A method, device and system for source and destination IP address translation

Abstract

The invention discloses a method for converting a source IP address and a destination IP address, which comprises the steps that: terminal network equipment configures the source IP address of sending a message into the IP address of the terminal network equipment, configures the destination IP address of sending a message into the IP address of IP address conversion equipment and sends the message to the IP address conversion equipment; the IP address conversion equipment configures the source IP address of the obtained message as the IP address of the IP address conversion equipment, configures the destination IP address of the message as the IP address of an application server and sends the message to the application server; the IP address conversion equipment stores corresponding relationship between the IP address of the terminal network equipment and the IP address of the application server and transmits the message from the application server to the corresponding terminal network equipment according to the corresponding relationship.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method, device and system for converting source and destination IP addresses. Background technique [0002] In the financial field, with the acceleration of the terminal centralized management process, more and more terminal services are concentrated on multiple application servers in the central management area. The specific implementation plan is as follows: figure 1 As shown (taking two terminal network devices as an example, the actual number may be one or more), terminal network device A governs multiple terminals, terminal network device B also governs multiple terminals, terminal network device A and terminal network Device B is connected to the central management area through the IP network, and the central management area includes multiple application servers. The IP address of the corresponding application server needs to be configured on terminal network devi...

AI Technical Summary

Problems solved by technology

Therefore, the terminal network device and the application server know each other's IP address. If a malicious user attacks the terminal network device or application server by spoofing the IP address, it will pose a threat to network security.

[0004] Since there are usually multiple application servers in the central management area, each terminal network device needs to be connected to these application servers, so it is necessary to configure the IP addresses of multiple application servers on each terminal network device, and send In the message, select the IP address of the corresponding application server as the destination IP address; in addition, each application server is configured with a routing protocol for all terminal network devices, and before data transmission, each terminal network device IP Address authentication; in this way, the configuration, selection and authentication process of terminal network devices and application servers in the entire system will be complicated.

Images