Method, network management center, and a related device for configuring a network policy for a virtual port

Abstract

A method, a network management center, and a related device. The method includes: obtaining a virtual network policy group, a physical network policy group, and a media access control (MAC) address of a virtual port; associating the virtual network policy group, the physical network policy group, and the MAC address of the virtual port to form a virtual port policy association table; and selecting a physical network policy group corresponding to the MAC address from the virtual port policy association table, and delivering the physical network policy group to a physical switch. When a virtual machine (VM) on the server is migrated, the method may be used to migrate the network policy for the virtual port on a real-time basis. Therefore, the real-time effect of services provided by the VM is improved in the virtualization process of the server.

What is claimed is: 
     
         1 . A method for configuring a network policy for a virtual port, comprising:
 obtaining a virtual network policy group, a physical network policy group, and a media access control (MAC) address of a virtual port, wherein the virtual network policy group is used by a virtual switch to configure the network policy for the virtual port after being delivered to the virtual switch;   associating the virtual network policy group, the physical network policy group, and the MAC address of the virtual port to form a virtual port policy association table; and   selecting a physical network policy group corresponding to a MAC address from the virtual port policy association table, and delivering the physical network policy group to a physical switch, so that the physical switch configures the network policy for the virtual port corresponding to the MAC address.   
     
     
         2 . The method of  claim 1 , wherein:
 the step of obtaining the physical network policy group comprises: creating the physical network policy group in a local database; and   the step of obtaining the virtual network policy group and the MAC address of the virtual port comprises: obtaining the virtual network policy group and the MAC address of the virtual port by receiving the MAC address of the virtual port and a mapping between the MAC address of the virtual port and the virtual network policy group, wherein the MAC address and the mapping are synchronized from a server management center.   
     
     
         3 . The method of  claim 1 , wherein:
 the step of selecting the physical network policy group corresponding to the MAC address from the virtual port policy association table and delivering the physical network policy group to the physical switch comprises:   receiving a request that carries the MAC address from the physical switch; and   searching the virtual port policy association table by using the MAC address as an index, and delivering the found physical network policy group corresponding to the MAC address to the physical switch.   
     
     
         4 . The method of  claim 1 , wherein:
 the step of obtaining the virtual network policy group and the physical network policy group comprises: creating a network policy group composed of the virtual network policy group and the physical network policy group in a local database; and   the step of obtaining the MAC address of the virtual port comprises: obtaining the MAC address of the virtual port by receiving the MAC address of the virtual port sent by a server management center.   
     
     
         5 . The method of  claim 4 , wherein when the selecting the physical network policy group corresponding to a MAC address from the virtual port policy association table and delivering the physical network policy group to the physical switch, the method further comprises:
 selecting a virtual network policy group corresponding to the MAC address from the virtual port policy association table, and delivering the virtual network policy group to the physical switch.   
     
     
         6 . The method of  claim 5 , wherein:
 the step of selecting the physical network policy group corresponding to the MAC address from the virtual port policy association table and delivering the physical network policy group to the physical switch comprises:   receiving a request that carries the MAC address from the physical switch; and   searching the virtual port policy association table by using the MAC address as an index, and delivering the found physical network policy group corresponding to the MAC address to the physical switch;   the step of selecting the virtual network policy group corresponding to the MAC address from the virtual port policy association table and delivering the virtual network policy group to the physical switch comprises:   receiving a request that carries the MAC address from the physical switch; and   searching the virtual port policy association table by using the MAC address as an index, and delivering a found virtual network policy group corresponding to the MAC address to the physical switch; or   the step of selecting the virtual network policy group and the physical network policy group corresponding to the MAC address from the virtual port policy association table and delivering the virtual network policy group and the physical network policy group to the physical switch comprises:   receiving a request that carries the MAC address from the physical switch; and   searching the virtual port policy association table by using the MAC address as an index, and delivering a found network policy group corresponding to the MAC address to the physical switch.   
     
     
         7 . The method of  claim 4 , wherein when or after the receiving the MAC address of the virtual port sent by the server management center, the method further comprises:
 receiving a network policy group number corresponding to the MAC address sent by the server management center.   
     
     
         8 . A method for configuring a network policy for a virtual port, comprising:
 obtaining a media access control (MAC) address of a virtual port;   sending a request that carries the MAC address, wherein the request is used to request delivering a physical network policy group that is used for configuring the network policy for the virtual port corresponding to the MAC address; and   receiving the delivered physical network policy group, and configuring the network policy for the virtual port corresponding to the MAC address.   
     
     
         9 . The method of  claim 8 , wherein the step of obtaining the MAC address of the virtual port comprises:
 learning the MAC address of the virtual port by receiving packets from a server.   
     
     
         10 . The method of  claim 8 , wherein:
 the request is further used to request delivering a virtual network policy group that is used for configuring the network policy for the virtual port corresponding to the MAC address; and   when or after receiving the delivered physical network policy group and configuring the network policy for the virtual port corresponding to the MAC address, the method further comprises:   receiving the virtual network policy group, and configuring the network policy for the virtual port corresponding to the MAC address.   
     
     
         11 . A network management center, comprising:
 an obtaining module, configured to obtain a virtual network policy group, a physical network policy group, and a media access control (MAC) address of a virtual port, wherein the virtual network policy group is used by a virtual switch to configure the network policy for the virtual port after being delivered to the virtual switch;   an associating module, configured to associate the virtual network policy group, the physical network policy group, and the MAC address of the virtual port of a virtual machine (VM) to form a virtual port policy association table; and   a policy delivering module, configured to select a physical network policy group corresponding to a MAC address from the virtual port policy association table, and deliver the physical network policy group to a physical switch, so that the physical switch configures the network policy for the virtual port corresponding to the MAC address.   
     
     
         12 . The network management center of  claim 11 , wherein the obtaining module comprises a first creating unit and a first receiving unit, wherein:
 the first creating unit is configured to create the physical network policy group in a local database; and   the first receiving unit is configured to obtain the virtual network policy group and the MAC address of the virtual port by receiving the MAC address of the virtual port and a mapping between the MAC address of the virtual port and the virtual network policy group, wherein the MAC address and the mapping are synchronized from a server management center.   
     
     
         13 . The network management center of  claim 11 , wherein the obtaining module comprises a second creating unit and a second receiving unit, wherein:
 the second creating unit is configured to create a network policy group composed of the virtual network policy group and the physical network policy group in a local database; and   the second receiving unit is configured to obtain the MAC address of the virtual port by receiving the MAC address of the virtual port from a server management center.   
     
     
         14 . The network management center of  claim 13 , wherein:
 the second receiving unit is further configured to receive a network policy group number corresponding to the MAC address of the virtual port from the server management center; or   the obtaining module further comprises a third receiving unit configured to receive the network policy group number corresponding to the MAC address from the server management center.   
     
     
         15 . A physical switch, comprising:
 an obtaining module, configured to obtain a media access control (MAC) address of a virtual port;   a request sending module, configured to send a request that carries the MAC address, wherein the request is used to request delivering a physical network policy group that is used for configuring a network policy for the virtual port corresponding to the MAC address; and   a policy receiving module, configured to receive the delivered physical network policy group, and configure the network policy for the virtual port corresponding to the MAC address.   
     
     
         16 . The physical switch of  claim 15 , wherein:
 the obtaining module comprises a learning unit configured to learn the MAC address of the virtual port by receiving packets from a server;   the request is further used to request delivering a virtual network policy group that is used for configuring the network policy for the virtual port corresponding to the MAC address; and   the policy receiving module is further configured to receive the delivered virtual network policy group, and configure the network policy for the virtual port corresponding to the MAC address.