A VXLAN tunnel authentication method, system, access gateway and network device

Abstract

The embodiment of the present disclosure provides a VXLAN tunnel authentication method, system, access gateway and network device, which is applied to the access gateway of the computing power network resource pool. The method comprises the following steps: in the case that it is determined that the VXLAN tunnel needs to be authenticated based on the bearing IP address of the VXLAN tunnel, a challenge data packet is sent to the network device; a first challenge response data packet and a second challenge response data packet are received, which are fed back by the network device based on the first identifier carried in the challenge data packet; the tunnel identifier and the authentication ciphertext are obtained from the VNI fields of the first challenge response data packet and the second challenge response data packet by using the second identifier carried in the VNI field of the first challenge response data packet and the third identifier carried in the VNI field of the second challenge response data packet; and the VXLAN tunnel authentication is performed by using the tunnel identifier and the authentication ciphertext, so as to obtain the authentication result. By using the technical solution provided by the embodiment of the present disclosure, the cost of business construction and operation can be reduced, and the complexity of the VXLAN tunnel authentication system can be reduced.

Images