Processing method and exchange equipment for address detected message

A technology of address detection and switching equipment, applied in the field of network communication, can solve the problem of high complexity of use, and achieve the effect of preventing security attacks

Active Publication Date: 2009-10-07
NEW H3C TECH CO LTD
View PDF0 Cites 8 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

This requires the relevant configuration of encryption and decryption for each network node during networking, which is more complicated to use

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Processing method and exchange equipment for address detected message
  • Processing method and exchange equipment for address detected message
  • Processing method and exchange equipment for address detected message

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0024] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0025] The method provided by the present invention may mainly include: after the switching device receives the ND address detection message sent by the host, it does not forward the ND address detection message to other hosts; obtains the source MAC address and incoming port of the ND address detection message; information and the requested IP address; determine whether the switching device has stored a security entry containing the IP address, and if so, reply a message indicating that the IP address has been used to the port used to receive the ND address detection message ; Otherwise, store the obtained source MAC address, inbound port information and requested IP address as a security entry for forwarding other messages except the ND address d...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention provides a processing method and exchange equipment for address detected message, wherein, the method includes: when an exchange equipment receives neighbor discovery (ND) address detected message, the exchange equipment does not transmit the ND address detected message to the host computer; getting source media access control (MAC) address, ingress port information and the requested IP address of the ND detected message; judging whether the exchange equipment has stored security entry of the IP address, if yes then reply to the interface used for receiving the ND detected address message that the IP address has been used; otherwise, storing the obtained source MAC address, the ingress port message and the requested IP address as security entry. The invention can prevent security attack caused by counterfeiting message with has been used directing IP address more easily.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a processing method and switching equipment for address detection messages. Background technique [0002] IPv6 is the next-generation network protocol of IPv4, which solves the problem of lack of IPv4 addresses. Compared with IPv4, it has a fixed-length concise header and built-in security, and provides better quality of service (QoS) support and mobility support. . Neighbor Discovery (ND) protocol, as the basic protocol of IPv6, provides functions such as address resolution, router discovery, neighbor unreachability detection, and duplicate address detection. [0003] However, ND protocol packets are easily forged by attackers and used for network attacks. Such as figure 1 In the shown network architecture, the switch can receive the ND protocol packets sent by all hosts directly connected to it. When the host needs to use an IP address, it carries the IP addres...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/36H04L12/56H04L29/06
Inventor 周立萍王珍异
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap