Address resolution protocol message processing method and switch
A technology of address resolution protocol and processing method, which is applied in the field of method address resolution protocol message processing method and switch field, can solve problems such as user ARP spoofing attack and no solution is proposed, and achieve the effect of protecting the network and related equipment
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
example 1
[0045] The following is a detailed description of the process of judging whether an ARP packet needs to be inspected at Layer 2 according to predetermined rules. After copying one copy, perform a second-layer inspection. Figure 4 Shows a schematic flow chart of judging whether layer 2 detection is required according to Example 1, as Figure 4 As shown, the process specifically includes the following processes:
[0046] Step S401, receiving an ARP packet. Due to the need for enhanced DAI detection, that is, the packets detected by the second layer are also ordinary ARP packets without special marks, so they cannot be distinguished according to the packets. It is necessary to determine whether to perform a series of ARP packets in the ARP processing flow. text detection.
[0047] Step S402, judging whether the ARP message is received from the switch attribute port, specifically divided into the following two situations for processing:
[0048] One, the sending interface of ...
example 2
[0058] The following describes in detail the process of performing Layer 2 detection on ARP packets to determine whether the ARP packets are legal. These three kinds of checks are checked in the text legal user binding table, and the above-mentioned DAI validity check can be flexibly and dynamically configured, which can strengthen the defense against ARP message attacks. Figure 5 Shows a schematic flow chart of performing Layer 2 detection on ARP packets according to Example 2, as Figure 5 As shown, the process specifically includes the following processes:
[0059] In step S501, all ARP packets entering this process need to undergo DAI detection, that is, the above-mentioned layer 2 detection. Before performing DAI detection, it is necessary to analyze the ARP message to provide data sources for the following various detection processes, and after the analysis, proceed to the processing of step S502.
[0060] In step S502, a common protocol check is performed on the ARP ...
example 3
[0070] The following describes in detail the processing flow of ARP packets after Layer 2 detection. Figure 6 It shows a schematic diagram of the processing flow of the ARP message according to the example 3 after the two-layer detection, such as Figure 6 As shown, the process specifically includes the following processes:
[0071] In step S601, the ARP message passing the DAI detection, that is, the layer-2 detection enters this step, and the message is forwarded or discarded. If the ARP message is legal, it will be forwarded, otherwise the ARP message will be discarded. When forwarding, it is necessary to judge whether the message is a broadcast message. If it is a broadcast message, then broadcast and forward, that is, enter the processing of step S602; The broadcast message is forwarded by unicast, that is, the process enters step S603.
[0072] Step S602, forwarding the ARP message that needs to be broadcast, and broadcasting and forwarding the message according to th...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More