Method and device for protecting neighbor table in IPv6 network

Abstract

The invention discloses a method and a device for protecting neighbor tables in an IPv6 network; the method comprises the following steps of: monitoring a distribution message used for distributing IPv6 address prefix; recording the IPv6 address prefix carried wherein; monitoring a DAD message used for conflict address detection DAD; recording to the address allocation information carried in the DAD message corresponding to the recorded IPv6 address prefix; carrying out a validity judgment on the learning message used for learning neighbor table according to the recorded address allocation information; and stopping carrying out normal neighbor table operation according to an invalid learning message. The method and the device can improve the robustness and safety of the neighbor table, can be simply realized simultaneously, need not to update the IPv6 protocol stack, are easy to be deployed and have small maintenance quantity.

Description

technical field [0001] The invention relates to the technical field of IPv6, in particular to a neighbor list protection method and a neighbor list protection device in the IPv6 network. Background technique [0002] Internet Protocol Version 6 (IPv6) is the next-generation Internet network layer protocol. The most obvious difference from the existing version 4 (IPv4) is that the number of address bits is increased to 128 to solve the current shortage of IP addresses. In an IPv6 network, all nodes joining the network need to be assigned IP addresses. Currently, IP address assignment schemes mainly include: manual configuration, IPv6-supporting Dynamic Host Configuration Protocol (DHCPv6, Dynamic Host Configuration Protocol for IPv6) assignment, IPv6 neighbor discovery ( ND) protocol allocation, Remote Authentication Dial-In User Service (RADIUS, Remote Authentication Dial-In User Service) allocation, etc. Among them, because the IPv6 address is very long, manual configurati...

AI Technical Summary

Problems solved by technology

[0014] However, in the above two schemes, the first scheme needs to pre-configure neighbor entries. For large-scale IPv6 deployment, the amount of configuration required is huge, the cost of network deployment and management is high, and the amount of later maintenance is also huge. Network deployment is very inflexible; the SEND solution needs to upgrade the existing IPv6 protocol stack, which is complex to implement. Currently, there are very few devices supporting this solution, and the deployment is very difficult, and it is hardly feasible

Images