An interface isolation method and device

Abstract

The invention discloses an interface isolation method and device, and relates to the technical field of computers. A specific implementation of the method includes: determining a message to be transmitted, and obtaining a source address and a destination address in the message; using a routing policy to determine whether the source address is in the network segment of an out-of-band interface, and if so, determining to transmit the message The interface type is an out-band interface, otherwise it is an in-band interface; in the routing table corresponding to the determined interface type, determine the in-band interface or out-band interface that matches the destination address, and then pass the determined in-band interface or out-band interface. The out-of-band interface transmits packets. In this embodiment, by storing the routing information related to the out-of-band interface and the related routing information of the in-band interface in different routing tables, and configuring a routing policy, the isolation of the packets transmitted by the out-of-band interface and the in-band interface is realized. In the prior art, NA or VRF is not required, and there is no need to consider the version of the switch system.

Description

technical field [0001] The present invention relates to the field of computer technology, and in particular, to an interface isolation method and device. Background technique [0002] Currently, network devices in data centers, such as switches, usually have three types of ports—serial ports, management ports, and service ports. In large-scale data application scenarios, management-related operations such as configuration, upgrade, and monitoring of switches are usually performed through management ports, while service ports are responsible for forwarding service traffic. The former is generally referred to as out-of-band traffic, the management port is referred to as an out-of-band interface, the latter is referred to as in-band traffic, and the service port is referred to as an in-band interface. [0003] In network deployment, in-band and out-of-band traffic should be isolated, that is, for management commands received from the management port, corresponding response pac...

AI Technical Summary

Problems solved by technology

If this function is used in the switch system to achieve network isolation, the implementation is more complicated; and if considering both in-band and out-of-band management services, such as SSH (Secure Shell, secure shell protocol), syslog, NTP (Network Time Protocol, Network Time Protocol) , these application services need to run in multiple NAs respectively;

[0007] 2. Although VRF is lighter than NA, it also needs to create a VRF instance and associated interface, and related applications also need to be bound to the instance, and the operation is still complicated; it is not applicable to low-version systems. If the version is low, only Using NA to Realize Network Isolation

Images