Layer-3 switching system and method based on layer-2 DHCP (Dynamic Host Configuration Protocol) SNOOPING

Abstract

The invention discloses a layer-3 switching system and method based on layer-2 DHCP (Dynamic Host Configuration Protocol) SNOOPING. The system comprises a DHCP user terminal, a layer-2 switching device, a layer-3 switching device and a DHCP server. The system is characterized in that the layer-2 switching device comprises an enabling module for enabling the DHCP SNOOPING configured for the layer-2 switching device so as to monitor a DHCP requesting process of the user terminal, creating DHCP binding information and storing the created information; the layer-2 switching device processes and uploads the binding information to the layer-3 switching device, and the layer-3 switching device issues a layer-3 engine processing routing table entry according to the DHCP binding information and forwards a network message processed by a layer-3 engine to a target user terminal according to the address of the target user terminal. According to the technical scheme of the invention, approaches to learning for layer-3 table entries of a switch in DHCP environment are increased, and t he stability and safety of the table entries are effectively ensured.

Description

technical field [0001] The present invention relates to the field of computer data communication, in particular to a three-layer switching system and method based on two-layer DHCP SNOOPING Background technique [0002] With the continuous improvement of switching technology in data communication, devices with layer-3 switching functions have been widely used. Layer-3 switching devices can forward IP packets across virtual LANs at wire speed, which is an advantage that layer-2 switching devices do not have. [0003] The invention patent with the prior art publication number CN 101594358 A discloses a "three-layer switching method, device, system and host machine", the method includes: receiving the network message sent by the source virtual machine; Exchanging information to perform three-layer switching processing on the network message, generating a network message after three-layer switching processing, a virtual link where the destination virtual machine is located, and ...

AI Technical Summary

Problems solved by technology

Due to the simplicity of the ARP protocol, it is extremely vulnerable to attacks and spoofing, and the host routing table entries generated by ARP also become unstable, which will cause abnormal forwarding of network traffic and bring great inconvenience to users.

Images