A method to prevent ezvpn dial-up failure

Abstract

The invention discloses a method for preventing EZVPN dialing failure. The method is characterized by comprising the following steps that S1. a PC sends an EZVPN dialing request to firewall equipment; S2. the firewall equipment receives the dialing request, private IP addresses are distributed, if negotiation key encryption is successful, the procedure is ended, otherwise, the firewall equipment records the failure event to a dialing recording table, the failure event comprises the private IP addresses; S3. the PC sends an EZVPN dialing operation request to the firewall equipment again, the firewall equipment checks the dialing recording table, if the dialing recording table has the dialing failure record of the PC, the private IP addresses are distributed to the PC again, and otherwise, an unused private IP address is selected for the PC from the private IP addresses. According to the method, the firewall equipment is used for recording the private IP addresses in the EZVPN dialing failure request, when the PC uses EZVPN dialing again, the firewall equipment checks the recording table, the same private IP addresses are distributed for the PC, and accordingly EZVPN dialing failure is effectively avoided.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a method for preventing EZVPN dialup failure. Background technique [0002] When using the EZVPN software to dial-up the firewall device under the Windows operating system, if the dial-up is successful, the firewall device will allocate a private IP address and configure it on the PC. If the dial-up fails, it is after the address is allocated during the EZVPN negotiation process. If the negotiation fails, the private IP address allocated by the firewall to the PC has already been configured on the PC. At this time, because the established IKE connection fails, the firewall cannot send a message to delete the private IP address to the PC. A dead IP address is formed on the PC. The existence of this IP address will affect the second dial-up, because the first dial-up is unsuccessful, and the firewall device assigns a new private IP address to the PC when the user cont...

AI Technical Summary

Problems solved by technology

[0005] The invention aims to solve the problem that after the first dial-up failure of the PC using EZVPN, a dead IP is formed in the PC, and the firewall device cannot assign a new IP address to the PC without restarting the PC.