Home Gateway MAC Filtering After Routing for IPv6 LAN Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-home communication devices face challenges in filtering packets based on destination MAC addresses when receiving packets from a WAN side to a LAN side due to the limitations of current iptables mechanisms, particularly when the destination interface does not require Layer 2 addresses, leading to unresolved destination MAC addresses during Layer 3 IP packet filtering.
Innovation Solution
An in-home communication device with a reception interface, forwarding unit, and extension function unit that performs MAC filtering after routing, allowing for filtering based on destination MAC addresses without relying on IPv6 prefixes distributed by the communication network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If IP address filtering is used for packet filtering in IPv6, then filtering capability is provided, but the filtering cannot be performed reliably because the IPv6 address prefix is redistributed by the communication network provider and cannot be freely decided in advance
Solution Approach 1:
The patent introduces MAC address as an intermediary identifier to bridge the gap between IP filtering capability and reliable terminal identification. Instead of directly using IPv6 addresses that are redistributed by the network provider, the system uses MAC addresses which are inherently associated with the terminal hardware and remain consistent regardless of IP address changes. This intermediary approach allows the in-home communication device to reliably identify and filter packets based on terminal identity without being affected by IPv6 prefix redistribution.
2Measurement precision
If MAC address filtering is implemented for packets from WAN to LAN, then terminal identification is improved, but the current iptables mechanism cannot resolve destination MAC addresses for interfaces that do not require Layer 2 addresses
Solution Approach 1:
The patent implements a dynamic approach to MAC address filtering that adapts to different interface types. The system determines whether destination MAC address resolution is necessary based on the destination interface characteristics. For interfaces that require Layer 2 addresses (like Ethernet), MAC filtering is applied. For interfaces that do not require Layer 2 addresses (like PPP), the system dynamically skips the MAC resolution step. This dynamic behavior allows the filtering mechanism to handle diverse network interfaces flexibly without unnecessary complexity.
Solution Approach 2:
The patent performs preliminary determination of the destination interface type before attempting MAC address resolution. By checking whether the destination interface requires Layer 2 addresses in advance, the system可以避免 unnecessary resolution operations and potential failures. This preliminary action optimizes the filtering process by preparing the appropriate filtering logic before packet processing, reducing overall system complexity while maintaining precise terminal identification where needed.
3Productivity
If destination MAC address filtering is performed before routing, then filtering speed is improved, but the destination MAC address cannot be resolved yet because routing must be performed first
Solution Approach 1:
The patent performs routing determination as a preliminary action before MAC address filtering. By establishing the routing path first, the system can then resolve the destination MAC address and apply filtering logic. This reversed sequence compared to traditional processing allows the system to maintain high filtering speed while ensuring that all necessary address resolutions are performed with available information, making the filtering configuration simpler and more reliable.
Data Source
AI summary
An HGW (110) includes a WAN I/F unit (112) that receives a packet; and an IPv6 packet filter function unit (125) that performs address resolution and routing of the packet and executes MAC filtering, which is a filtering of the destination MAC address of the packets after the routing, according to a rule of an IP packet filter.