Method for implementing virtual MAC address in digital subscriber line access server equipment

Abstract

The invention provides a method that a DSLAM device implements virtual MAC addresses, including; when learning the basic functions and addresses of an exchanger, according to user configured VMAC mapping method, a DSLAM device generates a VMAC address corresponding to the user MAC address, and when configuring user data in a Radius or broadband connection sever, inputs user marked VMAC and binds it with user name. The invention completes a two-way MAC address conversion operation by hardware device in order to implement the only mark of the user, which ensures transmitting performance of the system.

Description

Technical field [0001] The invention belongs to the relevant field of broadband network access equipment system security and user management, and specifically relates to a method for realizing a virtual MAC address of a DSLAM equipment. Background technique [0002] With the large-scale construction of broadband infrastructure and the continuous expansion of broadband user groups, some system security issues have become increasingly prominent, such as account theft, IP address theft, etc., and telecom operators do not have sufficient means to solve security problems The main reason for positioning is that the current broadband construction network adopts the network mode of the two-layer structure, and multiple digital subscriber line access server (digital subscriber line multiplexer, DSLAM) equipment is connected to the broadband access server (BRAS) after being aggregated by the switch. , after the user's PPPOE authentication data packet arrives at the BRAS, it is difficu...

AI Technical Summary

Problems solved by technology

[0002] With the large-scale construction of broadband infrastructure and the continuous expansion of broadband user groups, some system security issues have become increasingly prominent, such as account theft, IP address theft, etc., and telecom operators do not have sufficient means to solve security problems The main reason for positioning is that the current broadband construction network adopts the network mode of the two-layer structure, and multiple digital subscriber line access server (digital subscriber line multiplexer, DSLAM) equipment is connected to the broadband access server (BRAS) after being aggregated by the switch. , after the user's PPPOE authentication data packet reaches the BRAS, it is difficult for the BRAS or the authentication server Radius to uniquely identify the authenticated user, so that it is impossible to distinguish between a correct user and a malicious user