Method for finding operating VRRP network equipment in directly connected network segment and device thereof

Abstract

The invention discloses a method for finding operating VRPP network equipment in a directly connected network segment, and is applicable to a router system comprising an access switch and at least one VRRP group. The method comprises the following steps: the access switch receives and intercepts a VRRP notification message sent by a router of each VRRP group, and confirms members of each VRRO router group and a connected port according to a port which receives the notification message and VRRP ID in the notification message so that the access switch transmits messages between members which belong to the same VRRP router group by the port. The method help avoid broadcasting the VRRP messages of the same group to other routers, or PC (host computer) which is connected to the switch does not join in the VRRP network equipment, thus reducing bandwidth waste.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for discovering network equipment running VRRP in a directly connected network segment. Background technique [0002] In the prior art, the host uses the gateway connected to the host as the default route of the next hop, and the communication method for the host to connect to the network through the gateway is as follows: figure 1 As shown, all hosts (Host A, Host B, and Host C) in the same network segment are respectively configured with the same default route with Gateway as the next hop. When a host sends a message to another network segment, it first The message is sent to the gateway through the default route, and then forwarded to the external network by the gateway, so as to realize the communication between the host and the external network. The default route provides convenience for the configuration operation of the user's host. When the use...

AI Technical Summary

Problems solved by technology

Therefore, it is more complicated to deploy MAC authentication or 802.1x authentication

[0010] In order to prevent unauthorized false MAC learning by attackers, the existing technology also proposes to configure the static MAC address of the gateway on the access switch, that is, a port is bound to a MAC address, which cannot be dynamically modified, and the attacker cannot modify the MAC addresses of other ports. The address changes the MAC address of the port

However, static configuration of the gateway MAC is only applicable to the case of a single uplink, that is, there is only one port. At this time, the port can be bound to the MAC to achieve normal forwarding; Uplink networking environment, including multiple ports, because in most switch chip implementations and software implementations, one MAC is not allowed to be bound to multiple ports, and static configuration of gateway MAC cannot be realized

Images