Port based MAC address quantity statistical method and apparatus thereof

Abstract

The invention relates to a port-based MAC address number counting method, monitoring various conditions able to cause the change of the number of the MAC addresses, and regulating the number of the MAC addresses according to the types of these conditions. It largely speeds up the counting and enhances the Ethernet exchanger property and uses hardware circuit to realize so as to save large numbers of hardware resources, optimizing the design and reducing the cost. At the same time, it can not only accurately and real-timely count the MAC address number learned by network access device port, real-timely ensures the port safety but also ensure the counting for the MAC address number learned by corresponding port does not influence the other functions of the Ethernet network, i.e. it counts the learned MAC addresses and simultaneously does not influence the normal work of the Ethernet exchanger.

Description

Technical field [0001] The present invention relates to the technical field of network communication, in particular to a port-based MAC address quantity statistics method and device. Background technique [0002] In the application process of communication networks, in order to prevent some illegal users from unauthorized access to network resources, sending deceptive data to interfere with network functions, etc., it is necessary to provide corresponding network security technology, and in various security technical solutions , Physical security technologies such as network access device ports are particularly important. If the network access device does not apply corresponding physical security, all other security policies will not be able to play a corresponding role. Therefore, physical security is network access such as Ethernet switches. The focus of equipment safety. At present, Ethernet switches provide a variety of network security mechanisms, of which port-based address...

AI Technical Summary

Problems solved by technology

[0010] In this method, the port is locked by software configuration, so that the hardware does not learn the MAC address table. When the number of MAC addresses of the enabled port is limited, the statistics of the number of port MAC addresses requires software to traverse the hardware MAC address table, which takes a long time and Occupies a certain amount of network bandwidth resources

At the same time, using this method to complete the function of limiting the number of MAC addresses on the port requires multiple interactions between software and hardware, which affects the normal operation of the Ethernet switch.

In addition, this method, like the first method, does not implement dynamic real-time statistics of the number of MAC addresses learned by the port, that is, it cannot reflect the limit function of the number of MAC addresses learned by the port in real time

Images