17 results about "Default gateway" patented technology

A technique to stop lateral movement of ransomware between endpoints in a VLAN is disclosed. A security appliance is set as the default gateway for intra-LAN communication by overwriting the DHCP responses. Message traffic from compromised endpoints is detected. Attributes of ransomware may be detected in the message traffic, as well as attempts to circumvent the security appliance. Compromised devices may be quarantined by assigning them the default gateway to a preset blackhole IP address.

Embodiments of the present application provide a network sharing method, an electronic device, and a chip system. The method is applied to a first electronic device. When the first electronic device and a second electronic device meet a preset condition, the first electronic device can communicate with the second electronic device by establishing a first network path with the second electronic device. The first electronic device sends a network sharing request to the second electronic device by means of the first network path, so that the second electronic device enables network sharing. The second electronic device configures a proxy gateway in response to the network sharing request. The first electronic device configures a default gateway, domain name mapping, and a virtual network path in response to a first instruction indicating that the proxy gateway has been successfully configured. A network access request of the first electronic device can be forwarded to the virtual network path to implement network sharing. The virtual network path is configured on the basis of the network type of the second electronic device so as to share different types of networks. The present application can also achieve switching of other hotspot networks or wireless networks.

Systems and methods are provided for monitoring the accessibility to a network from the gateway device via a physical uplink and via a virtual uplink. For example, the system may mark a status of the physical uplink as reachable and a status of the virtual uplink as unreachable prior to completion of a WAN health check. The system may update a default gateway to the physical uplink and remove the virtual uplink so that the default gateway can use the physical uplink to maintain data transmissions to the network from the gateway device via the physical uplink and suspend or stop connections via the virtual uplink. The system can continue to monitor the accessibility to the network from the gateway device via the virtual uplink by listening for a tunnel heartbeat from the virtual uplink.

1. The name of the design product: LAN setting graphical user interface for electronic equipment. 2. The use of the design product: for displaying graphical user interface. 3. The design points of the design product: the interface content in the graphical user interface. 4. The picture or photo that best indicates the design points: interface change state diagram. 5. The rest is the conventional design, omitting the rear view, left view, right view, top view and bottom view. 6. The use of the graphical user interface: information interface for displaying LAN setting. 7. The human-computer interaction mode of the graphical user interface: the main view is the center page of LAN setting; by clicking the "setting" button in the upper right corner of the main view, the interface change state diagram is entered; by clicking "LAN setting", the interface change state diagram displays the information of "connection state", "network type", "network address", "electronic mask", "default gateway", "preferred DNS" and "alternative DNS" of the "LAN setting" and can be modified.

Methods and procedures are described herein to support the management of multiple simultaneously active gateways within a PIN. A method may comprise receiving, by a PEMC, two PIN join requests from two PIN elements, comprising PIN client profile information indicating that the respective PIN element can serve as a gateway, determining, based on each PIN client profile information, to configure the PIN elements as gateways, receiving, from a third PIN element, a PIN join request comprising PIN client profile information, determining, based on PIN client profile information of each PIN element, to assign the first PIN element as a default gateway and the second PIN element as a backup gateway for the third PIN element, and sending, to the PIN elements, a notification indicating the first PIN element is serving as the default gateway and the second PIN element is serving as the backup gateway for the third PIN element.

The technology disclosed relates to configuring IoT devices for policy enforcement. In particular, the technology disclosed relates to configuring a plurality of special-purpose devices on a network segment of a network to steer outbound network traffic to an inline secure forwarder on the network segment instead of a default gateway on the network segment. The inline secure forwarder is configured to route the outbound network traffic to a policy enforcement point for a policy enforcement.

The invention relates to the technical field of mobile communication and network security, and discloses an encrypted mobile office network system and method based on 5G CPE, and the system comprises double-network-port 5G CPE equipment, a WAN port of the double-network-port 5G CPE equipment is connected with Internet access equipment, and an LAN port of the double-network-port 5G CPE equipment is connected with an intranet; the ARM architecture encryption server is deployed in an intranet; the client comprises a local office terminal and a remote access terminal; wherein the DHCP service of the double-network-port 5G CPE device sets a default gateway as an intranet IP address of an ARM architecture encryption server; and the ARM architecture encryption server deploys a WireGuard service, configures a WireGuard file for the local office terminal and the remote access terminal, and forms a WireGuard encryption tunnel. Through the innovative architecture design, the network access problem faced by small and medium-sized enterprises and remote area plants is effectively solved, and the system has remarkable advantages in the aspects of cost, mobility, safety and the like, and has wide application prospects and market value.

The invention provides a method for realizing public network talkback through a relay, which is applied to a talkback system formed by networking a talkback end, a relay end and a cloud end, and comprises the following steps: S1, pairing and connecting the talkback end and the relay end through Bluetooth; s2, starting a native Bluetooth network sharing function of an own operating system at the relay end, distributing a local area network IP address for the intercom end by the relay end, and setting the IP address of the relay end as a default gateway; s3, carrying out system-level authentication between the talkback end and the relay end through a Bluetooth protocol, and establishing an encrypted data transmission link between the talkback end and the relay end; s4, establishing connection between the talkback end and the cloud end, and completing identity authentication; and S5, transmitting voice data between the intercom end and the relay end through Bluetooth, and forwarding the voice data through the public network of the relay end to realize public network intercom. The talkback end does not need a public network connection module, the relay end does not need to be additionally provided with an APP, and the talkback requirements of low cost, low power consumption, miniaturization and high stability can be met.

A method and system to facilitate measuring of media exposure. An example method comprises a streaming meter on a LAN configuring a host device on the LAN to use the streaming meter as a default gateway of the host device, including the streaming meter acquiring assignment from a router on the LAN of all IP addresses assignable by the router, to prevent the router from functioning as a DHCP server for the host device, and the streaming meter then responding to DHCP messaging from the host device to assign an IP address to the host device and set the host device to use the streaming meter as the default gateway of the host device. In the example method, the streaming meter then monitors network traffic of the host device that flows through the streaming meter and reports the monitored network traffic to a media-measurement platform to facilitate media-exposure measurement.

The application discloses a kind of network fault self-repairing method and system based on cloud native, by starting detector to target network equipment is detected, starting network detector detection, if network detector continues to block, then the network detector continues to detect;If the network detector blocking ends, then reselect connection and switch, and in the starting network detector detection, whether current detector is in default gateway device, if not, then start recovery detector detection, judge whether default gateway device network is accessible, if yes, then switch connection to default gateway device.By the scheme of the present application, when the default network exit of cluster fails, the access of cluster to outside is interrupted, the optimal network exit is selected, and the normal access of cluster to outside is ensured;When the default network exit is removed, the network exit needs to be restored to the initial state, and other exit bandwidth is not occupied any more, to achieve a kind of network fault self-repairing function.

A technique to stop lateral movement of ransomware between endpoints in a VLAN is disclosed. A security appliance is set as the default gateway for intra-LAN communication. Message traffic from compromised endpoints is detected. Attributes of ransomware may be detected in the message traffic, as well as attempts to circumvent the security appliance. Compromised devices may be quarantined.

One aspect of the present invention is a printer comprising: a communication unit that communicates with a first device via a first gateway and communicates with a second device via a second gateway, the first gateway being connected to a local area network (LAN) and set as a default gateway, the second gateway being connected to a mobile communication network; and a control unit that, when communication malfunction occurs in communication with the first device during the communication with the first device via the first gateway, switches a gateway set as the default gateway from the first gateway to the second gateway and thereby controls the communication unit so as to communicate with the second device.

The embodiment of the invention provides a file transfer disaster recovery method, electronic equipment, a storage medium and a program product. The file transmission disaster recovery method is applied to a client, and comprises the following steps: in a process of transmitting a target file through a default gateway, detecting an operation state of the default gateway; when the running state of the default gateway is abnormal and the transmission of the target file is not completed, recording progress information of transmitted file data, and determining an available standby gateway; and continuing to transmit the remaining file data of the target file through the standby gateway based on the progress information. According to the method, the client side autonomously detects the state of the gateway, the standby gateway can be rapidly switched without back-end triggering, resource consumption and time delay are reduced, meanwhile, a service interruption blind area formed due to the fact that no client side has no sensing capacity is avoided, the system toughness and user experience of financial services in the high-concurrency and high-availability environment are remarkably improved, and the service experience of the financial services is improved. And the autonomous controllability of the bank on the terminal service stability is enhanced.

The embodiment of the invention provides a network sharing method, electronic equipment and a chip system. The method is applied to first electronic equipment, and communication with second electronic equipment can be realized by establishing a first network path with the second electronic equipment under the condition that the first electronic equipment and the second electronic equipment meet preset conditions. And the first electronic equipment sends a network sharing request to the second electronic equipment through the first network path, so that the second electronic equipment opens network sharing. The second electronic device configures a proxy gateway in response to the network sharing request. And the first electronic device configures a default gateway, domain name mapping and a virtual network path in response to the first instruction that the proxy gateway is successfully configured. And the internet surfing request of the first electronic equipment can be forwarded to the virtual network path, so that network sharing is realized. Wherein the virtual network path is configured based on the network type of the second electronic equipment so as to share different types of networks. According to the invention, other hotspot networks or wireless networks can be switched.

The invention provides a zero-trust security access control system and a zero-trust security access control method. The system comprises a controller, a plurality of gateways and a plurality of user equipment, the controller is used for setting a default gateway connected with the switch as one gateway in the plurality of gateways under the condition that the deployment of the zero-trust security access control system is completed; the gateway is used for setting an address of a download page of the client as a redirection address; after an access request forwarded by any user equipment through a switch connected with the user equipment is received, whether an online user corresponding to the user equipment exists or not is detected, and under the condition that it is determined that no corresponding online user exists, an access address of the access request is adjusted to a redirection address from a target address. Enabling the access page of the user equipment to jump to the downloading page; and the user equipment is used for downloading the installation package of the client through the downloading page, installing the client and automatically executing client login processing according to the login information carried by the installation package. In this way, the downloading and logging efficiency of the client is effectively improved.

The technology disclosed relates to configuring IoT devices for policy enforcement. In particular, the technology disclosed relates to configuring a plurality of special-purpose devices on a network segment of a network to steer outbound network traffic to an inline secure forwarder on the network segment instead of a default gateway on the network segment. The inline secure forwarder is configured to route the outbound network traffic to a policy enforcement point for a policy enforcement.

Systems and methods are provided for monitoring network accessibility from gateway devices via physical uplinks and virtual uplinks. For example, before a WAN health check is completed, the system can mark the physical uplink as reachable and the virtual uplink as unreachable. The system can update the default gateway to the physical uplink and remove the virtual uplink, allowing the default gateway to use the physical uplink to maintain data transmission from the gateway device to the network via the physical uplink, and suspend or stop connections via the virtual uplink. The system can continue monitoring network accessibility from the gateway device via the virtual uplink by listening to tunnel heartbeats from the virtual uplink.