Management method and equipment of ACL regulation

Abstract

The utility model discloses a ACL rule management method, which comprises following steps as the pre-set configuration aggregation is bond with the application function to be realized; as the subscriber terminal accesses, the subscriber terminal's information can be obtained; the ACL rule can be obtained from the pre-set configuration aggregation and the binding application function. Such ACL rule matches the subscriber terminal's information; based on such matched ACL rule, the ACL rule to be issued can be ascertained and transmitted to the port which connects the subscriber terminal. The utility model also discloses a ACL rule supervisory unit. Since the utility model is introduced, various ACL rule-based service control functions can be effectively combined. Also, the configuration thereof is flexible so as to lower the use difficulty of the subscriber terminal and improve the stability and the reliability of the network.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method and equipment for managing ACL (Access Control List, Access Control List) rules. Background technique [0002] With the expansion of the network scale and the improvement of network complexity, the network configuration is also more and more complicated, and the situation that the computer location changes (such as a laptop or wireless network) and the number of computers exceeds the assignable IP addresses often occurs. DHCP (Dynamic Host Configuration Protocol, Dynamic Host Configuration Protocol) was developed to meet these requirements. [0003] The DHCP protocol provides a method for dynamically obtaining an IP address, as shown in Figure 1, specifically: the DHCP client broadcasts the DHCP-DISCOVER discovery information to find the DHCP server; the DHCP server receiving the DHCP-DISCOVER discovery information in the network The server will respond b...

AI Technical Summary

Problems solved by technology

However, the new problem introduced by this is that when limiting the speed of different network segments, multiple speed-limiting ACL rules take effect at the same time, which will cause the priority of the ACL rules issued by the speed-limiting function to change. For example, the rule issued later takes precedence. However, after using the specified configuration parameters, multiple ACL rules act simultaneously, so the result of multiple simultaneous effects is that the speed limit of the port for a specific network segment is lower than the minimum value of all speed limit rules on the port, resulting in The speed limit is inaccurate

[0022] To sum up, when using ACL rules for multiple functions at the same time, related functions will fail due to resource conflicts, so it cannot meet the needs of user terminals to achieve multiple quality services while implementing attack defense

Images