Unlock instant, AI-driven research and patent intelligence for your innovation.

MAC (Media Access Control) address learning control method and equipment in IRF (Intelligent Resilient Framework)

A technology of MAC address and learning control, applied in the field of network communication, to achieve the effect of improving security performance, forwarding performance, and improving functions

Active Publication Date: 2015-05-20
NEW H3C TECH CO LTD
View PDF5 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

In this way, when the port setting on the service board prohibits MAC address learning, if the MAC address learning function of the service board has been proxied by other service boards (referred to as the agent service board), a problem similar to that in IRF3 will appear: The prohibition of MAC address learning in the port setting is invalid

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • MAC (Media Access Control) address learning control method and equipment in IRF (Intelligent Resilient Framework)
  • MAC (Media Access Control) address learning control method and equipment in IRF (Intelligent Resilient Framework)
  • MAC (Media Access Control) address learning control method and equipment in IRF (Intelligent Resilient Framework)

Examples

Experimental program
Comparison scheme
Effect test

no. 1 example

[0034] see image 3 , image 3 It is a flow chart of the method provided by the first embodiment of the present invention. This process applies to CBs in IRF3 and includes:

[0035] Step 301, through linkage with the centralized PEX, locally generate an ACL entry corresponding to the user-side port configured with MAC address learning restrictions on the centralized PEX, the matching condition of the ACL entry is that the user-side port port identifier, and the action of the ACL entry is to prohibit MAC address learning.

[0036] The ACL entry generated in step 301 is a preferred embodiment of the ACL entry in step 201 above.

[0037] In the present invention, when one or more user-side ports on the centralized PEX are configured with MAC address learning restrictions, the CB connected to the centralized PEX can detect the The user-side port configured with the MAC address learning restriction, in this way, generates corresponding ACL entries locally based on the detected ...

no. 2 example

[0052] In the present invention, the Higig header of the PPD2 format as described above includes the MAC address non-learning identification field, specifically as Figure 5 shown. In this way, in this embodiment, as a simple method, when restricting the internal message header carried by the message that the centralized PEX in IRF3 redirects to CB is Figure 5 CB executable when showing the Higig header of the PPD2 format Image 6 process shown.

[0053] see Image 6 , Image 6 The flow chart of the second embodiment provided by the present invention. like Image 6 As shown, CB performs the following steps:

[0054] Step 501, generate an access control list ACL table entry locally, the matching condition of the ACL table entry is: the MAC address does not learn the identification field in the internal message header of the data message is set to the first set value, and the ACL table entry The action of the item is to disable MAC address learning.

[0055] The ACL ent...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides an MAC (Media Access Control) address learning control method in an IRF (Intelligent Resilient Framework) and MAC address learning control equipment in the IRF. According to the MAC address learning control method in the IRF and the MAC address learning control equipment in the IRF, an ACL (Access Control List) list item is generated, and a CB (Controlling bridge) can be controlled to determine whether to perform MAC address learning or not according to a data message in accordance with the ACL list item, so that the configuration can be effective through the ACL list item when a function related to the MAC address learning is inhibited by the port configuration on a centralized PEX, therefore the security performance and forwarding performance of the IRF can be further improved under the condition of suffering from many network MAC attacks, and the function of the IRF on the port security aspect can be further improved.

Description

technical field [0001] The present application relates to network communication technologies, and in particular to a method and device for controlling MAC address learning in a stack (IRF: Intelligent Resilient Framework3). Background technique [0002] IRF, referred to as stacking, its core idea is to connect multiple devices together and virtualize them into a joint device after necessary configuration. The virtualized joint device is called a stack, and the devices in the joint device are called for member devices. [0003] IRFs include IRF2 and IRF3. Among them, IRF2 is used to integrate devices at the same level in the network, reduce the number of nodes in a single level of the network, and enhance the performance and reliability of a single node. [0004] On the basis of IRF2, IRF3 adds support for device integration between different levels, which can simplify the network level structure, provide more centralized management and higher scalability. In a nutshell, I...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/12
CPCH04L63/101H04L2101/622
Inventor 詹恬峰薛聪
Owner NEW H3C TECH CO LTD