Device and method for preventing illegal media access control (MAC) address transfer

Abstract

The invention discloses a device and method for preventing illegal media access control (MAC) address transfer. The method is as follows: when newly learned MAC address item exists in MAC table, the new MAC address item is different from the information of the original MAC address item and the original MAC address item is permanent MAC address item, the original MAC address item is not updated, the warning and information statistics of illegal MAC address transfer are performed and the corresponding processing strategy is executed. By using the device and method of the invention, the cost of maintenance can be reduced, the flexibility of management can be increased, the correct learning of the MAC address of access equipment can be guaranteed and the reliability of system operation can be improved.

Description

technical field [0001] The invention relates to network device access technology, in particular to a device and method for preventing illegal Media Access Control (MAC, MediaAccess Control) address migration. Background technique [0002] In network device access technology, after receiving a data packet, an access device such as a switch will learn the source MAC address of the received data packet, and use the learned MAC address as the basis for forwarding the destination MAC address. All MAC addresses have the same attributes and classes. During the MAC address learning process, when two data packets with the same source MAC address are received from different ports successively, the switch will replace the old port information with the port information corresponding to the newly learned MAC address. This process is called For MAC address migration. [0003] Usually, there are many reasons for MAC address migration. The main reasons include: there is a loop in the acce...

AI Technical Summary

Problems solved by technology

In this way, if the correct MAC address is not protected and monitored, MAC address attacks will be exploited, which will have a serious impact on the safe forwarding of data and network bandwidth. Therefore, the MAC address learned by the access device must be table to manage

[0005] In the prior art, the access device cannot verify the legitimacy of the port information corresponding to the MAC address in the MAC address table, and can only rely on manual judgment and processing

In general, the access device can manually configure the MAC address entry to bind the port of the legal user MAC address, and prohibit the aging and migration of the MAC address to protect the legal MAC address information. However, this method requires a lot of work and costs. High and inflexible, unable to fundamentally limit MAC address attacks

Images