A method for migrating an access device between ports and an aggregation layer switch

Abstract

Embodiments of the present invention provide a method for access equipment migrating between ports, and distribution layer switches. The method is applied to a first distribution layer switch. The first distribution layer switch is connected with at least one access layer switch. The access layers switch communicates with the access equipment through a first port. The method comprises steps that a MAC address table which includes at least one port record that includes parameter information of every port of the access layer switches is stored in the first distribution layer switch; when the access equipment migrates to a second port from the first port that is connected between access layer switches, the first distribution layer switch adds a port record of the second port into the MAC address table; and the port record of the second port is generated according to the parameter information of every port of the access layer switches in the port record of the first port, and the port record of the second port allows the access equipment to access to a network where the access layer switches are located through the second port. Migration of the access equipment between the ports can be performed without any manual operation.

Description

technical field [0001] The invention relates to network technology, in particular to a method for migrating access equipment between ports and a convergence layer switch. Background technique [0002] When the access device is connected to the access layer switch of the IP network, the security access control policy based on MAC address binding is limited to the specified port, and cannot control the entire VLAN at the same time. When an access device that is denied access is migrated from one port to another port configured in the same VLAN, the access device can still access the network, seriously affecting network security. [0003] In the prior art, it is necessary to manually configure and modify parameter information such as a virtual local area network (VLAN, Virtual Local Area Network) and a port descriptor of a port of an access layer switch. When a port fails or a network cutover is performed, the access device connected to the access layer switch needs to be adju...

AI Technical Summary

Problems solved by technology

[0006] The technical problem to be solved by the present invention is to provide a method for migrating access devices between ports and a convergence layer switch, which is used to solve the problem of configuring each port of the access layer switch based on MAC address binding in the prior art. The security access control strategy requires cumbersome manual configuration operations

Images