Method, system and exchange equipment for preventing attacks in Ethernet ring network

Abstract

The invention discloses a method, a system and exchange equipment for preventing attacks in an Ethernet ring network, wherein the method comprises the following steps: recording port information of the exchange equipment accessing to the Ethernet ring network; when a control information message of the Ethernet ring network is received, acquiring receiving port information in the control information message; and if the receiving port information is different from the port information of the exchange equipment accessing to the Ethernet ring network, discarding the control information message. The method, the system and the exchange equipment for preventing the attacks in the Ethernet ring network confirm whether the control information message is bogus and influences the Ethernet ring network by judging the port of the received control information message, thus the Ethernet ring network can be effectively prevented from being attacked by the bogus control information message when the Ethernet ring network is deployed, the disorder of the Ethernet ring network and the probability of generating link oscillations and loop circuits are avoided, and the safety and the stability of the Ethernet ring network are enhanced.

Description

technical field [0001] The invention relates to network communication technology, in particular to an attack prevention method, system and switching equipment in an Ethernet ring network, and belongs to the field of communication technology. Background technique [0002] With the rapid development of Ethernet technology and the continuous improvement of applications, it has become an irresistible trend to use cost-effective Ethernet technology to build large-scale enterprise networks and metropolitan area networks. In such a large-scale and multi-service network environment, most of them are networks with a ring topology. figure 1 It is a schematic diagram of the existing ring topology network structure, such as figure 1 As shown, the feature of the ring topology is that each device uses two ports to interconnect with adjacent devices to form a closed link. If an Ethernet switching device is used to construct a ring topology network, it is called an Ethernet ring network. ...

AI Technical Summary

Problems solved by technology

[0007] However, the above method will increase the complexity of the protocol of the Ethernet ring network. It is necessary to save the same authentication information in the node sending the message and the node receiving the message in advance. The sender needs to carry the authentication information in the message, and the receiver needs to verify the Received messages are authenticated

Moreover, since the authentication information is pre-stored and not dynamically changed, if the user obtains this authentication information or obtains a legal When the link between D is faulty, the port Cd of the transmission switch C captures a down message message, and when the Ethernet ring network recovers, the captured down message message is sent to the port Cd of the transmission switch C Cx sent, and thus sent out through port Cb—in this way, after receiving the message, the host device will also mistakenly think that the ring network has failed, and set its slave port to the state where data can be forwarded, resulting in The link forms a loop, causing a broadcast storm

Images