Method for discovering transmission control protocol/Internet protocol (TCP/IP) network private access equipment

Abstract

The invention discloses a method for discovering transmission control protocol / Internet protocol (TCP / IP) network private access equipment. The method comprises the following steps of: establishing a legal network equipment fingerprint database within an IP address range, wherein the legal network equipment fingerprint database records media access control (MAC) addresses of all legal network equipment within the IP address range; acquiring the MAC forwarding table information of each piece of legal network equipment within the IP address range; and if the number of MAC addresses in MAC forwarding table information corresponding to a certain port of a piece of legal network equipment is more than or equal to 2, and each MAC address in the MAC forwarding table information corresponding to the port of the legal network equipment cannot be found from the legal network equipment fingerprint database, illegal network equipment accesses the port of the legal network equipment. According to the method for discovering the TCP / IP network private access equipment, network private access equipment in a TCP / IP network can be quickly discovered.

Description

technical field [0001] The invention relates to computer network technology, in particular to a method for discovering TCP / IP network private connection equipment. Background technique [0002] In an organization's TCP / IP (Transmission Control Protocol / Internet Protocol, transmission control protocol / Internet Internet Protocol, also known as network communication protocol) LAN, the management of general network equipment is relatively common, but privately connected to Hub, bridge , Unmanaged switches and other network devices emerge in endlessly. Especially in the access layer, this phenomenon is more serious, which brings a lot of troubles to the network management. Since the private connection of network devices will lead to the abuse of internal network resources, it is easier for the core information of enterprises and institutions to be stolen by illegally connected computers, resulting in serious consequences and damage to interests. Organizations usually formulate ...

AI Technical Summary

Problems solved by technology

There are two main problems in this solution. One is that the workload is heavy, and it is necessary to bind the information of each port and MAC. In some large enterprises, it is basically inoperable through manual methods. Even if the binding is performed through some network management systems, this It's also quite a lot of work

The second is that there is no flexibility to speak of, and it cannot cope with regular network changes in the enterprise and reasonable access of external visitors.

The existing problem is that all access terminals must be configured with 802.1x authentication, the implementation process is relatively cumbersome, and the management cost is relatively high. The second is that this solution can only control illegal terminals and cannot be authenticated normally, and it is impossible to locate whether there is a privately connected device

Images