Port based authentication method and network device

Abstract

This invention provides a port based authentication method and a network device. The port based authentication method comprises: a first network device monitors a port within specified time when the first network device monitors that the physical port on the first network device for connecting to a second network device is available so as to wait to receive LLDP messages that the second network deice transmits, wherein the LLDP message comprises identifier information of the second network device and a security certificate; if the LLDP message is received within specified time, the first network device determines whether the trusted network device with the identifier information and the security certificate matching with the identifier information and the security certificate of the second network exists among the trusted network devices which are stored in advance; if yes, the first network device sets the state of the port as a connection state. This invention performs authentication on the network device based on the port, which increases the security of the network device.

Description

technical field [0001] The invention relates to network communication technology, in particular to a port authentication-based method and network equipment. Background technique [0002] With the rapid development of Internet services, the security of network devices in the Internet has become a concern. The security of network devices can be divided into several categories: basic security, access security, secure connection and threat protection. Among them, in terms of access security, it mainly includes authentication, authorization, accounting (Authentication, Authorization, Accounting, referred to as AAA), remote user dial-up authentication (Remote Authentication Dial In User Service, referred to as RADIUS), terminal access controller access control System (Terminal Access Controller Access-Control System, TACACS for short) and other technical means, most of these technical means are aimed at access users. For the interaction between network devices, authentication is...

AI Technical Summary

Problems solved by technology

[0003] However, in the case of private connection of network devices, usually there is no authentication and encryption between network devices, so security problems are prone to occur

Images