A method and network processing device for preventing media access control address drift

Abstract

The invention provides a method of preventing media access control address drifting and a network processing device. The method comprises the steps of: receiving a first message by a network access device through a first port thereof; judging whether the first message needs to be discarded or not through the network access device according to a current ACL (access control list) rule; when judgment that the first message does not need not to be discarded is made, forwarding the first message according to a target MAC (media access control) address, and judging whether a first table entry corresponding to a first source MAC address and first VLAN (virtual local area network) information of the first message exists in an MAC address list; and when judgment that no first table entry exists is made, establishing a corresponding table entry in the MAC address list according to the first message, and establishing a first ACL rule of a message for indicating a source MAC address which is lost outside the first port and is received by other ports as a first MAC address and VLAN information as first VLAN information. The function of preventing MAC address drifting can be realized easily.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a method for preventing Media Access Control (MAC, MediaAccess Control) address drift and a network processing device. Background technique [0002] With the development and popularization of network technology, the scale of the network is expanding day by day, the network architecture is gradually complicated, and the network configuration is becoming more and more complicated. The location of the device often changes (for example, the location of portable devices accessed through the wireless network often moves), but sometimes due to network failures (such as loops), abnormal MAC address drift occurs, affecting network data security and users to use the network normally. Therefore, measures must be taken to provide security to prevent users from being unable to use the network and other security issues due to abnormal MAC address drift. [0003] In the prior ar...

AI Technical Summary

Problems solved by technology

This method has the following disadvantages: a large amount of initial configuration and poor operability

For each port of each device, a static MAC address table needs to be configured, and it is also necessary to clearly know which MAC addresses are legal. Therefore, a large amount of information needs to be obtained before device deployment, and the configuration workload is heavy.

Images