Switch port security binding system and method

Abstract

The invention belongs to the field of communication, and particularly discloses a switch port security binding system and method, and the system comprises an ARM controller and a network switching chip. The method comprises the following steps of: pre-configuring all MAC (Media Access Control) addresses meeting requirements through the ARM controller; judging whether the MAC address of the equipment accessed to the switch port meets the set MAC address or not; if yes, the switch port forwards normally; and if not, the switch port rejects forwarding. The external ARM controller is adopted, required MAC addresses are flexibly increased or removed through a specific development environment of the external ARM controller, multiple ports and multiple MAC addresses can be bound, the MAC address binding does not need to judge the first-time address configuration condition, static configuration can be carried out by inputting related MAC addresses through the ARM controller, the configuration mode is flexible, and the configuration efficiency is high. The binding mode is simple to operate, invasion of illegal equipment is prevented, and the network communication security of the switch is ensured.

Description

Technical Field

[0001] The present invention relates to the field of communications, and in particular to a switch port security binding system and method. Background Art

[0002] Switches are essential devices for building access layers of large, medium and small networks. It is very important to take measures on switches to ensure network security. Switch port security, in layman's terms, only allows a certain MAC address to communicate through this port, and blocks packets sent by other MAC addresses from passing through this port.

[0003] In actual applications, we often limit certain specific devices to access network switches to ensure network security. Many devices on the market do not have MAC address binding function, or MAC address binding development is very complicated. Summary of the invention

[0004] The purpose of the present invention is to solve the technical problems existing in the background technology, and to this end, a switch port security binding system and method are provided.

[0005] In order to achieve the above object, the technical solution adopted by the present invention is as follows:

[0006] A switch port security binding system includes an ARM controller and a network switching chip;

[0007] The ARM controller is used to implement the software configuration function of the network switching chip; the ARM controller configures the network switching chip through the I2C channel to achieve network security management.

[0008] The following is a technical solution further defined by the system in the present invention. The network switching chip outputs N network ports to the outside, where N≥7. Through the software development environment of the ARM controller, the binding of N MAC addresses specified by the user is realized. When any one of the specified N MAC address devices is connected to any port of the network switching chip, the network communicates normally. When any device other than the specified N MAC addresses is connected to the network switching chip, the network refuses communication.

[0009] A method based on the switch port security binding system includes the following steps:

[0010] Step S1: pre-configure all MAC addresses that meet the requirements through the ARM controller;

[0011] Step S2: Determine whether the MAC address of the device connected to the switch port satisfies the set MAC address;

[0012] Step S3: If satisfied, the switch port forwards normally;

[0013] Step S4: If not satisfied, the switch port refuses to forward.

[0014] Compared with the prior art, the present invention has the following technical effects:

[0015] The present invention adopts an external ARM controller, and through its unique development environment, it can flexibly add or remove the required MAC addresses, and can realize binding of multiple ports and multiple MAC addresses, that is, one port realizes the binding of multiple specified MAC addresses. The MAC address binding does not need to judge the first configuration address situation, and the relevant MAC address can be input through the ARM controller for static configuration. The configuration mode is flexible, the binding method is simple to operate, and the intrusion of illegal devices is prevented, ensuring the security of switch network communication.

[0016] The present invention is further described below in conjunction with the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 is a system connection block diagram of the present invention;

[0019] Figure 2 It is a flow chart of the method of the present invention. DETAILED DESCRIPTION

[0020] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention can be implemented in many other ways different from those described herein, and those skilled in the art can make similar improvements without violating the connotation of the present invention, so the present invention is not limited by the specific embodiments disclosed below.

[0021] like Figure 1 As shown, this embodiment provides a switch port security binding system, which mainly consists of two parts:

[0022] The first part is the ARM controller, which mainly implements the software configuration function of the network switching chip.

[0023] The second part is the domestically produced network switching chip. Finally, the ARM controller configures the switching chip through the I2C channel to achieve network security management.

[0024] The network switching chip (i.e. switch) has a total of 7 network ports. Through the software development environment of the ARM controller, the 7 MAC addresses specified by the user are bound. When any of the 7 MAC address devices is connected to any port of the switch, normal network communication can be achieved; when any device other than these 7 MAC addresses is connected to the switch, the network cannot communicate.

[0025] like Figure 2 As shown, a switch port security binding method mainly includes the following steps:

[0026] Step S1: pre-configure all MAC addresses that meet the requirements through the ARM controller.

[0027] Step S2: Determine whether the MAC address of the device connected to the switch port satisfies the set MAC address.

[0028] Step S3: If satisfied, the switch port forwards normally.

[0029] Step S4: If not satisfied, the switch port refuses to forward.

[0030] In summary, the present invention adopts an external ARM controller, and through its unique development environment, it can flexibly add or remove the required MAC addresses, so as to realize the binding of multiple ports and multiple MAC addresses, that is, one port realizes the binding of multiple specified MAC addresses. The MAC address binding does not need to judge the first configuration address situation, and the relevant MAC address can be input through the ARM controller for static configuration. The configuration mode is flexible, the binding method is simple to operate, and the intrusion of illegal devices is prevented, ensuring the security of switch network communication.

[0031] The above is only a preferred embodiment of the present invention, and does not limit the present invention in any form. Any technician familiar with the art can make many possible changes and modifications to the technical solution of the present invention by using the above disclosed methods and technical contents without departing from the scope of the technical solution of the present invention, or modify it into an equivalent embodiment of equivalent changes. Therefore, all equivalent changes made according to the shape, structure and principle of the present invention without departing from the content of the technical solution of the present invention should be included in the protection scope of the present invention.

Claims

1. A switch port security binding system, characterized in that: Including ARM controller and network switching chip; The ARM controller is used to implement the software configuration function of the network switching chip; the ARM controller configures the network switching chip through the I2C channel to achieve network security management.

2. A switch port security binding system as claimed in claim 1, characterized in that: The network switching chip outputs N network ports to the outside, where N ≥ 7. Through the software development environment of the ARM controller, the user-specified N MAC addresses are bound. When any of the N specified MAC address devices is connected to any port of the network switching chip, the network communicates normally. When any device other than the specified N MAC addresses is connected to the network switching chip, the network refuses communication.

3. A method for implementing the switch port security binding system according to claim 1 or 2, characterized in that: The following steps are involved: Step S1: pre-configure all MAC addresses that meet the requirements through the ARM controller; Step S2: Determine whether the MAC address of the device connected to the switch port satisfies the set MAC address; Step S3: If satisfied, the switch port forwards normally; Step S4: If not satisfied, the switch port refuses to forward.

Images