Method for generating dynamic host configuration protocol (DHCP) snooping binding information, and device thereof

Abstract

The embodiment of the invention discloses a method for generating dynamic host configuration protocol (DHCP) snooping binding information, and a device thereof, wherein the method comprises: receiving ACK message including target MAC address returned by a DHCP server; querying items corresponding to the target MAC address; according to a first identification position and a second identification position in MAC items, if receiving message discover and message request, generating the DHCP snooping binding information according to input port information in the MAC items, and ensuring source MAC address, the input port information and input VLAN ID in the message discover and the message request to be respectively and correspondingly the same as each other. The embodiment of the invention canavoid the pot corresponding to the MAC address in a MAC table not being shifted caused by MAC address spoofing, and effectively guarantees the accuracy of the DHCP snooping binding information.

Description

technical field [0001] The present invention relates to communication technology, in particular to a method and device for generating dynamic host configuration protocol (Dynamic Host Configure Protocol, hereinafter referred to as: DHCP) snooping binding information. Background technique [0002] In a DHCP network system based on DHCP, the DHCP snooping (SNOOPING) device can be used to filter the response message of the DHCP server to prevent its attack on the internal network. figure 1 It is a schematic diagram of a topology structure of a DHCP network in the prior art. in the figure 1 In the shown DHCP network, the Internet Protocol (Internet Protocol, hereinafter referred to as: IP) address obtained by a personal computer (personal computer, hereinafter referred to as: PC) from the DHCP snooping device is in the same network segment as the address of the DHCP server. figure 2 is another schematic diagram of the topology of the prior art DHCP network, in which figure ...

AI Technical Summary

Problems solved by technology

When the prior art generates DHCP snooping binding information, there are at least the following problems: During the DHCP message interaction process, before the DHCP server responds to the DHCP snooping device with an ACK message, if the user’s MAC address is spoofed, the MAC address in the MAC entry The port corresponding to the address will be migrated. In this way, when the DHCP snooping binding information is generated, the port obtained by looking up the MAC entry does not match the actual port, resulting in an error in the generated DHCP snooping binding information.

Images