN network. The method includes: obtaining an identifier of a PE device in the MPLS network and an MPLS label allocated by an ASBR in the MPLS network; allocating an IP address for the MPLS label from a local address pool; sending routing information to an NVE, where the routing information includes an identifier of the PE device and the allocated IP address, and the allocated IP address is used as an outer destination address of an NVO3 encapsulated packet sent by a TES in the NVO3 network to a CE device connected to the PE device in the MPLS network.

Abstract: The present application provides a method and a device for clearing a MAC forwarding entry. The method includes: detecting, by a first RB, that a topology of a network accessed by a local terminal changes; and sending, by the first RB, a first packet to a second RB, so that the second RB clears a corresponding forwarding entry after receiving the first packet, where the second RB refers to an RB configured with at least one VLAN the same as that of the first RB.

Abstract: A communications method and apparatus for a Virtual Extensible Local Area Network (VXLAN), where the method includes receiving, by a first layer-3 gateway device, host routing information from a second layer-3 gateway device, where the host routing information includes an Internet Protocol (IP) address of a first host, a media access control (MAC) address of the first host, and a VXLAN tunnel end point (VTEP) identifier of a next hop of the first layer-3 gateway device and that exists when the first layer-3 gateway device sends information to the first host, and forwarding, by the first layer-3 gateway device, a traffic packet destined for the first host or acting, by the first layer-3 gateway device, as an Address Resolution Protocol (ARP) proxy for the first host, based on the host routing information. Hence, traffic waste can be reduced.

Abstract: An apparatus configured to provide active-active access to a transparent interconnection of lots of links (TRILL) campus. The apparatus includes a first access port associated with a first customer equipment (CE) and a second access port associated with a second CE. The first access port is configured to receive a frame from the first CE. The apparatus includes a processor configured to replicate the frame to generate a replicated frame, determine that a pseudo-nickname associated with the first access port and the pseudo-nickname associated with the second access port are the same, and determine that the first access port and the second access port are associated with different multi-chassis link aggregations (MC-LAGs). The apparatus also includes a transmitter configured to forward the replicated frame to the second CE using the second access port.

Abstract: A method and an apparatus for forwarding a packet, where a first network virtualization edge (NVE) receives a first packet sent by a first tenant end system (TES), where a destination Internet Protocol (IP) address of the first packet is an IP address of a second TES, a destination media access control (MAC) address of the first packet is a gateway MAC address corresponding to the first NVE. The first NVE acquires an access virtual network identifier (VN ID) and a layer 3 virtual private network (VPN) instance identifier of the first TES, and searches a routing and forwarding table, to obtain an entry corresponding to the IP address of the second TES. Then the first NVE encapsulates the first packet into a network virtualization overlays (NVO3) packet according to the entry, and forwards the NVO3 packet to a second NVE to forward to the second TES.

Abstract: The present disclosure provide a packet processing method, a related apparatus, and an NVO3 network system. A first NVE receives a first packet sent by a first CE, where the first packet includes a MAC address of the first CE and a VLAN ID; the first NVE determines a VNI of the first CE according to an inbound interface of the first packet and the VLAN ID; the first NVE performs NVO3 encapsulation on the first packet to obtain an NVO3 encapsulated first packet, where the NVO3 encapsulated first packet includes the VNI of the first CE, and a source IP address in an NVO3 header of the NVO3 encapsulated first packet is a first shared VTEP IP address shared by the first NVE and a second NVE; and the first NVE forwards the NVO3 encapsulated first packet to a remote NVE.

Abstract: A routing bridge at an edge of a transparent interconnection of lots of links (TRILL) campus, comprises a first access port and a second access port each designated as one of a multi-chassis link aggregation (MC-LAG) designated forward (DF) port and an MC-LAG non-DF port, wherein the first access port is associated with a first pseudo-nickname, and a second access port is associated with a second pseudo-nickname, wherein a frame received via the first access port from a first customer equipment (CE) is replicated to generate a replicated frame, wherein the replicated frame is forwarded via the second access port to a second CE when the first pseudo-nickname and the second pseudo-nickname are the same, and when the first pseudo-nickname and the second pseudo-nickname are different and the second access port has been designated as the MC-LAG DF port.

Abstract: A first network element (NE) implemented as a network virtualization edge (NVE) includes a receiver configured to receive a packet comprising a destination address, a processor coupled to the receiver and configured to obtain a tunnel identifier of an overlay tunnel that communicatively couples a second NE to a third NE on an overlay path toward the destination address, add the tunnel identifier to an encapsulation header of the packet, and add an address of the second NE to an outer header of the packet, and a transmitter coupled to the processor and configured to transmit the packet to the second NE, wherein the packet is forwarded from the second NE to the third NE via the overlay tunnel identified by the tunnel identifier.

Abstract: Embodiments include a load balancing method used to implement load balancing in a network. The method is performed by a first PE device, includes: obtaining a first device identifier of the first PE device, and obtaining a target ESI that is of a target NVE device and is corresponding to the first device identifier and a VN ID that is of a target VN accessed by the target NVE device and is corresponding to the first device identifier; receiving a message from a second PE device, where the message carries a second device identifier of the second PE device, and the target ESI and the VN ID of the target VN that are corresponding to the second device identifier; and determining whether the first PE device is a DF of the target NVE device in the target VN.