KR20020073855A - Dual ip switch hub and network system using the same - Google Patents

Abstract

PURPOSE: A dual IP switch hub and a network system using the same are provided to simplify its composition and compose a network with security by perfectly dividing an internal network and an external network. CONSTITUTION: A dual IP switch hub(13) connects a computer(15) to an Internet network or an external network according to an IP commanded from the computer(15). An internal switch hub(11) connects to the dual IP switch hub(13) and connects to a printer server(14) of the internal network. A router(12) connects the dual IP switch hub(13) to an Internet service provider connected to the Internet.

Description

Dual IP switch hub and network system using the same

The present invention relates to a hub for automatically switching a redundant network for convenient LAN (Local Area Network) configuration, and also to provide a dual IP switch hub suitable for high-security network construction such as government offices and military units. It relates to a network system used.

In general, a hub refers to a communication access device used to connect several devices in a communication network. In an ARC network, a hub is used to connect several computers, and in MHS, a hub is used to deliver messages over a communication network.

In addition, a virtual private network (VPN), in which a user who does not have an own information communication network, directly manages and manages it like a communication network constructed by an individual using a public data communication network, is used. As a means of communication between the corporate headquarters and branch offices or branch offices using the Internet instead of leased lines, it is used as a network solution for establishing a wide area network (WAN) at a much lower cost than renting a leased line.

This hypothetical private network using the Internet is suitable for communication with branch offices in remote or global locations, and is particularly effective for companies that need to transfer large amounts of data between headquarters and small- and medium-sized satellite offices or operate telecommuting systems. Although large, the hypothetical private network is based on the Internet's standard protocol, so security weaknesses are pointed out as a critical weakness.

In addition, in the initial LAN, each user PC intends to share various resources (HDD, printer, program) of the server at high speed. However, resource sharing, which is only a one-dimensional goal, is becoming a form of distributed processing that can reduce or replace the dependence of expensive hosts. Recently, enterprises, government offices, military units, and national research institutes are building networks using LAN to maximize work productivity.

Therefore, in order to secure high security, corporations, government offices, national military research institutes, etc., are assigned internal fixed IPs to allocate a fixed IP.

Therefore, the PC connected to the internal network configured with the fixed IP is used to use an internal server or share a file or a printer through a LAN in the internal network. In addition, the Internet can be used through a network for external network connection.

In order to secure high security as described above, a conventional network configuration including an external network for connecting an internal network and an external network (Internet) is described as follows.

5 is a block diagram illustrating a network using a conventional hub.

In the conventional network configuration, a separate network is formed between an internal network and an external network connection network, and a network is used as needed.

That is, the internal network includes a plurality of PCs 46 (only one is shown in the figure), an internal server (not shown), and a plurality of hubs (PCs) for connecting the internal server and the PC 46. Multiple hubs may be used according to printers, files, etc.), files and printer servers 43 connected to internal servers and PCs through the hubs, internal network ports 44, and the like. In addition, the external network connection network is a router (48) for connecting an Internet service provider (ISP) connected to the Internet with a PSTN or coaxial cable, and the router 48 and the PC 46. It consists of an external hub 47 and an external network port 45 for connecting.

The conventional network operation configured as described above is as follows.

When the PC 46 is connected to the external network to use the Internet, the user connects his PC 46 to the external network port 45 and starts the system, and is connected to the hub 47 and the router ( 48) through the Internet.

In the case of using a private internal network, the user connects his PC 46 to the internal network port 44 and starts the system to connect to the plurality of hubs 41 and 42 to use the internal server. You can share information or print information by sharing files and printers.

However, in the conventional network configuration in which the internal network and the external network connection network are separately configured to secure such high security, there are the following problems.

First, two networks must be configured separately, which requires twice the network equipment and more than twice the installation cost, such as providing redundant cable connections and two connection ports.

Second, since the printer is shared only on the internal network, the printer is not supported while the external network is used.

Third, it is inconvenient to use because the physical connection of the port must be changed directly.

Fourth, the network is not free to move because it is separated into the inside and the outside.

Fifth, there are many cases of rebooting for network replacement.

The present invention has been made to solve the above problems, and an object of the present invention is to provide a dual IP switch hub and a network using the same as the internal and external network configuration with complete security.

1 is a block diagram of a network configuration using a dual IP switch hub according to the present invention.

Figure 2 is a block diagram illustrating the internal configuration of a dual IP switch hub according to the present invention.

3 is a flow chart of operation of the dual IP switch according to the present invention.

4 is a flow chart of a subroutine according to the present invention.

5 is a block diagram of a network configuration using a conventional hub.

* Explanation of symbols for the main parts of the drawings

11, 13: switch hub 12, 48: router

14, 43: printer server 15, 46: computer

21: RJ4522, 27: memory

23, 24, 28: Ethernet controller 25: CPU

26: program memory 29: transceiver

41, 42, 47: hub 44, 45: port

The present invention for achieving the above object is an Ethernet controller for controlling the transmission and reception data of the internal and external network, a CPU connected to the Ethernet controller and having a program memory and a memory to control the IP conversion and each device, and the It is characterized by consisting of an Ethernet controller and transceiver to control the transmission and reception data between the CPU and the computer,

A computer capable of controlling communication and hubs, a dual IP switch hub having a plurality of IPs and connecting the computer to the internal network or the computer to an external network according to the IP commanded by the computer, to the dual IP switch hub And an internal switch hub for connecting to a server of an internal network, and a router for connecting the dual IP switch hub and an Internet service provider connected to the Internet.

Hereinafter, a network system using the dual IP switch hub of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a network system using a dual IP switch hub according to the present invention.

That is, it has a computer 15 capable of communication, two IPs (for example, an internal network IP (100.120.25.25) and an external network IP (125.212.100.25)) according to the IP commanded by the computer 15. A dual IP switch hub 13 connecting the computer 15 to the internal network or the computer 15 to the external network, and an internal server (not shown) connected to the dual IP switch hub 13. Or an internal switch hub 11 connecting a printer server 14, a file server (not shown), a mail server (not shown), and the dual IP switch hub 13 to the Internet. It comprises a router (12) for connecting an Internet service provider (ISP).

Here, although the print server 14 is illustrated as being connected to the dual IP switch hub 13, it may be connected to the internal switch hub 11, and many other switch hubs and computers may be connected.

2 is a block diagram illustrating an internal configuration of a dual IP switch hub according to the present invention.

That is, RJ45, which is a terminal for connecting an internal and external network and a computer, is provided, and Ethernet controllers 23 and 24 which control transmission and reception data are respectively connected to RJ45, which is an internal and external network connection terminal, and the Ethernet controller again connects a data bus. It is connected to the CPU 25 for controlling and processing the respective devices and data of the dual IP switch hub, and the memory 22 for storing data necessary for transmission and reception data control is connected.

In addition, a transceiver 29 for controlling transmission and reception data and an Ethernet controller 28 are connected to the RJ45, which is a connection terminal with a computer, and the Ethernet controller 28 is connected to the CPU 25 again, and the CPU 25 Is connected to a program memory 26 for driving a program for automatic IP address change and a memory 27 for temporarily storing information necessary for other control.

The operation of the network system using the dual IP switch hub according to the present invention configured as described above will be described with reference to FIGS. 3 and 4.

First, a case in which the computer user connects an external network is as follows.

The computer 15 executes a program for controlling the connection of the dual IP switch hub 13 and clicks an external network connection to transmit it to the dual IP switch hub 13 (external network IP: 125.212.100.25 is notified). do). Then, the dual IP switch hub 13 connects the computer 15 to the router 12 by performing an internal switch operation so that the router 12 can access the Internet.

Next, a case where the computer user connects an internal network is as follows.

The computer 15 executes a program for controlling the connection of the dual IP switch hub 13 and clicks the internal network connection to transmit it to the dual IP switch hub 13 (internal network IP: 100.120.25.25 is notified). do). Then, the dual IP switch hub 13 changes the connection to the internal network to isolate the external network and connects the computer to the internal switch hub 11 at the same time.

In the network system using the dual IP switch hub according to the present invention, the function of the dual IP switch hub 13 is important, and must support a virtual private network and a switch function, and the dual IP switch hub in the computer 15 ( 13) Run the program to control.

In particular, hypothetical private networks are switched at the physical layer, which is different from traditional VPNs. Thus, two networks (internal network and external network) are completely separated and connected by a control command.

At this time, if you look at the internal operation of the dual IP switch hub that is activated, initially initialize each memory and device (31), and when the computer requests an IP switch (32), check whether the current IP is A ( 33), depending on whether or not to change the IP to B and set FLAG to B (34) or change the IP to A and set FLAG to A (35) and then save (36) and notify (37) The process will proceed.

At this time, if there is no IP switch request in step 32, a subroutine for processing information data is called. As shown in FIG. 4, the subroutine checks whether the current FLAG is A (321). Depending on whether the data 322 of FLAG A or data 323 of FLAG B is read and stored in the stack (324), the data stored in the stack is transferred to the PHYSICAL of the Ethernet controller (325) and the step of FIG. Return to 32). Therefore, if there is no IP switch request, the current connection status information is maintained / maintained, and if there is a network connection request in the future, it automatically connects to the previously connected IP.

In the network system using the dual IP switch hub of the present invention as described above has the following advantages.

First, since the internal and external networks can be completely separated using dual IP switch hubs, a simple network configuration and a secure network can be configured.

Second, the construction cost is reduced by half compared to the conventional method.

Third, since it uses dual IP switch hub, it can be automatically converted and used conveniently without changing the port.

Fourth, the network is free to move from the internal network to the external network and from the external network to the internal network.

Fifth, there is no hassle of rebooting for network replacement.

Sixth, it is not necessary to use a connection port for connecting and changing cables.

Claims (2)

An Ethernet controller for controlling the transmission / reception data of the internal and external networks and having a memory; A CPU connected to the Ethernet controller and having a program memory and a memory to control IP switching and each device; And Dual IP switch circuit comprising an Ethernet controller and a transceiver for controlling the transmission and reception data between the CPU and the computer. A computer capable of communicating and controlling the hub; A dual IP switch hub having a plurality of IPs and connecting the computer to the internal network or the computer to the external network according to the IP commanded by the computer; An internal switch hub connected to the dual IP switch hub and connected to a server of an internal network; And Network system using a dual IP switch hub comprising a router for connecting the dual IP switch hub and an Internet service provider connected to the Internet.