Method for carrying out MAC (Media Access Control) address learning based on software and hardware coordination in VPLS (Virtual Private Lan Service)

Abstract

The invention discloses a method for carrying out MAC (Media Access Control) address learning based on software and hardware coordination in VPLS (Virtual Private Lan Service). The method comprises the steps of receiving a message and analyzing the message to obtain a source MAC address and a virtual exchange instance to which the source MAC address belongs; if an address learning request access MAC address table exists, obtaining entry information in the MAC address table, and arbitrating pre-learning entry information and the entry information in the MAC address table; if MAC address authentication is started, updating an entry state to be pre-authentication and updating an aging period to be 1/2 of a preset aging period and arbitrating a link table length state; if the MAC address authentication is not started, updating the entry state to be authentication success and updating the aging period to be the preset aging period; and if the address learning request does not exist and a CPU request access MAC address table exists, when the entry state is valid and the entry information matches, performing corresponding operation on a pre-authentication entry state. According to the method, a great number of legal MAC addresses are prevented from being faked by an attacker to occupy normal MAC address table resources for a long time and the load of the CPU is prevented being too heavy, thereby maintaining the normal operation of a network and other business.

Description

technical field [0001] The present invention relates to the field of network communication, in particular to a method for learning MAC (Media Access Control, medium access control) addresses based on software and hardware cooperation in VPLS (Virtual Private Lan Service, virtual private local area network service). Background technique [0002] VPLS is a technology that provides virtual Ethernet services on a wide area network. It provides a multipoint-to-multipoint VPN (Virtual Private Network, virtual private network) networking mode to realize the interconnection between LAN sites across the wide area network. A typical VPLS network includes CE (Custom Edge, user edge device) and PE (Provider Edge, operator edge device), among which CE is connected to PE through AC (Attachment Circuit, access link), and between PE Establish a public network tunnel. Then, create a VSI (Visual Switch Instance, virtual switch instance) on each PE and configure a PW (Pseudo Wire, pseudowire)...

AI Technical Summary

Problems solved by technology

[0007] The technical problem to be solved by the present invention is that the attacker forges a large number of legal MAC addresses, causing the CPU to frequently process the authentication request message of the MAC address, causing the CPU to be overloaded. MAC addresses occupy normal MAC address table resources for a long time, causing the MAC address table to overflow and affecting packet forwarding of legitimate users.

Images