Multi-layer network diagnostic tracing
View Patent ↗A network management and monitoring application employs diagnostic messages for confirming network path connectivity and identifying and locating connectivity faults. Diagnostic messages similar to conventional “ping” and “traceroute” messages traverse the network along a prescribed path for which diagnostic feedback is desired. The application receives and analyzes return messages sent from network entities along the path to ascertain connectivity issues on the path. The application receives layer 3 identifiers such as IP addresses, however performs diagnostic operations such as continuity checks based on layer 2 identifiers such as MAC (Media Access Control) identifiers because certain network entities operate on L2 identifiers and would otherwise evade a continuity check based on layer 3 identifiers. The monitoring application therefore performs continuity diagnostics such as ping and traceroute operations using L2 identifiers, therefore pinpointing problems with an L2 network forwarding entity such as a bridge that lies between L3 entities such as routers.
1. In a network switching environment having a switch fabric of forwarding entities, the forwarding entities including routers having an assigned network identifiers and bridges having static device identifiers, a method for transmitting diagnostic messages comprising:
receiving a Layer 3 (L3) network identifier corresponding to a destination entity to which a diagnostic path evaluation is requested, the network identifier identifying a network entity reachable by the path;
determining a Layer 2 (L2) device identifier corresponding to a forwarding entity defining a next hop on the path, wherein determining the next hop device identifier comprises:
performing a lookup of network identifiers indicating successive forwarding entities on the path; and
computing a device identifier corresponding to the network identifier, wherein each device having an L3 identifier is given a respective L2 identifier such that all L2 devices and L3 devices have a device identifier;
transmitting only a single diagnostic message addressed to the determined device identifier for receiving a return message indicative of continuity of the path to the forwarding entity; and
determining, based on received return messages, whether continuity exists on the path to the network entity.
2. The method of claim 1 further comprising, if the received return messages indicate a loss of continuity on the path, determining, from the last return message received, the network location of the loss of continuity.
3. The method of claim 2 further comprising, determining, from the received return messages, the device identifier corresponding to the last forwarding entity on the path to which continuity was achieved.
4. The method of claim 1 wherein determining the next hop device identifier further comprises:
performing a lookup based on an IP address;
determining that the next hop forwarding entity is referenced only by a device identifier; and
receiving the device identifier as the next hop on the path.
5. The method of claim 4 further comprising determining if a next hop on the path to the destination entity is:
a bridge having layer 2 forwarding capability based on a device identifier; or
a router having layer 3 forwarding capability based on a network identifier.
6. The method of claim 5 wherein the device identifier of the forwarding entity defining the next hop is a MAC address and determining the device identifier includes a layer 2 lookup in an ARP database.
7. The method of claim 1 wherein multiple available paths to the destination entity exist, and determining the next hop includes identifying the next hop on each of the available paths for identifying any available path continuity.
8. The method of claim 1 wherein determining the device identifier further comprises:
performing a layer 3 (L3) lookup; and
determining, from the layer 3 lookup, the layer 2 (L2) entity corresponding to the L3 forwarding entity returned from the lookup.
9. The method of claim 8 further comprising performing an Address Resolution Protocol (ARP) lookup to identify a L2 identifier associated with an L3 route, the ARP lookup accessing a mapping of IP addresses to Ethernet device identifiers.
10. The method of claim 1 wherein said determining the device identifier includes using an arbitrary mapping of an L3 identifier to a corresponding L2 identifier.
11. A network management server for performing diagnostic monitoring comprising:
a processor responsive to instructions for sending and receiving messages;
an interface to a network of interconnected forwarding entities including routers having an assigned Layer 3 (L3) network identifiers and bridges having static Layer 2 (L2) device identifiers;
a management console for receiving a network identifier corresponding to a destination entity to which a diagnostic path evaluation is requested, the network identifier identifying a network entity reachable by the path; and
a monitoring application for determining a device identifier corresponding to a forwarding entity defining a next hop on the path, wherein determining the next hop device identifier comprises:
performing a lookup of network identifiers indicating successive forwarding entities on the path; and
computing a device identifier corresponding to the network identifier, wherein each device having an L3 identifier is given a respective L2 identifier such that all L2 devices and L3 devices have a device identifier;
the management application configured to transmit only a single diagnostic message addressed to the determined device identifier for receiving a return message indicative of continuity of the path to the forwarding entity, and determine, based on received return messages, whether continuity exists on the path to the network entity.
12. The server of claim 11 wherein the management application is configured to:
determine if the received return messages indicate a loss of continuity on the path; and
determine, from the last return message received, the network location of the loss of continuity.
13. The server of claim 12 wherein the management application is further configured to determine, from the received return messages, the device identifier corresponding to the last forwarding entity on the path to which continuity was achieved.
14. The server of claim 11 wherein determining the next hop device identifier further comprises:
performing a lookup based on an IP address;
determining that the next hop forwarding entity is referenced only by a device identifier;
receiving the device identifier as the next hop on the path; and
determining if a next hop on the path to the destination entity is:
a bridge having layer 2 forwarding capability based on a device identifier; or
a router having layer 3 forwarding capability based on a network identifier.
15. The server of claim 14 wherein the device identifier of the forwarding entity defining the next hop is a MAC address and determining the device identifier includes a layer 2 lookup in an ARP database.
16. The server of claim 14 wherein multiple available paths to the destination entity exist, and determining the next hop includes identifying the next hop on each of the available paths for identifying any available path continuity.
17. The server of claim 14 wherein determining the device identifier further comprises:
performing a layer 3 (L3) lookup; and
determining, from the layer 3 lookup, the layer 2 (L2) entity corresponding to the L3 forwarding entity returned from the lookup.
18. The server of claim 17 wherein the management application is configured to perform an Address Resolution Protocol (ARP) lookup to identify a L2 identifier associated with an L3 route, the ARP lookup accessing a mapping of IP addresses to Ethernet device identifiers.
19. The network management server of claim 11 wherein said determining the device identifier includes using an arbitrary mapping of an L3 identifier to a corresponding L2 identifier.
20. A computer program product having a non-transitory computer readable storage medium having instructions encoded thereon that, when executed by a processor, perform a method for transmitting diagnostic messages comprising:
establishing an interface to a network switching environment having a switch fabric of forwarding entities, the forwarding entities including routers having an assigned Layer 3 (L3) network identifiers and bridges having static Layer 2 (L2) device identifiers;
receiving a network identifier corresponding to a destination entity to which a diagnostic path evaluation is requested, the network identifier identifying a network entity reachable by the path;
determining a device identifier corresponding to a forwarding entity defining a next hop on the path, wherein determining the next hop device identifier comprises:
performing a lookup of network identifiers indicating successive forwarding entities on the path; and
computing a device identifier corresponding to the network identifier, wherein each device having an L3 identifier is given a respective L2 identifier such that all L2 devices and L3 devices have a device identifier;
transmitting only a single diagnostic message addressed to the determined device identifier for receiving a return message indicative of continuity of the path to the forwarding entity; and
determining, based on received return messages, whether continuity exists on the path to the network entity.