Route switching method, device, system and network equipment

Abstract

The invention provides a route switching method, a device, a system and network equipment. The route switching method comprises the steps that: first network equipment traverses two layers of interfaces of own after returning to normal work; the first network equipment generates a first Ethernet frame, a source address of the first Ethernet frame is of an MAC (Media Access Control) address in an MAC address table of the first network equipment, which corresponds to two layers of interfaces except for the current two layers of traversed interfaces, a destination address of the first Ethernet frame is of a broadcast address, and an Ethernet protocol number of the first Ethernet frame is of a retaining Ethernet number; and the first network equipment sends the first Ethernet frame by the current traversed two layers of interfaces so as to update the MAC address table of third network equipment connected with the first equipment. The invention can realize smooth switching of two-layer network flow, thus being capable of ensuring the normal communication of users, and improving the usability of the network equipment.

Description

technical field [0001] The invention relates to firewall technology, in particular to a path switching method, device, system and network equipment, belonging to the technical field of computer networks. Background technique [0002] In order to obtain high availability (High Availability; hereinafter referred to as: HA), the current firewall (Fire Wall; hereinafter referred to as: FW) usually uses hot backup technology, that is, generally adopts dual firewalls. During operation, one firewall will synchronize the operating data to Another firewall. Once the main firewall fails, the standby firewall will switch roles, switch itself to the main firewall, and take over the forwarding and security work. [0003] The firewall in transparent mode works on the second layer of the network, just like a switch, and can perform security filtering during the process of forwarding the second layer traffic. [0004] by figure 1 The network structure shown as an example, figure 1 It is...

AI Technical Summary

Problems solved by technology

[0008] After FW2 resumes normal operation, the link connected to FW2 also resumes normal operation, and FW2 resumes forwarding VLAN10 traffic. At this time, FW1 will block the traffic of VLAN10, but at this time the link connected to FW1 can still work normally. , the MAC address table of the upstream and downstream switches has not been updated, so the traffic of VLAN10 that already exists in the MAC address table still has to pass through FW1, but at this time FW1 has blocked the traffic of VLAN10, that is, FW1 will no longer Forward the traffic of VLAN10, which will cause communication interruption, so that users of VLAN10 cannot communicate normally

Images