Method for preventing disturbance of medium accessing control address table on access equipment

Abstract

The invention discloses a method for avoiding interference of medium access control address list on access device, comprising that an exchange chip in data plane closes the MAC address study at network port, a MAC address study module exchanges the MAC address study function of the exchange chip, the MAC address study module and a MAC address legality check module filter illegal MAC address studyto build a legal MAC address list, a control plane sets studied a new legal MAC address list into the exchange chip, and starts an aging process, when aged, deletes the MAC address of the exchange chip. Since the exchange chip uses static MAC address, the invention converts the dangerous MAC address study function of exchange chip into safe MAC address study of control plane, to avoid MAC addresslist interference caused by source MAC attack.

Description

technical field [0001] The invention relates to a communication method, in particular to a method for preventing disturbance of a medium access control address table on an access device. Background technique [0002] The broadband access network is rapidly migrating from Asynchronous Transfer Mode (ATM) technology to Ethernet technology. The main access equipment of the entire access aggregation network, from DSLAM to aggregation switch, is a Layer 2 network, which brings some safe question. [0003] A MAC (Media Access Control, Media Access Control) address is an identifier for identifying a LAN (Local Area Network) node. The physical address of the network card is usually burned into the EPROM of the network card by the manufacturer of the network card (a flash memory chip, which can usually be erased and written by the program). address. That is to say, in the physical transmission process of the bottom layer of the network, the host is identified by the physical addre...

AI Technical Summary

Problems solved by technology

[0005] The Layer 2 Media Access Control (MAC) address forwarding table of the Ethernet switch chip of the access device is the core data table for the switch chip to exchange data packets. Since its MAC address learning generally has no security policy control, when it has the same If the data packets of the source MAC enter the switching chip from different ports of the switching chip, the MAC address table will be frequently migrated, which will cause confusion in the forwarding of data packets with this MAC address as the destination MAC.

In practical applications, if the data packet from the user side port of the access device is the MAC address of the BRAS, it will cause other users' data packets to the Broadband Remote Access Server (BRAS) to be forwarded to this user port by mistake, resulting in business interruption

[0006] Therefore, it is very important to add a security policy to the MAC address table learning in the access device to prevent the disturbance of the MAC address table due to frequent migration, but the existing technology does not solve this problem well

Images