Neighbor discovery proxy method and system based on Dynamic Host Configuration Protocol for Internet Protocol Version 6 (DHCPv6) monitoring

Abstract

The invention discloses a neighbor discovery proxy method and a system based on DHCPv6 monitoring, wherein the method comprises that an access switch which has a DHCPv6 monitoring function monitors an address request process of a DHCPv6 client, creates binding information and configures an Internet Protocol (IP) for an aggregation switch; the access switch uploads the binding information to the aggregation switch which has a neighbor discovery proxy function through a binding message according to the configured IP address of the aggregation switch; the aggregation switch extracts the binding information from the binding message so as to update a binding information table; and the aggregation switch inquires whether an objective ID of a neighbor request message which meets the conditions of neighbor discovery proxy exists in the binding information table or not, and the aggregation switch sends a neighbor advertisement message to a terminal if the objective ID exists. The method and the system overcome the defect that an objective terminal exists in the neighbor table of the DHCPv6 client but can not be communicated with actually.

Description

technical field [0001] The invention relates to the field of computer data communication, in particular to a neighbor discovery agent method and system based on DHCPv6 monitoring. Background technique [0002] Dynamic Host Configuration Protocol (DHCPv6) is a LAN network protocol that uses User Datagram Protocol (UDP) to work. It has two main purposes: to automatically assign IPv6 addresses to users for internal networks or network service providers For internal network administrators as a means of centrally managing all computers. [0003] The DHCPv6 snooping (SNOOPING) function refers to the process that the switch monitors the DHCPv6 client (CLIENT) to obtain an IP through the DHCPv6 protocol. It prevents DHCPv6 attacks and privately sets up a DHCPv6 server (SERVER) by setting trusted ports and untrusted ports. DHCPv6 packets received from trusted ports can be forwarded without verification. A typical setting is to connect the trusted port to a DHCPv6 server (SERVER) o...

AI Technical Summary

Problems solved by technology

[0005] The defect of the neighbor discovery agent is that the device does not detect the reachability of the target IP, but directly sends a neighbor advertisement (Neighbor Advertisement) to the requesting end. There is a mapping relationship between the IPv6 address and the hardware address of the target host in the neighbor discovery cache of the requesting end, causing the request The terminal thinks that the destination terminal exists in the neighbor table of the DHCPv6 client, but it cannot communicate with each other.

Images