A virtual networking method and computer topology network

Abstract

The present invention discloses a virtual networking method and a computer topology network, which relates to the technical field of computer networks, and is used for member machines to form one or more local area networks, including the following steps: connecting all devices to a virtual network center in a tree structure, wherein the virtual network center is used as a tree root, a central switch, a management switch and other switches are used as nodes, and the connected ports are uplink ports or ports with the largest bandwidth; inputting relevant information of all devices into a database of the virtual network center; logging into the virtual network center, dividing the devices that need to form a virtual local area network into groups, and the virtual network center initializes the devices in the same group to form a virtual local area network, and performs network configuration, program configuration, authority configuration, function configuration, access configuration, and security configuration through the virtual network center. The present invention has the advantages of convenient networking, high scalability and high security.

Description

[Technical field]

[0001] The present invention relates to the technical field of computer networks, and in particular to a virtual networking method and a computer topology network. [Background technology]

[0002] With the continuous development of information technology, enterprises and organizations have higher and higher requirements for networks, requiring the network to be able to group different member machines according to actual needs to achieve reasonable resource allocation and access control. For example, within the same enterprise, computers in the same department need to be able to access each other, but computers in different departments are not allowed to access each other. At the same time, when a cross-departmental project team is formed, while the permissions, functions, and usage procedures involved in the same project team are the same, it is also necessary to meet the requirements that the same department can access each other, but different departments cannot access each other. This has brought great difficulties to the computer network management of the enterprise. With the increasing complexity of the enterprise organizational structure, the demand for network administrators has also increased, which has invisibly increased the cost of enterprise operation. In addition to enterprise needs, commercial network places such as Internet cafes and Internet cafes also involve situations where machines of different prices have different permissions, functions, and usage procedures, which also puts higher requirements on network administrators and increases operating costs. In addition, the requirements for security mechanisms in scenarios such as enterprises and commercial network places are also getting higher and higher. In the case of cross-department and cross-authority, it is required that permissions cannot be breached. This requires operators such as enterprises and commercial network venues to set up additional software or mechanisms to ensure security.

[0003] Traditional networking methods often seem to be unable to cope with complex network requirements. For example, traditional networking methods may lack flexibility and find it difficult to quickly adapt to the access of new devices and changes in network topology; in terms of scalability, when the network needs to be expanded, many challenges may be faced; in addition, in terms of security, traditional methods may not be able to effectively ensure the security of the network and are vulnerable to unauthorized access and attacks. [Summary of the invention]

[0004] The present invention aims to solve one of the technical problems in the related art to a certain extent. To this end, the present invention provides a virtual networking method, which has the advantages of convenient networking, high scalability and high security.

[0005] In order to achieve the above object, the present invention adopts the following technical solution:

[0006] A virtual networking method is used to manage a switch, a central switch, other switches connected to the central switch, and member machines connected to the other switches to form one or more virtual local area networks, comprising the following steps:

[0007] Connect the management switch, the central switch, other switches connected to the central switch, and the member machines connected to the other switches to the virtual network center in a tree structure, wherein the virtual network center is the root of the tree, the central switch, the management switch, and other switches are nodes, and the ports connected between the nodes are uplink ports or ports with the largest bandwidth;

[0008] Inputting relevant information of all devices into a database of a virtual network center, the relevant information including capability data, device information, link data, location data, attribution data and special description data;

[0009] Log in to the virtual network center, divide the member computers and / or other switches that need to form a virtual local area network into the same group, connect the devices in the same group through virtual network cables, and the virtual network center initializes the devices in the same group so that the divided groups form a virtual local area network. The virtual network center performs network configuration, program configuration, permission configuration, function configuration, access configuration, and security configuration on the devices in the virtual local area network, the devices between different virtual local area networks, and different virtual local area networks;

[0010] Among them, the security configuration includes:

[0011] Configure the management switch, central switch, and other switches to port isolation mode;

[0012] In port isolation mode, member machines in the same group can access each other, member machines in different groups cannot access each other without verification, and member machines in different groups with the same network configuration, program configuration, permission configuration, and function configuration can access each other.

[0013] Optionally, network configuration includes:

[0014] Add a virtual DHCP server to other switches and / or member machines that need specific dynamic addresses within the same group and / or between different groups, and the virtual DHCP server allocates virtual addresses to other switches and / or member machines;

[0015] Or, add a virtual NAT device to other switches and / or member machines that need to perform the same access within the same group and / or between different groups, and other switches and / or member machines perform the same access through the virtual NAT device; the same access is accessing the same external network website or the same member machine or the same network segment or the same server.

[0016] Optionally, program configuration includes:

[0017] Add the required program to other switches and / or member machines in the same group and / or between different groups that need to use the same program;

[0018] The virtual network center distributes the added programs to other switches and / or member machines.

[0019] Optional permission configuration includes:

[0020] Set the required permissions for other switches and / or member machines within the same group and / or between different groups that need to set the same permissions;

[0021] The virtual network center sets the required permissions for other switches and / or member machines.

[0022] Optional, functional configuration includes:

[0023] Add the required functions to other switches and / or member machines in the same group and / or between different groups that need to use the same function;

[0024] Functionality added by a virtual network center to other switches and / or member machine settings.

[0025] Optionally, when the central switch is connected to other new switches, the database of the virtual network center is traversed. If there is relevant information whose model matches the model of the other newly connected switches, the virtual network center directly uses the relevant information with matching models to configure the other newly connected switches; if there is no relevant information whose model matches the model of the other newly connected switches, the relevant information of the other newly connected switches is entered into the database of the virtual network center.

[0026] Optionally, different virtual network centers are connected via dedicated lines or VPNs. After the connection is established, member machines mounted under different virtual network centers can be classified into the same group.

[0027] Optional verification between member machines that need to access each other in different LANs includes:

[0028] Verification of the account of the member machine registered in the virtual network center and the virtual address of the member machine.

[0029] The present invention has the following beneficial effects:

[0030] The present invention improves the flexibility and scalability of local area network formation, and can easily access new switches and member machines, and perform corresponding initialization and configuration. At the same time, the security within and between local area networks is enhanced, and unauthorized access is effectively prevented through port isolation mode and verification between member machines. The present invention realizes resource sharing and mutual access between different local area networks, and through the connection and grouping functions of the virtual network center, member machines between different local area networks can be divided and accessed as needed. In addition, the present invention improves the management efficiency of the network, and reduces the complexity and workload of management through the centralized management and configuration of switches and member machines by the virtual network center.

[0031] In addition, the present invention also provides a computer topology network, including a management switch, a central switch, other switches connected to the central switch, and member computers connected to the other switches; the management switch, the central switch, other switches connected to the central switch, and member computers connected to the other switches are connected to a virtual network center in a tree structure, wherein the virtual network center serves as a tree root, the central switch, the management switch, and other switches serve as nodes, and the connected ports use uplink ports or ports with the largest bandwidth;

[0032] The devices in the computer topology network are formed into one or more local area networks by any of the virtual networking methods described above.

[0033] The beneficial effects of the computer topology network provided by the present invention are similar to the beneficial effects reasoning process of the aforementioned virtual networking method, which will not be repeated here.

[0034] These features and advantages of the present invention will be disclosed in detail in the following specific embodiments and drawings. The best embodiments or means of the present invention will be described in detail in conjunction with the drawings, but they are not intended to limit the technical solutions of the present invention. In addition, there are multiple features, elements, and components that appear in each of the following texts and drawings, and different symbols or numbers are marked for convenience, but they all represent components with the same or similar structures or functions.

Brief Description of the Drawings

[0035] The present invention will be further described below in conjunction with the accompanying drawings:

[0036] Figure 1 A network topology diagram of a single virtual network center in an embodiment of the present invention;

[0037] Figure 2 A network topology diagram in which multiple virtual network centers are connected via dedicated lines or VPNs in an embodiment of the present invention;

[0038] Figure 3A network topology diagram for grouping programs in an embodiment of the present invention;

[0039] Figure 4 A network topology diagram of authority grouping in an embodiment of the present invention;

[0040] Figure 5 A network topology diagram of functional groups in an embodiment of the present invention;

[0041] Figure 6 This is a network topology diagram for accessing packets in an embodiment of the present invention.

[0042] Among them, 1-virtual network center, 2-central switch, 3-management switch, 41 to 43-other switches, 501 to 512-member machines, 6-local area network, 7-virtual DHCP server, 8-program group, 9-authority group, 10-function group, 11-access group. [Specific implementation method]

[0043] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements with the same or similar functions. The embodiments in the implementation manner are intended to be used to explain the present invention and should not be construed as limiting the present invention.

[0044] References in this specification to "one embodiment" or "an example" or "an example" mean that a particular feature, structure, or characteristic described in conjunction with the embodiment itself may be included in at least one embodiment of the present patent disclosure. The appearance of the phrase "in one embodiment" in various places in the specification does not necessarily refer to the same embodiment.

[0045] As a first aspect of the present invention, the present invention provides a virtual networking method for managing a switch 3, a central switch 2, other switches connected to the central switch 2, and member machines connected to other switches to form one or more local area networks. More specifically, the use scenario of the virtual networking method involved in this embodiment is a business network place such as an enterprise, an Internet cafe, and an Internet cafe. In these use scenarios, the management switch 3, the central switch 2, and other switches are only distinguished by the logical position of the switch in the physical network and the functions provided. Those skilled in the art can flexibly select the switch according to the actual use scenario. At the same time, in this embodiment, since the management switch 3, the central switch 2, and other switches are only distinguished based on the logical position and function, those skilled in the art can also redefine the management switch 3, the central switch 2, and other switches according to the networking requirements. For example, the management switch 3 before re-networking is defined as the central switch 2 after re-networking. The member machine involved in this embodiment can be a diskless terminal computer or an ordinary computer with a disk, which is not limited here. Preferably, the member machine involved in this embodiment is a diskless terminal computer. The virtual networking method provided in this embodiment is to form one or more local area networks for multiple diskless computers as terminals in an enterprise or business network location, such as Figure 1 The virtual networking method provided in this embodiment includes the following steps:

[0046] Hardware connection steps: connect the management switch 3, the central switch 2, other switches connected to the central switch 2, and the member machines connected to the other switches to the virtual network center 1 in a tree structure, wherein the virtual network center 1 serves as the root of the tree, and the central switch 2, the management switch 3 and other switches serve as nodes. In this embodiment, the virtual network center 1 is a control center or operating platform for managing and monitoring virtual networking. It is used to configure, monitor and maintain virtual network resources. In addition, in this embodiment, the virtual network center 1 can provide a visual interface. Through the visual interface provided by the virtual network center 1, the network administrator can easily manage and adjust the topology, grouping, access rights, program usage rights, function usage rights, etc. of the virtual network. Generally speaking, the closer the switch is to the root of the tree, the better its performance is. In other embodiments, if a certain location requires a high-speed network with a large bandwidth, those skilled in the art should also be aware of the need to provide better performance equipment. Specifically in this embodiment, the management switch 3 and the central switch 2 are each equipped with one, and the other switches are equipped with three. Figure 1The order from left to right in the figure is other switches 41, other switches 42, and other switches 43. In other embodiments, the number of other switches can be flexibly selected by those skilled in the art according to actual needs, and is not limited here. The ports connected between switches use uplink ports or ports with the largest bandwidth. If there are no uplink ports or ports with the largest bandwidth, ordinary ports are used. Other ports of other switches are connected to member machines. In this embodiment, each switch mounts four member machines. Figure 1 The order from left to right is:

[0047] The other switch 41 is mounted with member machines 501, 502, 503, and 504;

[0048] The other switches 42 are mounted with member machines 505, 506, 507, and 508;

[0049] The other switches 43 are mounted with member machines 509, 510, 511, and 512;

[0050] In other embodiments, the number of member machines mounted on other switches may also be flexibly selected by those skilled in the art according to actual needs, and is not limited here.

[0051] Storage step: input relevant information of all devices into the database of virtual network center 1. Relevant information can be imported from the external network center synchronization or U disk, etc., which is not limited here. Relevant information includes capability data (including device model, version, number of ports, standardized instruction template), device information, link data, location data, attribution data and special description data, so that all switches can be formatted into a unified logical interface supported by the platform, and the location layout and physical connection status of network devices and location topology diagrams are automatically generated. In this embodiment, special description data has the general technical meaning of this field and is not limited here.

[0052] Division steps: The virtual network card set on the member machine is started, and the member machine logs in to the virtual network center 1. According to the operation and maintenance requirements, the member machines and / or other switches that need to form the local area network 6 are divided into the same group. Figure 1 As shown, in this embodiment, the member machine 501 mounted on the other switch 41, the member machine 506 mounted on the other switch 42, and the member machine 511 mounted on the other switch 43 are divided into the same group; the member machine 502 mounted on the other switch 41, the member machine 507 mounted on the other switch 42, and the member machine 512 mounted on the other switch 43 are divided into the same group. The virtual network center 1 allocates network segments to the two divided groups. By allocating network segments to different groups, IP conflicts among the member machines in each group are avoided.

[0053] Networking steps: The devices in the same group are linked by virtual network cables. Specifically in this example, member machines 501, 506, and 511 are linked by virtual network cables, and member machines 502, 507, and 512 are linked by another virtual network cable. The virtual network center 1 automatically generates initialization instructions based on actual needs and physical topology, and performs initialization settings on the devices in the same group, so that the divided groups form a virtual local area network. The network topology diagram of the local area network 6 is shown in FIG. Figure 1 As shown, member machines 501, 506 and 511 are one local area network 6, and member machines 502, 507 and 512 are another local area network 6. Through the virtual network center 1, network configuration, program configuration, permission configuration, function configuration, access configuration and security configuration are performed on devices within the virtual local area network, devices between different virtual local area networks and different virtual local area networks.

[0054] The instructions for configuring the switch are sent from the virtual network center 1 to other switches through the management switch 3 for configuration. The uplink and downlink data of other switches are forwarded to the virtual network center 1 through the uplink port via the central switch 2. At the same time, the uplink port can also be used to perform expansion operations such as cascading and stacking of switch devices. In other embodiments, the network administrator can also build a local area network with any other number and any position of member units according to actual needs. The physical network environment of the servers in the same computer room is fixed. Whether network access is allowed between multiple servers has been determined at the beginning of the server installation. If changes are required, maintenance or redeployment of VPN is required, which is very inflexible and time-consuming and labor-intensive. The virtual networking method provided in this embodiment does not require complex hardware equipment and high cost investment, nor does it require highly skilled network administrators. In this embodiment, through the virtual network center 1, the administrator can freely network, thereby realizing flexible, efficient, highly visualized and highly intelligent network deployment.

[0055] At the same time, when the configuration is completed, if it is found that the capabilities of some devices cannot meet the needs, the network can be verified through the virtual network center 1 to provide the capability range of the corresponding device, or give the best link method for the corresponding device. This can output a new physical topology as needed, adjust the current device position and link according to the new physical topology, or replace new devices.

[0056] In the present disclosure, there is no particular limitation on how to perform the networking steps. As an optional implementation, the network configuration includes:

[0057] like Figure 1As shown, other switches and / or member machines that need specific dynamic addresses are added to the same group, i.e., the local area network 6 in this embodiment, and / or between different groups, i.e., between the local area networks 6 in this embodiment, by the virtual DHCP server 7, and the virtual DHCP server 7 allocates virtual addresses to other switches and / or member machines. The virtual network center 1 sets an IP address for the central switch 2 according to the hardware address of the connected central switch 2, and the central switch 2 sets IP addresses for other connected switches. In this embodiment, the virtual DHCP server 7 is provided by the virtual network center 1, and the virtual network center 1 allocates, manages or recycles IPs, resources, etc. according to the business process or business scenario.

[0058] The network configuration also includes:

[0059] Add virtual NAT devices to other switches and / or member machines that need to perform the same access in the same group, i.e., the local area network 6 in this embodiment, and / or between different groups, i.e., between the local area networks 6 in this embodiment, and other switches and / or member machines perform the same access through the virtual NAT device. In this embodiment, the same access refers to accessing the same external network address or the same member machine or the same network segment or the same server.

[0060] like Figure 1 As shown, when the local area network 6 composed of member machines 501, 506 and 511 needs to access a certain external network address, the address of the external network to be accessed is added to the local area network 6 through the virtual network center 1, so that the local area network 6 can be seamlessly connected with the external network. This enables the member machines in the local area network 6 to easily access the resources of the external network, meets the user's demand for external information and services, and expands the function and application scope of the network. In terms of cost, this method is simple to operate, does not require the purchase of additional complex equipment or high fees, and only requires a simple IP address addition operation to achieve external network access, which has the advantages of low cost and convenient implementation.

[0061] like Figure 6 As shown, member machines 511, 507 and 512 in the local area network 6 are divided into the same access group 11, and the member machines in the access group 11 need to perform the same access.

[0062] Member machines 511, 507 and 512 have the same access through the virtual NAT device, which realizes the refined management of access rights, ensures that member machines can only access their authorized resources, and improves the security of the network and the controllability of access. In terms of cost, refined access management can reduce unnecessary network traffic and resource occupation, and reduce network operating costs. For example, it avoids network congestion and resource waste caused by illegal access or misaccess, and improves the stability and performance of the network.

[0063] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, the program configuration includes:

[0064] Add the required program to other switches and / or member machines that need to use the same program within the same group, that is, the local area network 6 in this embodiment, and / or between different groups, that is, between the local area networks 6 in this embodiment; Figure 3 As shown, in this embodiment, the member machines 501, 506 and 507 that have completed the establishment of the local area network are divided into the same program group 8, and the member machines in the program group 8 need to use the same program.

[0065] The virtual network center 1 distributes the added programs to other switches and / or member machines, which makes the distribution of programs more efficient and accurate, avoids unnecessary program installation and configuration, and improves the convenience and consistency of member machines using programs. In terms of cost, centralized distribution of programs can reduce repeated purchases and installations of software, and reduce the cost of software licensing and deployment. In addition, accurate distribution can also avoid waste of resources and improve the utilization of software resources.

[0066] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, the permission configuration includes:

[0067] Set the required permissions to other switches and / or member machines within the same group, i.e., the local area network 6 in this embodiment, and / or between different groups, i.e., between the local area networks 6 in this embodiment, where the same permissions need to be set; Figure 4 As shown, in this embodiment, the member machines 511, 502 and 512 that have completed the establishment of the local area network are divided into the same permission group 9.

[0068] The virtual network center 1 sets the required permissions for other switches and / or member machines, realizing centralized management and unified setting of permissions, ensuring that the operations of member machines in the network comply with the corresponding permission regulations, preventing unauthorized operations and data leakage, and enhancing the security of the network and the standardization of management. In terms of cost, centralized management of permissions can reduce the complexity of permission setting and management, and reduce management costs. At the same time, standardized permission management can reduce work accidents caused by permission issues and reduce potential security risk costs.

[0069] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, the functional configuration includes:

[0070] Add the required functions to other switches and / or member machines that need to use the same function within the same group, that is, within the local area network 6 in this embodiment, and / or between different groups, that is, between the local area networks 6 in this embodiment; Figure 5 As shown, in this embodiment, the member machines 506, 511 and 502 that have completed the establishment of the local area network are divided into the same functional group 10.

[0071] The functions added by the virtual network center 1 to other switches and / or member machines make the allocation and use of functions more reasonable and efficient. Member machines can quickly obtain and use corresponding functions as required, which improves user experience and work efficiency. In terms of cost, function grouping and centralized setting can avoid repeated development and configuration of functions and reduce the cost of function implementation. At the same time, reasonable function allocation can improve the efficiency of function use and reduce unnecessary function idleness and waste.

[0072] It should be pointed out that local area networks, program groups, permission groups, functional groups, and access groups can overlap. For example, after the member computers under several local area networks form a program group, the member computers in the program group and other member computers not included in the program group can still form a permission group, a functional group, or an access group.

[0073] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, the security configuration includes:

[0074] The management switch 3, the central switch 2 and other switches are configured to the port isolation mode. After setting to the port isolation mode, all devices connected to the same switch cannot access each other through the switch. In the prior art, a switch has multiple ports, and most of them are in the interconnection mode. Therefore, all switches need to be set to the port isolation mode first.

[0075] In the port isolation mode, member machines in the same group, i.e., the local area network 6 in this embodiment, can access each other. Specifically in this embodiment, in the local area network 6 composed of member machines 501, 506, and 511, the three member machines can access each other through the virtual network center 1; in the local area network 6 composed of member machines 502, 507, and 512, the three member machines can access each other through the virtual network center 1. Member machines between different groups, i.e., between local area networks 6 in this embodiment, cannot access each other without verification. Specifically in this embodiment, member machines 501, 506, and 511 and member machines 502, 507, and 512 belong to two different local area networks 6, so member machines 501, 506, or 511 cannot access any of member machines 502, 507, and 512 without verification. The ports of the switch are all set to isolation mode, and member machines between different local area networks 6 cannot access each other without verification, which greatly improves the security of the network and the convenience of management, can effectively avoid unauthorized access and interference, and ensure the stable operation of the network.

[0076] Member machines of different groups with the same network configuration, program configuration, permission configuration, and function configuration can access each other.

[0077] After the division of access group 11 is completed, member machines between different local area networks can access each other after being divided into the same access group 11. In this embodiment, although member machine 511 and member machine 512 belong to different local area networks, and member machine 507 and member machine 512 belong to different local area networks, since these three member machines belong to the same access group 11, these three member machines can access each other. This allows network administrators to quickly and easily configure project team members when forming a cross-departmental project team, meeting the collaborative work requirements of member machines for specific access needs. Member machines can communicate and collaborate effectively within the same access group 11, and jointly complete tasks involving specific access resources, thereby improving the coordination and efficiency of work. From a cost perspective, collaborative work can improve work efficiency, reduce cost increases caused by poor communication and collaboration, avoid duplication or errors in work caused by poor information flow, and improve the accuracy and efficiency of work.

[0078] After the program group 8 is divided, the member machines between different local area networks can access each other after being divided into the same program group 8. In this embodiment, although member machine 501 and member machine 507 belong to different local area networks, and member machine 506 and member machine 507 belong to different local area networks, since these three member machines belong to the same program group 8, these three member machines can access each other. This allows the network administrator to configure the project team members conveniently and quickly when forming a project team across departments, and promotes the sharing and collaborative work of program resources. Member machines can communicate and collaborate more conveniently, and use the same program to complete related tasks together, thereby improving work efficiency and teamwork ability. From a cost perspective, the utilization rate of the program can be improved, and the cost of each member machine needing to purchase and install the program separately is reduced. At the same time, collaborative work can improve work efficiency, shorten the project cycle, and thus reduce overall operating costs.

[0079] After completing the division of permission group 9, member machines between different local area networks can access each other after being divided into the same permission group 9. In this embodiment, although member machine 511 and member machine 502 belong to different local area networks, and member machine 511 and member machine 512 belong to different local area networks, since these three member machines belong to the same permission group 9, these three member machines can access each other. This allows network administrators to easily and quickly configure project team members when forming a cross-departmental project team, and facilitates collaboration and data sharing between member machines based on permissions. Under the premise of ensuring security, member machines can more smoothly exchange information and share resources, improving the coordination and efficiency of work. From a cost perspective, effective permission management and collaboration can improve work efficiency, reduce work delays and cost increases caused by permission issues, avoid duplication or stagnation of work due to insufficient permissions, and improve the efficiency of human resource utilization.

[0080] After the division of the functional group 10 is completed, the member machines between different local area networks can access each other after being divided into the same functional group 10. In this embodiment, although member machine 506 and member machine 502 belong to different local area networks, and member machine 511 and member machine 502 belong to different local area networks, since these three member machines belong to the same functional group 10, these three member machines can access each other. This allows the network administrator to configure the project team members conveniently and quickly when forming a project team across departments, which is conducive to the sharing and collaborative use of functions. Member machines can better collaborate to complete tasks with the same functional requirements, give full play to the role of functions, and improve the quality and effect of work. From a cost perspective, function sharing can improve the utilization rate of functions and reduce the cost of each member machine to configure functions separately. In addition, the collaborative use of functions can improve work efficiency and reduce the cost and time investment of projects.

[0081] In the present disclosure, there is no special limitation on how to perform the storage step. As an optional implementation, when the central switch 2 is connected to a new other switch, the database of the virtual network center 1 is traversed. If there is relevant information whose model matches the model of the newly connected other switch, the virtual network center 1 directly uses the relevant information whose model matches to configure the newly connected other switch, which greatly improves the efficiency and automation of networking, reduces manual intervention, avoids errors and cost increases that may be caused by manual configuration, and thus reduces labor costs.

[0082] If there is no relevant information that matches the model of the newly connected other switches, the relevant information of the newly connected other switches will be entered into the database of the virtual network center 1, which facilitates the subsequent switch management and configuration, allowing the network to quickly adapt to the access of new devices and has strong scalability. If the initialization is successful, the newly connected other switches are successfully connected to the central switch 2, ensuring normal communication and collaboration between network devices. If the initialization is unsuccessful, it means that there is an error in the storage and manual verification is required.

[0083] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, different virtual network centers 1 are connected via dedicated lines or VPNs. Dedicated lines or VPNs are common technical meanings in this field and are not described here. After the connection is established, the member machines mounted under different virtual network centers 1 can be divided into the same group. Figure 2 As shown, two virtual network centers 1 are connected via a dedicated line or VPN. Figure 2 The member machines 504, 508, and 509 mounted under the virtual network center 1 on the left side of the middle are the same as those located at Figure 2 The member machines 503, 507 and 511 mounted under the virtual network center 1 on the right side of the middle can be divided into the same group. Then, any one of the two virtual network centers 1 can allocate network segments for the divided groups to avoid IP conflicts. At the same time, a virtual DHCP server 7 is added to the divided groups, and the virtual DHCP server 7 allocates virtual addresses to the member machines in the group, and then the divided groups form a local area network 6 across the virtual network center 1.

[0084] Different virtual network centers 1 are connected through dedicated lines or VPNs, so that the scenarios used by the virtual networking method provided by the present invention are further expanded. Free networking can be achieved not only in the same physical network, but also in different physical networks, realizing resource integration and sharing across virtual network centers 1, so that member machines in different regions or organizations can work together, improving resource utilization and work efficiency. When an enterprise has branches in multiple locations, and member machines under different branches need to form departments across regions to form a local area network 6, the network management personnel of the enterprise can still use the same method to freely network, without the need for additional software and hardware adjustments and deployment. From a cost perspective, connecting different virtual network centers 1 through dedicated lines or VPNs fully utilizes the existing network infrastructure, without the need for large-scale hardware upgrades or modifications, and reducing the cost and difficulty of networking. In addition, the integration and sharing of resources can also avoid duplicate investment, further reducing costs.

[0085] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, the verification between member machines that need to access each other under different local area networks 6 includes:

[0086] Verification of the account of the member machine registered in the virtual network center 1 and verification of the virtual address of the member machine.

[0087] Through these strict verification measures, it can be ensured that only member machines that meet the requirements can access each other, effectively preventing illegal access and malicious attacks, and ensuring the security of the network and the confidentiality of data. In terms of cost, this verification method is mainly implemented through software and systems, and does not require additional hardware costs. At the same time, effective security measures can reduce potential losses such as data leakage and system damage caused by security issues, and reduce the subsequent possible repair and recovery costs.

[0088] At the same time, this embodiment also provides a computer topology network, which is suitable for use scenarios such as enterprises, Internet cafes, cyber cafes and other commercial network places, including management switches, central switches, other switches connected to the central switch, and member machines connected to other switches. In these use scenarios, the management switch, the central switch and other switches are only distinguished by the logical position of the switch in the physical network. Those skilled in the art can flexibly select the switch according to the actual use scenario. The member machine involved in this embodiment can be a diskless terminal computer or an ordinary computer with a disk, which is not limited here. The management switch, the central switch, other switches connected to the central switch and the member machines connected to other switches are connected to the virtual network center in a tree structure, wherein the virtual network center is the root of the tree, the central switch, the management switch and other switches are nodes, and the connected ports are uplink ports or ports with the largest bandwidth; the member machines in the computer topology network provided in this embodiment are formed into one or more local area networks by the virtual networking method described in any of the above items.

[0089] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Those skilled in the art should understand that the present invention includes but is not limited to the contents described in the drawings and the above specific embodiments. Any modification that does not deviate from the functional and structural principles of the present invention will be included in the scope of the claims.

Claims

1. A virtual networking method, characterized in that: The virtual networking method is used to manage a switch, a central switch, other switches connected to the central switch, and member machines connected to the other switches to form one or more virtual local area networks, and includes the following steps: Connect the management switch, the central switch, other switches connected to the central switch, and the member machines connected to the other switches to the virtual network center in a tree structure, wherein the virtual network center is the root of the tree, the central switch, the management switch, and other switches are nodes, and the ports connected between the nodes are uplink ports or ports with the largest bandwidth; Inputting relevant information of all devices into a database of a virtual network center, the relevant information including capability data, device information, link data, location data, attribution data and special description data; Log in to the virtual network center, divide the member computers and / or other switches that need to form a virtual local area network into the same group, connect the devices in the same group through virtual network cables, and the virtual network center initializes the devices in the same group so that the divided groups form a virtual local area network. The virtual network center performs network configuration, program configuration, permission configuration, function configuration, access configuration, and security configuration on the devices in the virtual local area network, the devices between different virtual local area networks, and different virtual local area networks; Among them, the security configuration includes: Configure the management switch, central switch, and other switches to port isolation mode; In port isolation mode, member machines in the same group can access each other, member machines in different groups cannot access each other without verification, and member machines in different groups with the same network configuration, program configuration, permission configuration, and function configuration can access each other.

2. The virtual networking method according to claim 1, characterized in that: The network configuration includes: Add a virtual DHCP server to other switches and / or member machines that need specific dynamic addresses within the same group and / or between different groups, and the virtual DHCP server allocates virtual addresses to other switches and / or member machines; Or, add a virtual NAT device to other switches and / or member machines that need to perform the same access within the same group and / or between different groups, and other switches and / or member machines perform the same access through the virtual NAT device; the same access is accessing the same external network website or the same member machine or the same network segment or the same server.

3. The virtual networking method according to claim 1, characterized in that: Program configuration includes: Add the required program to other switches and / or member machines in the same group and / or between different groups that need to use the same program; The virtual network center distributes the added programs to other switches and / or member machines.

4. The virtual networking method according to claim 1, characterized in that: Permission configuration includes: Set the required permissions for other switches and / or member machines within the same group and / or between different groups that need to set the same permissions; The virtual network center sets the required permissions for other switches and / or member machines.

5. The virtual networking method according to claim 1, characterized in that: Functional configuration includes: Add the required functions to other switches and / or member machines in the same group and / or between different groups that need to use the same function; Functionality added by a virtual network center to other switches and / or member machine settings.

6. The virtual networking method according to any one of claims 1 to 5, characterized in that: When the central switch is connected to a new switch, the database of the virtual network center is traversed. If there is relevant information whose model matches the model of the newly connected switch, the virtual network center directly uses the relevant information with the matching model to configure the newly connected switch; if there is no relevant information whose model matches the model of the newly connected switch, the relevant information of the newly connected switch is entered into the database of the virtual network center.

7. The virtual networking method according to any one of claims 1 to 5, characterized in that: Different virtual network centers are connected via dedicated lines or VPNs. After the connection is established, member machines mounted under different virtual network centers can be divided into the same group.

8. The virtual networking method according to any one of claims 1 to 5, characterized in that: Verification between member machines that need to access each other in different LANs includes: Verification of the account of the member machine registered in the virtual network center and the virtual address of the member machine.

9. A computer topology network, characterized in that: The computer topology network includes a management switch, a central switch, other switches connected to the central switch, and member computers connected to the other switches; the management switch, the central switch, other switches connected to the central switch, and member computers connected to the other switches are connected to the virtual network center in a tree structure, wherein the virtual network center serves as the tree root, the central switch, the management switch, and other switches serve as nodes, and the connected ports are uplink ports or ports with the largest bandwidth; The devices in the computer topology network are formed into one or more local area networks by the virtual networking method described in any one of claims 1 to 8.

Images