Virtual networking method and computer topology network

Abstract

The invention discloses a virtual networking method and a computer topology network, relates to the technical field of computer networks, is used for a member machine to establish one or more local area networks, and comprises the following steps: all switches are set to be in a port isolation mode, the member machine is connected with other switches, and the other switches are connected with a management switch and a central switch; the management switch and the central switch are connected to the virtual network center, the virtual network center sets an IP address for the central switch, the central switch sets IP addresses for other switches, virtual network cards of member machines are started, the member machines log in the virtual network center, any number of member machines are divided into the same group, and the virtual network center distributes network segments. The virtual DHCP server allocates virtual addresses to the member machines to form a local area network, the member machines in the local area network can access each other in the center, and the member machines in different local area networks cannot access each other. The system has the advantages of convenient networking, high expandability and high safety.

Description

Technical Field

[0001] The present invention relates to the technical field of computer networks, and in particular to a virtual networking method and a computer topology network. Background Art

[0002] With the continuous development of information technology, schools, government agencies, institutions, enterprises and organizations have higher and higher requirements for networks, requiring the network to be able to group different member machines according to actual needs to achieve reasonable resource allocation and access control. For example, within the same enterprise, computers in the same department need to be able to access each other, but computers in different departments are not allowed to access each other. At the same time, when a cross-departmental project team is formed, while the permissions, functions, and usage procedures involved in the same project team are the same, it is also necessary to meet the requirements that the same department can access each other, but different departments cannot access each other. This has brought great difficulties to the computer network management of enterprises. With the increasing complexity of the organizational structure of schools, governments, institutions, enterprises and institutions, the demand for network administrators has also increased, which has invisibly increased the cost of enterprise operation. In addition, commercial network places such as Internet cafes and Internet cafes also involve situations where machines of different prices have different permissions, functions, and usage procedures, which also puts higher requirements on network administrators and increases operating costs. In addition, scenarios such as enterprises and commercial network places have higher and higher requirements for security mechanisms. In the case of cross-department and cross-authority, permissions are required not to be breached. This requires operators such as enterprises and commercial network venues to set up additional software or mechanisms to ensure security.

[0003] Traditional networking methods often seem to be unable to cope with complex network requirements. For example, traditional networking methods may lack flexibility and find it difficult to quickly adapt to the access of new devices and changes in network topology; in terms of scalability, when the network needs to be expanded, many challenges may be faced; in addition, in terms of security, traditional methods may not be able to effectively ensure the security of the network and are vulnerable to unauthorized access and attacks. Summary of the invention

[0004] The present invention aims to solve one of the technical problems in the related art to a certain extent. To this end, the present invention provides a virtual networking method, which has the advantages of convenient networking, high scalability and high security.

[0005] In order to achieve the above object, the present invention adopts the following technical solution:

[0006] A virtual networking method for managing a switch, a central switch, other switches connected to the central switch, and member machines connected to the other switches to form one or more local area networks, comprising the following steps:

[0007] Set the management switch, central switch and other switches to port isolation mode, where port 1 of other switches is the management port, port 2 is the uplink port, and other ports are isolation ports;

[0008] Connect the management ports of other switches to ports other than port 1 of the management switch, connect the uplink ports of other switches to ports other than port 2 of the central switch, and connect the isolation ports of other switches to the member machines;

[0009] Port 1 of the management switch and port 2 of the central switch are connected to the virtual network center. The virtual network center sets an IP address for the central switch according to the hardware address of the connected central switch, and the central switch sets IP addresses for other connected switches.

[0010] Import the models, default addresses, IP addresses, port numbers, default accounts, default passwords, and isolation instructions of other switches into the database of the virtual network center as an initialization script;

[0011] The virtual network card set on the member machine is started, and the member machine logs in to the virtual network center. The member machines that need to form a local area network are divided into the same group, and the virtual network center allocates network segments for the divided groups;

[0012] A virtual DHCP server is added to the completed group, and the virtual DHCP server allocates virtual addresses to the member machines in the group. The divided group then forms a local area network. The member machines in the local area network access each other through the virtual network center. Member machines between different local area networks cannot access each other without verification.

[0013] Optionally, when the central switch is connected to a new other switch, the first port of the newly connected other switch is a management port, and the second port is an uplink port. The management port of the newly connected other switch is connected to other ports other than the first port of the management switch, the uplink port of the newly connected other switch is connected to other ports other than the second port of the central switch, and other ports of the newly connected other switch are connected to member machines;

[0014] Traverse the database of the virtual network center. If there is an initialization script whose model matches the model of the newly connected other switches, the virtual network center directly uses the initialization script with the matching model to initialize the other newly connected switches. After initialization, the other newly connected switches are configured to port isolation mode. If there is no initialization script whose model matches the model of the newly connected other switches, the model, default address, IP address, port number, default account, default password, and isolation instruction of the other newly connected switches are formed into an initialization script and imported into the database of the virtual network center.

[0015] Optionally, after the model, default address, IP address, port number, default account, default password, and isolation instructions of the newly connected other switches form an initialization script and are imported into the database of the virtual network center, the virtual network center uses the newly entered initialization script to initialize the newly connected other switches. If the initialization is successful, the newly connected other switches are successfully connected to the central switch.

[0016] Optionally, when the local area network formed by the divided groups needs to access an external network, the IP address of the external network that needs to be accessed is added to the local area network.

[0017] Optionally, different virtual network centers are connected via dedicated lines or VPNs. After the connection is established, member machines mounted under different virtual network centers can be classified into the same group.

[0018] Optional verification between member machines that need to access each other in different LANs includes:

[0019] Verification of the account of the member machine registered in the virtual network center and the virtual address of the member machine.

[0020] Optionally, the virtual networking method further includes a program grouping step, and the program grouping step includes the following sub-steps:

[0021] Divide the member machines that need to use the same program into the same program group;

[0022] Add the required programs to the program group, and the added programs will be distributed to the member machines in the program group by the virtual network center;

[0023] Member machines in different local area networks can access each other after being divided into the same program group.

[0024] Optionally, the virtual networking method further includes a permission grouping step, and the permission grouping step includes the following sub-steps:

[0025] Divide the member machines that need to set the same permissions into the same permission group;

[0026] Set the required permissions for the permission group. The permissions set are set by the virtual network center to the member machines in the permission group.

[0027] Member computers in different local area networks can access each other after being divided into the same permission group.

[0028] Optionally, the virtual networking method further includes a function grouping step, and the function grouping step includes the following sub-steps:

[0029] Divide the member machines that need to use the same function into the same functional group;

[0030] Add the functions you need to use to the function group. The added functions are set by the virtual network center to the member machines in the group.

[0031] Member machines in different local area networks can access each other after being divided into the same functional group.

[0032] Optionally, the virtual networking method further includes an access grouping step, and the access grouping step includes the following sub-steps:

[0033] The member machines that need to perform the same access are further divided into the same access group, where the same access means accessing the same member machine, the same network segment, or the same server;

[0034] Add the IP addresses that need to be accessed to the access group;

[0035] Member machines in different local area networks can access each other after being divided into the same access group.

[0036] Optionally, the other switch also includes a redundant interface and a backup interface, and the redundant interface and the backup interface are one of the other ports of the other switch. The backup interface is connected to a backup member machine to back up data in the local area network, and the redundant interface is connected to a member machine to start when the member machine link in the local area network is disconnected.

[0037] The present invention has the following beneficial effects:

[0038] The present invention improves the flexibility and scalability of local area network formation, and can easily access new switches and member machines, and perform corresponding initialization and configuration. At the same time, the security within and between local area networks is enhanced, and unauthorized access is effectively prevented through port isolation mode and verification between member machines. The present invention realizes resource sharing and mutual access between different local area networks, and through the connection and grouping functions of the virtual network center, member machines between different local area networks can be divided and accessed as needed. In addition, the present invention improves the management efficiency of the network, and reduces the complexity and workload of management through the centralized management and configuration of switches and member machines by the virtual network center.

[0039] In addition, the present invention also provides a computer topology network, including a management switch, a central switch, other switches connected to the central switch, and member computers connected to the other switches;

[0040] The management switch, the central switch and other switches are set to a port isolation mode, wherein the No. 1 port of other switches is a management port, the No. 2 port is an uplink port, and the other ports are isolation ports. The management ports of other switches are connected to other ports other than the No. 1 port of the management switch, the uplink ports of other switches are connected to other ports other than the No. 2 port of the central switch, and the isolation ports of other switches are connected to member machines; the No. 1 port of the management switch and the No. 2 port of the central switch are connected to the virtual network center;

[0041] The member machines in the computer topology network form one or more local area networks using any of the virtual networking methods described above.

[0042] The beneficial effects of the computer topology network provided by the present invention are similar to the beneficial effects reasoning process of the aforementioned virtual networking method, which will not be repeated here.

[0043] These features and advantages of the present invention will be disclosed in detail in the following specific embodiments and drawings. The best embodiments or means of the present invention will be described in detail in conjunction with the drawings, but they are not intended to limit the technical solutions of the present invention. In addition, there are multiple features, elements, and components that appear in each of the following texts and drawings, and different symbols or numbers are marked for convenience, but they all represent components with the same or similar structures or functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The present invention will be further described below in conjunction with the accompanying drawings:

[0045] Figure 1 A network topology diagram of a single virtual network center in an embodiment of the present invention;

[0046] Figure 2 A network topology diagram in which multiple virtual network centers are connected via dedicated lines or VPNs in an embodiment of the present invention;

[0047] Figure 3 A network topology diagram for grouping programs in an embodiment of the present invention;

[0048] Figure 4 A network topology diagram of authority grouping in an embodiment of the present invention;

[0049] Figure 5 A network topology diagram of functional groups in an embodiment of the present invention;

[0050] Figure 6 This is a network topology diagram for accessing packets in an embodiment of the present invention.

[0051] Among them, 1-virtual network center, 2-central switch, 3-management switch, 41 to 43-other switches, 501 to 512-member machines, 6-local area network, 7-virtual DHCP server, 8-program group, 9-authority group, 10-function group, 11-access group. DETAILED DESCRIPTION

[0052] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements with the same or similar functions. The embodiments in the implementation manner are intended to be used to explain the present invention and should not be construed as limiting the present invention.

[0053] References in this specification to "one embodiment" or "an example" or "an example" mean that a particular feature, structure, or characteristic described in conjunction with the embodiment itself may be included in at least one embodiment of the present patent disclosure. The appearance of the phrase "in one embodiment" in various places in the specification does not necessarily refer to the same embodiment.

[0054] As a first aspect of the present invention, the present invention provides a virtual networking method for managing switches, central switches, other switches connected to the central switch, and member machines connected to other switches to form one or more local area networks. More specifically, the use scenarios of the virtual networking method involved in this embodiment are non-profit organizations such as schools, government agencies, and institutions, as well as commercial network places such as enterprises, Internet cafes, and Internet cafes. In these use scenarios, the management switch, the central switch, and other switches are only distinguished by the logical position of the switch in the physical network and the functions provided. Those skilled in the art can flexibly select the switch according to the actual use scenario. At the same time, in this embodiment, since the management switch, the central switch, and other switches are only distinguished based on the logical position and function, those skilled in the art can also redefine the management switch, the central switch, and other switches according to the networking requirements. For example, the management switch before re-networking is defined as a central switch after re-networking. The member machine involved in this embodiment can be a diskless terminal computer or an ordinary computer with a disk, which is not limited here. Preferably, the member machine involved in this embodiment is a diskless terminal computer. The virtual networking method provided in this embodiment is to form one or more local area networks for multiple diskless computers as terminals in an enterprise or business network location, such as Figure 1 The virtual networking method provided in this embodiment includes the following steps:

[0055] Configuration steps: Set the management switch 3, the central switch 2 and other switches to port isolation mode. After setting to port isolation mode, all devices connected to the same switch cannot access each other through the switch. In this embodiment, the management switch 3 and the central switch 2 are each equipped with one, and the other switches are equipped with three. Figure 1 The order from left to right is other switches 41, other switches 42 and other switches 43. In other embodiments, the number of other switches can be flexibly selected by those skilled in the art according to actual needs, and is not limited here. In the prior art, a switch has multiple ports, and most of them are in interconnection mode. Therefore, it is necessary to set all switches to port isolation mode in advance. Among them, the three other switches are, port number 1 is the management port, port number 2 is the uplink port, and the other ports are isolation ports. Those skilled in the art should know that the port number described here is a virtual reference, which is a distinction made from the function or connection for the sake of ease of understanding.

[0056] Hardware connection steps: connect the management ports of other switches to other ports other than port 1 of management switch 3, connect the uplink ports of other switches to other ports other than port 2 of central switch 2, and connect the isolation ports of other switches to member machines. In this embodiment, each switch mounts four member machines. Figure 1 The order from left to right is:

[0057] The other switch 41 is mounted with member machines 501, 502, 503, and 504;

[0058] The other switches 42 are mounted with member machines 505, 506, 507, and 508;

[0059] The other switches 43 are mounted with member machines 509, 510, 511, and 512;

[0060] In other embodiments, the number of member machines mounted on other switches may also be flexibly selected by those skilled in the art according to actual needs, and is not limited here.

[0061] Software connection steps: Port No. 1 of the management switch 3 and port No. 2 of the central switch 2 are connected to the virtual network center 1. In this embodiment, the virtual network center 1 is a control center or operating platform for managing and monitoring virtual networking. It is used to configure, monitor and maintain virtual network resources. In addition, in this embodiment, the virtual network center 1 can provide a visual interface. Through the visual interface provided by the virtual network center 1, the network administrator can easily manage and adjust the topology, grouping, access rights, program usage rights, function usage rights, etc. of the virtual network. The instructions for configuring the switch are sent from the virtual network center 1 to the management port of other switches through the port No. 1 of the management switch 3, and then other switches are configured. The uplink and downlink data of other switches are forwarded in the virtual network center 1 through the uplink port and the port No. 2 of the central switch 2. At the same time, the uplink port can also be used for extended operations such as cascading and stacking of switching devices. The virtual network center 1 sets an IP address for the central switch 2 according to the hardware address of the central switch 2 connected, and the central switch 2 sets IP addresses for other connected switches.

[0062] Storage steps: The models, default addresses, IP addresses, port numbers, default accounts, default passwords, and isolation instructions of other switches are imported into the database of virtual network center 1 to facilitate formatting of all switches into unified logical interfaces supported by the platform, and automatically generate location layouts and physical connection status of network devices.

[0063] Division steps: The virtual network card set on the member machine is started, and the member machine logs in to the virtual network center 1, and the member machines that need to form the local area network 6 are divided into the same group. Figure 1 As shown, in this embodiment, the member machine 501 mounted on the other switch 41, the member machine 506 mounted on the other switch 42, and the member machine 511 mounted on the other switch 43 are divided into the same group; the member machine 502 mounted on the other switch 41, the member machine 507 mounted on the other switch 42, and the member machine 512 mounted on the other switch 43 are divided into the same group. The virtual network center 1 allocates network segments to the two divided groups. By allocating network segments to different groups, IP conflicts among the member machines in each group are avoided.

[0064] Networking steps: Add a virtual DHCP server 7 to the group that has been divided, and the virtual DHCP server 7 allocates virtual addresses to the member machines in the group, and then the divided groups form a local area network 6. In this embodiment, the virtual DHCP server is provided by a virtual network center, and the virtual network center allocates, manages or recycles IPs, resources, etc. according to the business process or business scenario. The network topology diagram of the local area network 6 is as follows: Figure 1As shown, member machines 501, 506 and 511 form a local area network 6, and member machines 502, 507 and 512 form another local area network 6. In the local area network 6 formed by member machines 501, 506 and 511, the three member machines can access each other through the virtual network center 1; in the local area network 6 formed by member machines 502, 507 and 512, the three member machines can access each other through the virtual network center 1. However, member machines 501, 506 and 511 and member machines 502, 507 and 512 belong to two different local area networks 6. Therefore, member machines 501, 506 or 511 cannot access any one of member machines 502, 507 and 512 without verification.

[0065] In other embodiments, the network administrator can also build a local area network with any number of member machines in any position according to actual needs. The physical network environment of the servers in the same computer room is fixed. Whether network access is allowed between multiple servers has been determined at the beginning of server installation. If it needs to be changed, it is necessary to maintain or redeploy the VPN, which is very inflexible and time-consuming and labor-intensive. The virtual networking method provided in this embodiment does not require complex hardware equipment and high cost investment, nor does it require highly skilled network administrators. In this embodiment, through the virtual network center 1, the administrator can freely network, thereby realizing flexible and efficient network deployment, high visualization, and high intelligence. In addition, the ports of the switch are all set to isolation mode, and the member machines between different local area networks 6 cannot access each other without verification, which greatly improves the security of the network and the convenience of management, can effectively avoid unauthorized access and interference, and ensure the stable operation of the network. It is particularly suitable for use in environments where non-profit organizations such as schools, government agencies, and public institutions have high requirements for permission security. It can not only achieve the purpose of fully authorizing various permissions, but also implement strict isolation measures between different permissions, ensuring the security requirements of non-profit organizations such as schools, government agencies, and public institutions.

[0066] In the present disclosure, there is no special limitation on how to perform the configuration steps, hardware connection steps, and storage steps. As an optional implementation, when the central switch 2 is connected to a new other switch, the first port of the newly connected other switch is the management port, and the second port is the uplink port. The management port of the newly connected other switch is connected to the other port of the management switch 3 other than the first port, the uplink port of the newly connected other switch is connected to the other port of the central switch 2 other than the second port, and the other ports of the newly connected other switch are connected to the member machines;

[0067] Traverse the database of virtual network center 1. If there is an initialization script whose model matches the model of other newly connected switches, virtual network center 1 directly uses the initialization script with the matching model to initialize other newly connected switches. Since most of the newly connected switches are in the interconnection mode of each port, virtual network center 1 configures other newly connected switches to port isolation mode through port 1 of management switch 3 and the management port of other newly connected switches to ensure the composite isolation safety requirements of other newly connected switches. At the same time, it greatly improves the efficiency and automation of networking, reduces manual intervention, avoids errors and cost increases that may be caused by manual configuration, and thus reduces labor costs.

[0068] If there is no initialization script whose model matches the model of the newly connected other switches, the model, default address, IP address, port number, default account, default password, and isolation instruction of the newly connected other switches are formed into an initialization script and imported into the database of the virtual network center 1, which facilitates the subsequent switch management and configuration, enables the network to quickly adapt to the access of new devices, and has strong scalability.

[0069] In the present disclosure, there is no special limitation on how to perform the warehousing step. As an optional implementation, after the model, default address, IP address, port number, default account, default password, and isolation instruction of the newly connected other switches form an initialization script and are imported into the database of the virtual network center 1, the virtual network center 1 uses the newly entered initialization script to initialize the newly connected other switches. Similarly, the virtual network center 1 sends the initialization command through the management port of the newly connected other switches through the No. 1 port of the management switch 3. If the initialization is successful, the newly connected other switches are successfully connected to the central switch 2, ensuring normal communication and collaboration between network devices. If the initialization is unsuccessful, it means that there is an error in the warehousing, and manual verification is required.

[0070] In the present disclosure, there is no special limitation on how to perform the division step. As an optional implementation, when the local area network 6 formed by the divided groups needs to access an external network, the IP address of the external network to be accessed is added to the local area network 6.

[0071] like Figure 1As shown, when the local area network 6 composed of member machines 501, 506 and 511 needs to access a certain external network address, the address of the external network to be accessed is added to the local area network 6 through the virtual network center 1, so that the local area network 6 can be seamlessly connected with the external network. This enables the member machines in the local area network 6 to easily access the resources of the external network, meets the user's demand for external information and services, and expands the function and application scope of the network. In terms of cost, this method is simple to operate, does not require the purchase of additional complex equipment or high fees, and only requires a simple IP address addition operation to achieve external network access, which has the advantages of low cost and convenient implementation.

[0072] In the present disclosure, there is no special limitation on how to perform the division step and the networking step. As an optional implementation, different virtual network centers 1 are connected via a dedicated line or VPN. After the connection is established, the member machines mounted under different virtual network centers 1 can be divided into the same group. Figure 2 As shown, two virtual network centers 1 are connected via a dedicated line or VPN. Figure 2 The member machines 504, 508, and 509 mounted under the virtual network center 1 on the left side of the middle are the same as those located at Figure 2 The member machines 503, 507 and 511 mounted under the virtual network center 1 on the right side of the middle can be divided into the same group. Then, any one of the two virtual network centers 1 can allocate network segments for the divided groups to avoid IP conflicts. At the same time, a virtual DHCP server 7 is added to the divided groups, and the virtual DHCP server 7 allocates virtual addresses to the member machines in the group, and then the divided groups form a local area network 6 across the virtual network center 1.

[0073] Different virtual network centers 1 are connected through dedicated lines or VPNs, so that the scenarios used by the virtual networking method provided by the present invention are further expanded. Free networking can be achieved not only in the same physical network, but also in different physical networks, realizing resource integration and sharing across virtual network centers 1, so that member machines in different regions or organizations can work together, improving resource utilization and work efficiency. When an enterprise has branches in multiple locations, and member machines under different branches need to form departments across regions to form a local area network 6, the network management personnel of the enterprise can still use the same method to freely network, without the need for additional software and hardware adjustments and deployment. From a cost perspective, connecting different virtual network centers 1 through dedicated lines or VPNs fully utilizes the existing network infrastructure, without the need for large-scale hardware upgrades or modifications, and reducing the cost and difficulty of networking. In addition, the integration and sharing of resources can also avoid duplicate investment, further reducing costs.

[0074] In the present disclosure, there is no special limitation on how to perform the networking steps. As an optional implementation, the verification between member machines that need to access each other under different local area networks 6 includes:

[0075] Verification of the account of the member machine registered in the virtual network center 1 and verification of the virtual address of the member machine.

[0076] Through these strict verification measures, it can be ensured that only member machines that meet the requirements can access each other, effectively preventing illegal access and malicious attacks, and ensuring the security of the network and the confidentiality of data. In terms of cost, this verification method is mainly implemented through software and systems, and does not require additional hardware costs. At the same time, effective security measures can reduce potential losses such as data leakage and system damage caused by security issues, and reduce the subsequent possible repair and recovery costs.

[0077] In the present disclosure, there is no special limitation on how to perform the division step and the networking step. As an optional implementation, the virtual networking method provided in this embodiment also includes a program grouping step, including the following sub-steps:

[0078] The member machines that need to use the same program are further divided into the same program group 8. Figure 3 As shown, in this embodiment, the member machines 501, 506 and 507 that have completed the establishment of the local area network are divided into the same program group 8.

[0079] Add the required programs to the program group 8, and the added programs are distributed by the virtual network center 1 to the member machines in the program group 8, which makes the distribution of programs more efficient and accurate, avoids unnecessary program installation and configuration, and improves the convenience and consistency of member machines using programs. In terms of cost, centralized distribution of programs can reduce repeated purchases and installations of software, and reduce the cost of software licensing and deployment. In addition, accurate distribution can also avoid waste of resources and improve the utilization of software resources.

[0080] After the program group 8 is divided, the member machines between different local area networks can access each other after being divided into the same program group 8. In this embodiment, although member machine 501 and member machine 507 belong to different local area networks, and member machine 506 and member machine 507 belong to different local area networks, since these three member machines belong to the same program group 8, these three member machines can access each other. This allows the network administrator to configure the project team members conveniently and quickly when forming a project team across departments, and promotes the sharing and collaborative work of program resources. Member machines can communicate and collaborate more conveniently, and use the same program to complete related tasks together, thereby improving work efficiency and teamwork ability. From a cost perspective, the utilization rate of the program can be improved, and the cost of each member machine needing to purchase and install the program separately is reduced. At the same time, collaborative work can improve work efficiency, shorten the project cycle, and thus reduce overall operating costs.

[0081] In the present disclosure, there is no special limitation on how to perform the division step and the networking step. As an optional implementation, the virtual networking method provided in this embodiment also includes a permission grouping step, including the following sub-steps:

[0082] The member machines that need to set the same permissions are further divided into the same permission group 9. Figure 4 As shown, in this embodiment, the member machines 511, 502 and 512 that have completed the establishment of the local area network are divided into the same permission group 9.

[0083] The required permissions are set for permission group 9, and the set permissions are set by the virtual network center 1 to the member machines in permission group 9, realizing the centralized management and unified setting of permissions, ensuring that the operations of member machines in the network comply with the corresponding permission regulations, preventing unauthorized operations and data leakage, and enhancing the security of the network and the standardization of management. In terms of cost, centralized management of permissions can reduce the complexity of permission setting and management, and reduce management costs. At the same time, standardized permission management can reduce work accidents caused by permission issues and reduce potential security risk costs.

[0084] After completing the division of permission group 9, member machines between different local area networks can access each other after being divided into the same permission group 9. In this embodiment, although member machine 511 and member machine 502 belong to different local area networks, and member machine 511 and member machine 512 belong to different local area networks, since these three member machines belong to the same permission group 9, these three member machines can access each other. This allows network administrators to easily and quickly configure project team members when forming a cross-departmental project team, and facilitates collaboration and data sharing between member machines based on permissions. Under the premise of ensuring security, member machines can more smoothly exchange information and share resources, improving the coordination and efficiency of work. From a cost perspective, effective permission management and collaboration can improve work efficiency, reduce work delays and cost increases caused by permission issues, avoid duplication or stagnation of work due to insufficient permissions, and improve the efficiency of human resource utilization.

[0085] In the present disclosure, there is no special limitation on how to perform the division step and the networking step. As an optional implementation, the virtual networking method provided in this embodiment also includes a function grouping step, including the following sub-steps:

[0086] The member machines that need to use the same function are further divided into the same function group 10. Figure 5 As shown, in this embodiment, the member machines 506, 511 and 502 that have completed the establishment of the local area network are divided into the same functional group 10.

[0087] Add the functions that need to be used to the function group 10, and the added functions are set by the virtual network center 1 to the member machines in the group, making the allocation and use of functions more reasonable and efficient. The member machines can quickly obtain and use the corresponding functions as required, improving the user experience and work efficiency. In terms of cost, function grouping and centralized setting can avoid repeated development and configuration of functions, reducing the cost of function implementation. At the same time, reasonable function allocation can improve the efficiency of function use and reduce unnecessary function idleness and waste.

[0088] After the division of the functional group 10 is completed, the member machines between different local area networks can access each other after being divided into the same functional group 10. In this embodiment, although member machine 506 and member machine 502 belong to different local area networks, and member machine 511 and member machine 502 belong to different local area networks, since these three member machines belong to the same functional group 10, these three member machines can access each other. This allows the network administrator to configure the project team members conveniently and quickly when forming a project team across departments, which is conducive to the sharing and collaborative use of functions. Member machines can better collaborate to complete tasks with the same functional requirements, give full play to the role of functions, and improve the quality and effect of work. From a cost perspective, function sharing can improve the utilization rate of functions and reduce the cost of each member machine to configure functions separately. In addition, the collaborative use of functions can improve work efficiency and reduce the cost and time investment of projects.

[0089] In the present disclosure, there is no special limitation on how to perform the division step and the networking step. As an optional implementation, the virtual networking method provided in this embodiment also includes an access grouping step, including the following sub-steps:

[0090] The member machines that need to perform the same access are further divided into the same access group 11, wherein the same access means accessing the same member machine, the same network segment, or the same server. Figure 6 As shown, in this embodiment, the member machines 511, 507 and 512 that have completed the establishment of the local area network are divided into the same access group 11.

[0091] Adding the IP addresses that need to be accessed to access group 11 implements refined management of access rights, ensuring that member machines can only access authorized resources, improving network security and access controllability. In terms of cost, refined access management can reduce unnecessary network traffic and resource usage, and reduce network operating costs. For example, it avoids network congestion and resource waste caused by illegal or erroneous access, and improves network stability and performance.

[0092] After the division of access group 11 is completed, member machines between different local area networks can access each other after being divided into the same access group 11. In this embodiment, although member machine 511 and member machine 512 belong to different local area networks, and member machine 507 and member machine 512 belong to different local area networks, since these three member machines belong to the same access group 11, these three member machines can access each other. This allows network administrators to quickly and easily configure project team members when forming a cross-departmental project team, meeting the collaborative work requirements of member machines for specific access needs. Member machines can communicate and collaborate effectively within the same access group 11, and jointly complete tasks involving specific access resources, thereby improving the coordination and efficiency of work. From a cost perspective, collaborative work can improve work efficiency, reduce cost increases caused by poor communication and collaboration, avoid duplication or errors in work caused by poor information flow, and improve the accuracy and efficiency of work.

[0093] It should be pointed out that local area networks, program groups, permission groups, functional groups, and access groups can overlap. For example, after the member computers under several local area networks form a program group, the member computers in the program group and other member computers not included in the program group can still form a permission group, a functional group, or an access group.

[0094] In the present disclosure, there is no special limitation on how to perform the division step and the networking step. As an optional implementation, the other switches 3 in this embodiment also include redundant interfaces and backup interfaces. The redundant interfaces and backup interfaces are one of the other ports of the other switches 3, and are therefore isolated from other ports, port number one, and port number two. The backup interface is connected to the backup member machine to back up the data in the local area network to ensure data security. At the same time, the interfaces are isolated from each other to ensure the security of the backup data and prevent the backup data from being read by other member machines. The redundant interface is connected to the member machine to start when the member machine link in the local area network is disconnected. When the main link fails, the backup link can automatically switch to take on the data transmission task to ensure that the network connection is not interrupted. Share network traffic and improve network transmission efficiency.

[0095] At the same time, this embodiment also provides a computer topology network, which is suitable for use scenarios such as enterprises, Internet cafes, cyber cafes and other commercial network places, including management switches, central switches, other switches connected to the central switch, and member machines connected to other switches. In these use scenarios, the management switch, the central switch and other switches are only distinguished by the logical position of the switch in the physical network. Those skilled in the art can flexibly select the switch according to the actual use scenario. The member machine involved in this embodiment can be a diskless terminal computer or an ordinary computer with a disk, which is not limited here.

[0096] The management switch, central switch and other switches are set to port isolation mode, where port 1 of other switches is the management port, port 2 is the uplink port, and other ports are isolation ports. The management ports of other switches are connected to other ports except port 1 of the management switch, the uplink ports of other switches are connected to other ports except port 2 of the central switch, and the isolation ports of other switches are connected to member machines; port 1 of the management switch and port 2 of the central switch are connected to the virtual network center;

[0097] The member machines in the computer topology network provided in this embodiment form one or more local area networks by using any of the virtual networking methods described above.

[0098] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Those skilled in the art should understand that the present invention includes but is not limited to the contents described in the drawings and the above specific embodiments. Any modification that does not deviate from the functional and structural principles of the present invention will be included in the scope of the claims.

Claims

1. A virtual networking method, characterized in that: The virtual networking method is used to manage a switch, a central switch, other switches connected to the central switch, and member machines connected to the other switches to form one or more local area networks, and includes the following steps: Set the management switch, central switch and other switches to port isolation mode, where port 1 of other switches is the management port, port 2 is the uplink port, and other ports are isolation ports; Connect the management ports of other switches to ports other than port 1 of the management switch, connect the uplink ports of other switches to ports other than port 2 of the central switch, and connect the isolation ports of other switches to the member machines; Port 1 of the management switch and port 2 of the central switch are connected to the virtual network center. The virtual network center sets an IP address for the central switch according to the hardware address of the connected central switch, and the central switch sets IP addresses for other connected switches. Import the models, default addresses, IP addresses, port numbers, default accounts, default passwords, and isolation instructions of other switches into the database of the virtual network center as an initialization script; The virtual network card set on the member machine is started, and the member machine logs in to the virtual network center. The member machines that need to form a local area network are divided into the same group, and the virtual network center allocates network segments for the divided groups; A virtual DHCP server is added to the completed group, and the virtual DHCP server allocates virtual addresses to the member machines in the group. The divided group then forms a local area network. The member machines in the local area network access each other through the virtual network center. Member machines between different local area networks cannot access each other without verification.

2. The virtual networking method according to claim 1, characterized in that: When the central switch is connected to a new switch, the first port of the newly connected switch is the management port, and the second port is the uplink port. The management port of the newly connected switch is connected to other ports other than the first port of the management switch, the uplink port of the newly connected switch is connected to other ports other than the second port of the central switch, and the other ports of the newly connected switch are connected to the member machines; Traverse the database of the virtual network center. If there is an initialization script whose model matches the model of the newly connected other switches, the virtual network center directly uses the initialization script with the matching model to initialize the other newly connected switches. After initialization, the other newly connected switches are configured to port isolation mode. If there is no initialization script whose model matches the model of the newly connected other switches, the model, default address, IP address, port number, default account, default password, and isolation instruction of the other newly connected switches are formed into an initialization script and imported into the database of the virtual network center.

3. The virtual networking method according to claim 2, characterized in that: After the model, default address, IP address, port number, default account, default password, and isolation instructions of the newly connected other switches are formed into an initialization script and imported into the database of the virtual network center, the virtual network center uses the newly entered initialization script to initialize the newly connected other switches. If the initialization is successful, the newly connected other switches are successfully connected to the central switch.

4. The virtual networking method according to claim 1, characterized in that: When the local area network formed by the divided groups needs to access an external network, the IP address of the external network to be accessed is added to the local area network.

5. The virtual networking method according to claim 1, characterized in that: Different virtual network centers are connected via dedicated lines or VPNs. After the connection is established, member machines mounted under different virtual network centers can be divided into the same group. The virtual networking method according to any one of claims 1 to 5, characterized in that the verification between member machines that need to access each other in different local area networks includes: Verification of the account of the member machine registered in the virtual network center and the virtual address of the member machine.

6. The virtual networking method according to any one of claims 1 to 5, characterized in that: The virtual networking method further comprises a program grouping step, wherein the program grouping step comprises the following sub-steps: Divide the member machines that need to use the same program into the same program group; Add the required programs to the program group, and the added programs will be distributed to the member machines in the program group by the virtual network center; Member machines in different local area networks can access each other after being divided into the same program group.

7. The virtual networking method according to any one of claims 1 to 5, characterized in that: The virtual networking method further includes a permission grouping step, and the permission grouping step includes the following sub-steps: Divide the member machines that need to set the same permissions into the same permission group; Set the required permissions for the permission group. The permissions are set by the virtual network center to the member machines in the permission group. Member computers in different local area networks can access each other after being divided into the same permission group.

8. The virtual networking method according to any one of claims 1 to 5, characterized in that: The virtual networking method further comprises a function grouping step, wherein the function grouping step comprises the following sub-steps: Divide the member machines that need to use the same function into the same functional group; Add the functions you need to use to the function group. The added functions are set by the virtual network center to the member machines in the group. Member machines in different local area networks can access each other after being divided into the same functional group.

9. The virtual networking method according to any one of claims 1 to 5, characterized in that: The virtual networking method further comprises an access grouping step, wherein the access grouping step comprises the following sub-steps: The member machines that need to perform the same access are further divided into the same access group, where the same access means accessing the same member machine, the same network segment, or the same server; Add the IP addresses that need to be accessed to the access group; Member machines between different local area networks can access each other after being divided into the same access group.

10. The virtual networking method according to any one of claims 1 to 5, characterized in that: The other switches also include a redundant interface and a backup interface, which are one of the other ports of the other switches. The backup interface is connected to a backup member machine to back up data in the local area network, and the redundant interface is connected to a member machine to start when the member machine link in the local area network is disconnected.

11. A computer topology network, characterized in that: The computer topology network includes a management switch, a central switch, other switches connected to the central switch, and member computers connected to the other switches; The management switch, the central switch and other switches are set to a port isolation mode, wherein the No. 1 port of other switches is a management port, the No. 2 port is an uplink port, and the other ports are isolation ports. The management ports of other switches are connected to other ports other than the No. 1 port of the management switch, the uplink ports of other switches are connected to other ports other than the No. 2 port of the central switch, and the isolation ports of other switches are connected to member machines; the No. 1 port of the management switch and the No. 2 port of the central switch are connected to the virtual network center; The member machines in the computer topology network form one or more local area networks using the virtual networking method described in any one of claims 1 to 11.

Images