Method for implementing virtual MAC address in digital subscriber line access server equipment

A technology for accessing servers and devices, applied in digital transmission systems, data exchange networks, data exchange through path configuration, etc., can solve problems such as IP address theft, indistinguishability, and lack of positioning by telecom operators, and achieve forwarding performance guarantee Effect

Inactive Publication Date: 2004-11-10
GANGWAN NETWORK CO LTD
View PDF0 Cites 13 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0002] With the large-scale construction of broadband infrastructure and the continuous expansion of broadband user groups, some system security issues have become increasingly prominent, such as account theft, IP address theft, etc., and telecom operators do not have sufficient means to solve security problems The main reason for positioning is that the current broadband construction network adopts the network mode of the two-layer structure, and multiple digital subscriber line access server (digital subscriber line multiplexer, DSLAM) equipment is connected to the broadband access server (BRAS) after being aggregated by the switch. , after the user's PPPOE authentication data packet reaches the BRAS, it is difficult for the BRAS or the authentication server Radius to uniquely identify the authenticated user, so that it is impossible to distinguish between a correct user and a malicious user

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0021] The DSLAM data forwarding process of VMAC of the present invention is:

[0022] For a DSLAM device to perform the basic functions of a switch, when learning addresses, the VMAC address corresponding to the user's MAC address can be calculated according to the VMAC mapping method configured by the user, and then these two MAC addresses are written into the corresponding hardware forwarding in the device. After the hardware forwarding device receives the user data, it determines the corresponding VMAC address according to the user MAC address, replaces it, and sends it to the BRAS; after receiving the data sent by the BRAS, it performs a replacement from the VMAC address to the MAC address. The hardware device completes the two-way MAC address conversion work.

[0023] Among them, the operation mode of VMAC:

[0024] 1. Configure the VMAC mapping through the device management interface of the DSLAM, that is, define the generation template of the 48-bit VMAC address.

...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a method that a DSLAM device implements virtual MAC addresses, including; when learning the basic functions and addresses of an exchanger, according to user configured VMAC mapping method, a DSLAM device generates a VMAC address corresponding to the user MAC address, and when configuring user data in a Radius or broadband connection sever, inputs user marked VMAC and binds it with user name. The invention completes a two-way MAC address conversion operation by hardware device in order to implement the only mark of the user, which ensures transmitting performance of the system.

Description

Technical field [0001] The invention belongs to the relevant field of broadband network access equipment system security and user management, and specifically relates to a method for realizing a virtual MAC address of a DSLAM equipment. Background technique [0002] With the large-scale construction of broadband infrastructure and the continuous expansion of broadband user groups, some system security issues have become increasingly prominent, such as account theft, IP address theft, etc., and telecom operators do not have sufficient means to solve security problems The main reason for positioning is that the current broadband construction network adopts the network mode of the two-layer structure, and multiple digital subscriber line access server (digital subscriber line multiplexer, DSLAM) equipment is connected to the broadband access server (BRAS) after being aggregated by the switch. , after the user's PPPOE authentication data packet arrives at the BRAS, it is difficu...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/24H04L12/26H04L12/28
Inventor 梁理李以鑫孙绪林任成珺
Owner GANGWAN NETWORK CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products