Layer 3 switching system and method based on Layer 2 dhcp SNOOPING

Abstract

The invention discloses a three-layer switching system and method based on two-layer DHCP SNOOPING. The system includes a DHCP user terminal, a two-layer switching device, a three-layer switching device and a DHCP server, and is characterized in that the two-layer switching device includes an enabling The module, by enabling DHCP SNOOPING configured on the Layer 2 switching device, monitors the DHCP request process of the user terminal, creates and saves DHCP binding information; the Layer 2 switching device processes the binding information and uploads it to the Layer 3 switching device, and the third layer According to the DHCP binding information, the layer switching device delivers a routing table entry for processing by the Layer 3 engine, and forwards the network packet processed by the Layer 3 engine to the destination user terminal according to the address of the destination user terminal. The technical scheme of the present invention increases the learning method of the three-layer table entry of the switch in the DHCP environment, and effectively ensures the stability and security of the table entry.

Description

Technical field [0001] The present invention relates to the field of computer data communication, in particular to a three-layer switching system and method based on two-layer DHCP SNOOPING Background technique [0002] With the continuous improvement of switching technology in data communication, devices with Layer 3 switching functions have been widely used. Layer 3 switching devices can forward IP packets across virtual local area networks at wire speed, which is an advantage that Layer 2 switching devices do not have. [0003] The invention patent with the prior art publication number CN 101594358 A discloses a "three-layer switching method, device, system, and host machine". The method includes: receiving a network packet sent by a source virtual machine; The exchange information performs a three-layer exchange process on the network message, and generates the network message after the three-layer exchange process, the virtual link where the destination virtual machine is loca...

AI Technical Summary

Problems solved by technology

Due to the simplicity of the ARP protocol, it is extremely vulnerable to attacks and spoofing, and the host routing table entries generated by ARP also become unstable, which will cause abnormal forwarding of network traffic and bring great inconvenience to users.

Images