Method and apparatus of external network terminal for accessing manufacture device or internal network terminal

Abstract

The invention relates to a method and an apparatus of an external network terminal for accessing a manufacture device or an internal network terminal. The method comprises: receiving an authorization code sent by the external network terminal and verifying the authorization code through a server; after the verification is passed, receiving a first connection request of connecting the manufacture device or the internal network terminal sent by the external network terminal, obtaining a target IP address and a target port number according to the first connection request, correspondingly generate a temporary IP address and a temporary port, and establishing a first connection with the external network terminal through the temporary IP address and the temporary port; establishing a tunnel connection with the manufacture device, and sending a second connection request to the manufacture device through the tunnel connection, for enabling the manufacture device to establish a second connection with the manufacture device or the internal network terminal according to the target IP address and the target port number carried in the second connection request. The method and the device are used for transferring data among the first connection, the tunnel connection and the second connection, enabling the external network terminal to access the internal network device without carrying out port mapping, thereby simplifying the operation of enterprise IT staff personnel, and are used for generating an encrypted tunnel to improve the security.

Description

technical field [0001] The present invention relates to the field of network technology, in particular to a method and device for an external network terminal to access manufacturer's equipment or an internal network terminal. Background technique [0002] With the improvement of network security awareness, many enterprises will run the purchased manufacturer's equipment in their own local area network in order to maintain information security. As we all know, network equipment needs to be regularly maintained in order to maintain normal operation, and when the internal IT management personnel of the enterprise cannot complete the maintenance of some network equipment, such as equipment upgrades, troubleshooting, etc., technical personnel from equipment manufacturers (hereinafter referred to as technical support personnel). [0003] At present, it is usually to add several static NAT rules on the NAT (Network Address Translation) device at the egress of the internal network...

AI Technical Summary

Problems solved by technology

However, the IT administrators of many enterprises do not have such technology or port mapping needs to go through the complex administrative approval process within the enterprise due to information security management and control. Therefore, it is very inconvenient to do port mapping

[0004] In addition, protocols such as TELNET and HTTP are very insecure, and even normal maintenance may be monitored and tampered with at will. It is very important to effectively protect these insecure protocols

Images