Method for updating network security table and network device and dynamic host configuration protocol (DHCP) server

Abstract

The invention discloses a method for updating network security table, a network device and a dynamic host configuration protocol (DHCP) server. When a virtual machine moves in a management domain of a network device, the network device analyses a first received request message from the virtual machine, an internet protocol (IP) address and a medium access control (MAC) address of the virtual machine are obtained, when a security table item including the IP address and the MAC address doesn't exist in a network security table of the network device, the network device sends a second request message generated according to the IP address and the MAC address to the DHCP server, so that the DHCP server is enabled to launch mandatory communication between the DHCP server and the virtual machine, the network device monitors an interactive message between the DHCP server and the virtual machine to obtain the security table item of the virtual machine, the network security table is updated according to the security table item. Through the above mode, the method for updating network security table, the network device and the DHCP server ensure that the virtual machine can access the network normally when the virtual machine moves in the management domain of the network device, reliability of the network security table is also ensured, and therefore network security is ensured.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for updating a network security table, a network device, and a DHCP (Dynamic Host Configuration Protocol, Dynamic Host Configuration Protocol) server. Background technique [0002] A virtual machine refers to a complete computer system that is simulated by software and has complete hardware system functions and runs in a completely isolated environment. Currently, people often provide services to users through virtual machines. Since virtual machines must run on physical servers, as more and more virtual machines are loaded on the physical servers, the load increases. It is necessary to perform load sharing on the physical servers, or to back up data on the physical servers. When performing load sharing or data backup on a physical server, it is necessary to migrate a virtual machine running on one physical server to another physical server to maintain uninterr...

AI Technical Summary

Problems solved by technology

[0005] However, the inventors of the present application have found in long-term research and development that ARP request messages are easy to counterfeit, and if a large number of counterfeit ARP request messages are sent to the second switch 103, invalid IP addresses and MAC addresses will fill up the ARP security table , so that legal packets cannot pass through the second switch 103, and thus the virtual machine 106 cannot normally access the network

Images