Method, system and switch for preventing MAC address spoofing

Abstract

The invention discloses a method, a system and a switch for preventing MAC address spoofing, the switch comprises: a table entry generation unit of a binding state table used for generating the binding state table of a user when the user accesses to a network; a state processing unit of the binding state table used for processing state transition of the user address; a neighbor notice message detection processing unit used for detecting whether a target address of the neighbor notice message is valid according to user information recorded in the table entry of the binding state table after the switch received the neighbor notice message, when the message contains a target link layer address option, detecting whether the target link layer address option is accordant to that recorded in the table entry of the binding state table, if so, forwarding the message; otherwise, discarding the received neighbor notice message. With the method, the system and the switch for preventing MAC address spoofing, when the network has NA message carrying false link layer address, the switch discards the NA message to guarantee network security.

Description

technical field [0001] The invention relates to the field of data products, in particular to a method, a system and a switch for preventing MAC address spoofing in an IPv6 network. Background technique [0002] In the IPv6 network, ICMPv6-based Neighbor Discovery Protocol (ND) is used to solve the interaction problem between nodes on the same link. It replaces the address resolution protocol (ARP) used in IPv4, the router discovery part of the control message protocol (ICMP) and all functions of the redirection protocol, and can obtain network parameters such as link MTU and hop limit. The neighbor node discovery process of IPv6 is the process of using a series of ND packets and steps to determine the relationship between neighbor nodes and perform network configuration. [0003] Although the Neighbor Discovery Protocol (Neighbor Discovery Protocol) of the switch makes the network configuration process more automatic and reduces the burden on the administrator, since the li...

AI Technical Summary

Problems solved by technology

[0006] The technical problem to be solved by the present invention is to provide a method, a system and a switch for preventing MAC address spoofing, which are used to detect network packets, prevent MAC address spoofing, and avoid the large amount of packet detection in the prior art and the existence of security risks

Images