MAC address protection method and switches

Abstract

The present invention discloses a Medium Access Control (MAC) address protection method and switch, the method comprising: obtaining, by a switch in a layer 2 ring network, network topology information of the layer 2 ring network, the network topology information of the layer 2 ring network includes a protection MAC address of a protected device, an identifier of a switch corresponding to the protection MAC address, and an identifier of each switch in the layer 2 ring network, wherein the protection MAC address is the MAC address of the protected device; and determining, by the switch in the layer 2 ring network, a local outgoing interface of the protection MAC address of the protected device according to the network topology information, establishing and storing an outgoing interface of an MAC entry corresponding to the protection MAC address according to the local outgoing interface of the protection MAC address. The embodiments of the present invention take the MAC address of the protected device as the protection MAC address, and synchronously updates the outgoing interface of the MAC entry corresponding to the protection MAC address when the topology of the layer 2 ring network is changed, thereby ensuring the protected device to correctly send and receive messages to meet the topology change of the layer 2 ring network.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of communication, and in particular to a medium access control MAC address protection method and a switch. Background technique [0002] In the networking schemes of metropolitan and enterprise networks, more and more L2 ring network technologies are used. In the two-layer ring network, the process of forwarding the message by the switch is as follows: firstly, according to the destination Media Access Control (Media Access Control; MAC) address of the message, the MAC table entry is searched, and the outgoing interface of the message is obtained through the MAC table entry, Then send the packet through the outbound interface. Among them, the MAC entry of the switch is learned according to the received data flow. For example, when the switch receives a data packet from a certain interface, it can learn the MAC entry according to the source MAC address of the packet. , the MAC entr...

AI Technical Summary

Problems solved by technology

[0010] The embodiment of the present invention provides a MAC address protection method for media access control and a switch, which are used to solve the defect that the existing solution for preventing MAC address attacks easily causes interruption of network traffic when the network topology of the two-layer ring network changes, and realizes At the same time as the MAC address, even if the network topology of the layer 2 ring network changes, it can also ensure the correct forwarding of user packets

Images