Method and system for VLAN aggregation
A method and system for an aggregated virtual local area network (VLAN) architecture in which several VLANs in a network share the same default router address and subnet mask, but remain isolated from one another's network traffic. Instead of the traditional method of assigning one subnet to a VLAN, each VLAN is assigned only a portion of a subnet's IP address space, and is further grouped into a super-VLAN uniquely associated with that subnet. Intra-VLAN traffic is forwarded only to host IP addresses assigned to that same VLAN according to a VLAN identifier carried in the data packet. Inter-VLAN traffic is processed by a virtual router interface which routes the data packet by applying the routing configuration for the subnet uniquely associated with the super-VLAN, according to a super-VLAN identifier carried in the data packet.
1. A method comprising:
sharing among multiple virtual local area networks (VLANs) a host network address space associated with a network segment,
wherein the multiple VLANs are sub-VLANs of an aggregating VLAN, the host address space shared among the sub-VLANs being associated with the aggregating VLAN, and
wherein the shared host network address space having a corresponding default network gateway address;
routing packets to a first VLAN of the multiple VLANs from outside the shared host network address space with layer-3 routing based on an address of the corresponding default network gateway address and a VLAN identifier associated with the first VLAN;
routing packets originating inside the shared host network address space to a second VLAN of the multiple VLANs sharing the host network address space with layer-2 forwarding based on a VLAN identifier associated with the second VLAN; and
segregating broadcast packets local to a third VLAN based on a broadcast address shared among all the VLANs sharing the host network address space and a VLAN identifier associated with the third VLAN, to broadcast the packets only within the third VLAN, and not to another VLAN sharing the host network address space.
2. The method of claim 1 , wherein sharing the host address space associated with the network segment comprises maintaining a virtual aggregation of VLANs, the aggregation being associated with the network segment.
3. The method of claim 1 , wherein sharing the host address space among multiple VLANs further comprises managing the VLANs with a network communication protocol that supports dividing the host address space among hosts in the network segment.
4. The method of claim 3 , further comprising the VLANs sharing a common broadcast address for one or more network segments.
5. The method of claim 3 , further comprising the VLANs sharing a common network segment mask.
6. The method of claim 3 , wherein any of the first, second, and third VLANs may be the same VLAN.
7. An article of manufacture comprising a tangible machine-readable medium having instructions to cause a machine to perform operations comprising:
sharing among multiple virtual local area networks (VLANs) a host network address space associated with a network segment,
wherein the multiple VLANs are sub-VLANs of an aggregating VLAN, the host address space shared among the sub-VLANs being associated with the aggregating VLAN, and
wherein the shared host network address space having a corresponding default network gateway address;
routing packets to a first VLAN of the multiple VLANs from outside the shared host network address space with layer-3 routing based on an address of the corresponding default network gateway address and a VLAN identifier associated with the first VLAN;
routing packets originating inside the shared host network address space to a second VLAN of the multiple VLANs sharing the host network address space with layer-2 forwarding based on a VLAN identifier associated with the second VLAN; and
segregating broadcast packets local to a third VLAN based on a broadcast address shared among all the VLANs sharing the host network address space and a VLAN identifier associated with the third VLAN, to broadcast the packets only within the third VLAN, and not to another VLAN sharing the host network address space.
8. The article of manufacture of claim 7 , wherein the instructions to cause the machine to perform operations comprising sharing the host address space associated with the network segment comprises the instructions to cause the machine to perform operations comprising maintaining a virtual aggregation of VLANs, the aggregation being associated with the network segment.
9. The article of manufacture of claim 7 , wherein the instructions to cause the machine to perform operations comprising sharing the host address space among multiple VLANs further comprises the instructions to cause the machine to perform operations comprising managing the VLANs with a network communication protocol that supports dividing the host address space among hosts in the network segment.
10. The article of manufacture of claim 9 , further comprising the instructions to cause the machine to perform operations comprising sharing among the VLANs a common broadcast address for one or more network segments.
11. The article of manufacture of claim 9 , further comprising the instructions to cause the machine to perform operations comprising sharing among the VLANs a common network segment mask.
12. The article of manufacture of claim 9 , wherein any of the first, second, and third VLANs may be the same VLAN.
13. A method comprising:
sharing among multiple virtual local area networks (VLANs) a host network address space associated with a network segment, where the network segment is an aggregating VLAN that hierarchically virtually aggregates the multiple VLANs under the aggregating VLAN under the shared host address space, the multiple VLANs being sub-VLANs of the aggregating VLAN, the shared host network address space being uniquely associated with the aggregating VLAN and having a corresponding default network gateway address;
routing packets to a first VLAN of the multiple VLANs from outside the shared host network address space with layer-3 routing based on an address of the corresponding default network gateway address and a VLAN identifier associated with the first VLAN;
routing packets originating inside the shared host network address space to a second VLAN of the multiple VLANs sharing the host network address space with layer-2 forwarding based on a VLAN identifier associated with the second VLAN; and
segregating broadcast packets local to a third VLAN based on a broadcast address shared among all the VLANs sharing the host network address space and a VLAN identifier associated with the third VLAN, to broadcast the packets only within the third VLAN, and not to another VLAN sharing the host network address space.
14. The method of claim 13 , wherein sharing the host address space among multiple VLANs further comprises managing the VLANs with a network communication protocol that supports dividing the host address space among hosts in a network segment.
15. The method of claim 14 , further comprising the VLANs sharing a common broadcast address for one or more network segments.
16. The method of claim 14 , further comprising the VLANs sharing a common network segment mask.
17. The method of claim 14 , wherein any of the first, second, and third VLANs may be the same VLAN.
18. An article of manufacture comprising a tangible machine-readable medium having instructions to cause a machine to perform operations comprising:
sharing among multiple virtual local area networks (VLANs) a host network address space associated with a network segment, where the network segment is an aggregating VLAN that hierarchically virtually aggregates the multiple VLANs under the aggregating VLAN under the shared host network address space, the multiple VLANs being sub-VLANs of the aggregating VLAN, the shared host address space being uniquely associated with the aggregating VLAN and having a corresponding default network gateway address;
routing packets to a first VLAN of the multiple VLANs from outside the shared host network address space with layer-3 routing based on an address of the corresponding default network gateway address and a VLAN identifier associated with the first VLAN;
routing packets originating inside the shared host network address space to a second VLAN of the multiple VLANs sharing the host network address space with layer-2 forwarding based on a VLAN identifier associated with the second VLAN; and
segregating broadcast packets local to a third VLAN based on a broadcast address shared among all the VLANs sharing the host network address space and a VLAN identifier associated with the third VLAN, to broadcast the packets only within the third VLAN, and not to another VLAN sharing the host network address space.
19. The article of manufacture of claim 18 , wherein the instructions to cause the machine to perform operations comprising sharing the host address space among multiple VLANs further comprises the instructions to cause the machine to perform operations comprising managing the VLANs with a network communication protocol that supports dividing the host address space among hosts in the network segment.
20. The article of manufacture of claim 19 , further comprising the instructions to cause the machine to perform operations comprising sharing among the VLANs a common broadcast address for one or more network segments.
21. The article of manufacture of claim 19 , further comprising the instructions to cause the machine to perform operations comprising sharing among the VLANs a common network segment mask.
22. The article of manufacture of claim 19 , wherein any of the first, second, and third VLANs may be the same VLAN.