Network address confilict user inter-access method and route repeating device

Abstract

The method includes steps: first region gateway and second region gateway release obtained IP address of users in own region to opposing party, and sends address resolution protocol (ARP) message in use for learning to users in own region; source IP address of ARP message in use for learning is IP address of users in region of opposing party, and address of source media access control (MAC) address is MAC address of gateway in own region; using obtained IP address of users in region of opposing party, and MAC address of gateway in own region, users in first region and users in second region are carried exchange accesses. Without need of modifying current network significantly, without need of complex configuration, and under condition that device possesses function of network address transform (NAT), the invention realizes exchange accesses of users with superimposed network segmented address in different regions.

Description

technical field [0001] The invention relates to routing technology, in particular to a user mutual access method with overlapping network segment addresses and routing and forwarding equipment. Background technique [0002] A user (Host) in an area (Site) can access the public network through a gateway, that is, a routing and forwarding device, so as to realize access to the public network. The area mentioned here is a local area network or a private network. However, if a user in one area wants to access a user in another area, the situation is more complicated. [0003] FIG. 1 is a network diagram for realizing mutual access of users in different regions. As shown in Figure 1, area A and area B are two different private networks. Among them, area A includes Host A1 to Host An, and accesses the public network through gateway A; area B includes Host B1 to Host Bn, and accesses the public network through gateway B. [0004] In FIG. 1, if Host A1 in area A wants to access H...

AI Technical Summary

Problems solved by technology

The disadvantages of this method are: first, the network equipment must have the NAT function, and the equipment price is relatively expensive; second, access can only be initiated from the NAT private network side, otherwise mutual access cannot be realized; When the network side initiates access, when the addresses of three or more regional network segments overlap, it is very difficult to achieve mutual access between users, and network deployment and maintenance are also very complicated

The disadvantage of IPSEC VPN technology is that users who need to communicate with each other must be configured separately, and the configuration is very complicated and difficult to expand

[0011] To sum up, although technologies such as NAT and IPSEC VPN currently propose methods for accessing users with overlapping addresses in different areas, it is difficult to implement due to high requirements for equipment, large changes, and complex configurations. On the basis of the existing network, there is no method to achieve mutual access between users in different regions under the condition of overlapping network segment addresses without making major changes or complicated configurations to network devices

Images