Method and system for protecting network attack

Abstract

The invention discloses a system and method for preventing network attack, the said method includes MAC address table that the ports of network device which is mounted on the two layers network device; when the upper layer network device sends the data frames to the two layer network device; the two layer network device processes the MAC address table of ports of upper layer network device. The system includes terminal device, two layer network device and upper layer network device, said two layer network device configures the MAC address table of ports of upper layer network device, and processes the MAC address table of ports of upper layer network device according to the received data frame. Using the method and system provided by the invention, it can inspect the attacker who copies the MAC address of ports of upper layer network device intelligently, and there is no need to configure by hand to reduce the work of user greatly.

Description

technical field [0001] The invention relates to the field of network communication, in particular to a method and system for preventing network attacks. Background technique [0002] With the increasing popularity of broadband access and the huge increase in the number of users, the requirements for network security are getting higher and higher. Network operators usually configure security policies on digital subscriber line access devices. Among many strategies, preventing user MAC address spoofing is one of the basic but also one of the most important strategies. [0003] MAC address spoofing uses the MAC address learning principle of layer 2 network devices (such as bridges, layer 2 switches, and DSLAMs). When such devices receive a data frame, there is a dynamic learning process: [0004] First, the Layer 2 network device extracts the source MAC address of the data frame and the port number that receives the data frame; [0005] Secondly, the Layer 2 network device ch...

AI Technical Summary

Problems solved by technology

[0040] poor maintainability

When network expansion occurs and a Layer 2 switch or router needs to be added, the service personnel need to manually configure a static MAC address for each Layer 2 switch, which increases the workload of the service personnel.

Images