Method, switch and switching chip for port separation of switch

Abstract

The invention discloses a method for realizing switch port isolation. The method comprises the steps of: respectively designating several ports of a switch chip as safe ports and isolated ports; setting all the isolated ports of the switch chip as link aggregation ports; Turn off the traffic balancing mechanism of the link aggregation port to ensure that the Layer 2 forwarding is performed according to the normal mechanism. Correspondingly, the present invention also provides a switch and a switch chip for realizing port isolation. The invention not only achieves a good port isolation effect, but also enables the switch to have a greater choice in using the switching chip, and it can realize port isolation by using a low-end switching chip, thereby saving the investment required for purchasing a high-end switching chip and cost, thereby improving the practicability and stability of the product.

Description

technical field [0001] The invention relates to the field of Ethernet switches, in particular to a method for realizing switch port isolation, a switch and a switching chip. Background technique [0002] An Ethernet switch is one of the core devices of the Ethernet, and it is more and more widely used in communities and enterprises. With the rapid development of the network scale and the increasing number of users, the requirements for network security management are also getting higher and higher. In order to isolate users (terminals), the traditional method is to assign a VLAN (Virtual Local Area Network, virtual local area network) and related default VLAN ID (VLAN identification) to each user, and use VLAN to separate users from the second layer of the OSI network structure The data link layer of the network is isolated, which can prevent malicious monitoring and attacks by other users. However, because the number of VLANs is extremely limited, only 4096, when the numb...

AI Technical Summary

Problems solved by technology

[0008] If the switch chip does not have the above functions, port isolation cannot be achieved

Since the port isolation of the switch chip is not a necessary function required by the VLAN standard protocol 802.3AD, some switch chips from some manufacturers, especially low-end chips, do not implement this function, which has caused considerable problems for the security management strategy of the entire switch system. Difficulties

[0009] In summary, the existing technology for implementing switch port isolation obviously has inconvenience and defects in actual use, so it is necessary to improve it.

Images