Forwarding engine state detecting method and routing device

Abstract

This invention provides a safety access method for special LAN and a device used in said method, which applies a mixed mode combining the transmission mode and tunnel mode to realize devices in a device safety access special LAN in exterior networks, namely, it utilizes the feature of the tunnel mode to solve the communication safety problem and network addressing by the feature of the trasnsmission mode to ensure users of outside networks to access the special LAN safely and make the safety communication tunnel to be transparent to users (host), and some hosts simple in hardware and software can access special LAN by this method and device.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a method for secure access to a dedicated local area network and a device used for the method. Background technique [0002] In the future IPv6 environment, with the great abundance of IP address resources and the intelligence and networking of various electronic devices, each device in the private LAN can have an independent IP address, through the IP address of these devices or Its corresponding domain name can be addressed to the corresponding device from the external network. This makes it technically possible to remotely access and control devices in a private LAN through the Internet; and with the development of applications and services, remote access and control of devices in a private LAN will gradually become an urgent need for users. [0003] However, due to the privacy and sensitivity of the devices in the private local area network, device owners do no...

AI Technical Summary

Problems solved by technology

In order to access different private LANs through the existing VPN, users need to memorize a large number of tunnel server addresses, which increases the burden and difficulty for users to use VPN

[0009] Secondly, the tunnel server of the existing VPN needs a lot of complicated configuration work, and along with the change of VPN logic structure (increase or delete VPN logic node), need to revise all configuration data on the tunnel server accordingly, this makes VPN's poor scalability

[0010] Third, existing VPNs cannot support lightweight user devices

In some cases, the device used by the user to access the private LAN may be very simple in both hardware and software. If the VPN support software is not installed or cannot be installed, the desired private LAN cannot be accessed through the VPN.

[0011] Fourth, because the existing VPN solution mainly adopts the tunnel mode, it cannot solve the problem of network addressing. When the user accesses the local area network of the VPN, he needs to know and provide the address of the network access server (NAS: Network Access Server), that is, the tunnel server. The secure communication tunnel is opaque to the user

However, since the establishment and maintenance of secure communication tunnels, as well as the encryption and decryption of data packets, are both responsible for the communication between the source host and the destination host, in this scheme, although there is no network addressing problem, the The source host and destination host for communication have high requirements, and a large number of secure communication tunnel support software needs to be installed, and the configuration and management work is also relatively complicated.

Images