Method for realizing network security platform of IP software router by utilizing VLAN technology

Abstract

The invention provides a method for realizing an embedded and switched network security platform of an IP software router by utilizing a VLAN technology. The method is characterized by comprising the following steps of: selecting a two-layer Ethernet switch chip with a network management function; accessing the chip to a CPU (Central Processing Unit) system; configuring each switch port and a busport between the CPU and the two-layer Ethernet switch chip separately into a same VLAN group; after the two-layer Ethernet switch chip receives data messages from a physical layer chip, stopping datatransmission in the interior of the switch chip by VLA, thus completely transmitting the data to the CPU and being received by the CPU; and carrying out post-processing after the CPU receives and submits the data to an IP layer. The method has the advantages of leading users to obtain network interfaces of a plurality of separate network segments by extremely low hardware cost, solving the problem of network security equipment with multi-ports, greatly reducing the cost of network security equipment and having the characteristic of high stability.

Description

technical field [0001] The invention relates to a method for implementing an embedded switching network safety platform using VLAN technology to realize IP software routing, which is used for realizing network safety functions such as three-layer IP routing and packet filtering firewall on a two-layer Ethernet switch. Background technique [0002] Traditional network devices, such as routers, firewalls / VPN / IDS / UTM and other network security devices, in practical applications, due to the existence of multiple security domains and multiple access paths, usually need to design multiple (more than 10 or even more than 16 , 24, 48, etc.) network interfaces. If the traditional X86 technology is used to design and utilize the PCI expansion technology, it is difficult to achieve more than 10 network interfaces. Because the number of PCI expandable interfaces is limited (usually 3 to 4 network ports can be expanded), and the cost is quite high (several times switching technology), e...

AI Technical Summary

Problems solved by technology

If the traditional X86 technology design is used, it is difficult to achieve more than 10 network interfaces by using PCI expansion technology

Because the number of PCI expandable interfaces is limited (usually 3 to 4 network ports can be expanded), and the cost is quite high (several times switching technology), especially for low-end products, the high cost will lose the market. Competitiveness

Images