CN102231741B - Method and apparatus for processing DHCP message - Google Patents
Method and apparatus for processing DHCP message Download PDFInfo
- Publication number
- CN102231741B CN102231741B CN2011101766029A CN201110176602A CN102231741B CN 102231741 B CN102231741 B CN 102231741B CN 2011101766029 A CN2011101766029 A CN 2011101766029A CN 201110176602 A CN201110176602 A CN 201110176602A CN 102231741 B CN102231741 B CN 102231741B
- Authority
- CN
- China
- Prior art keywords
- option
- dhcp message
- dhcp
- occurrence number
- recurrence
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 title claims abstract description 25
- 238000007689 inspection Methods 0.000 claims description 7
- 238000001914 filtration Methods 0.000 abstract description 12
- 230000004044 response Effects 0.000 description 7
- 238000010586 diagram Methods 0.000 description 4
- 230000016571 aggressive behavior Effects 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 230000007423 decrease Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 235000008694 Humulus lupulus Nutrition 0.000 description 1
- 206010033799 Paralysis Diseases 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention discloses a method and an apparatus for processing a dynamic host configuration protocol (DHCP) message. The method comprises the steps of receiving the DHCP message, examining the option carried by the DHCP message and filtering the DHCP message when the DHCP message carries a repeated option. According to the technical scheme provided by the invention, the safety problem that it is impossible to prevent an invalid user from attacking a DHCP server in the prior art is solved.
Description
Technical field
The present invention relates to network communication field, relate in particular to the method and apparatus that a kind of DHCP message is processed.
Background technology
DHCP(Dynamic Host Configuration Protocol, DHCP) be a kind of management and automatic distributing IP (Internet Protocol, procotol) communication protocol of address adopts client-server (Client-Server) work pattern.
Dhcp client: be triggering person and the driver of whole dhcp process, mutual by DHCP message and Dynamic Host Configuration Protocol server, obtain IP address and other network parameters.
The supplier of Dynamic Host Configuration Protocol server: DHCP service, mutual by DHCP message and dhcp client, for various types of clients are distributed suitable IP address, and can distribute other network parameter for client as required.
Dhcp client needs through following several stages for legal IP address of Dynamic Acquisition:
(1) the discovery stage: namely dhcp client is sought the stage of Dynamic Host Configuration Protocol server.Dhcp client is sought Dynamic Host Configuration Protocol server by sending DHCP discovery (DHCP Discover) message.Because the IP address of Dynamic Host Configuration Protocol server is unknown for client, so dhcp client sends DHCP Discover message with broadcast mode.
(2) provide the stage: namely Dynamic Host Configuration Protocol server provides the IP stage of address.Receive the Dynamic Host Configuration Protocol server of DHCP Discover message in network, can select a suitable IP address, together provide (DHCP Offer) message to send to dhcp client by DHCP together with IP address lease time limit and other configuration informations (as gateway address, domain name server address etc.).
(3) choice phase: i.e. stage of the dhcp client IP address of selecting that certain Dynamic Host Configuration Protocol server provides.If there are many Dynamic Host Configuration Protocol server to respond DHCP Offer message to dhcp client, dhcp client is generally only accepted first DHCP Offer message of receiving.Then send DHCP Request request message with broadcast mode, this message carries the IP address information of selected Dynamic Host Configuration Protocol server.Sending DHCP Request request message with broadcast mode, is in order to notify all Dynamic Host Configuration Protocol server, the IP address that it will select selected Dynamic Host Configuration Protocol server to provide, and other Dynamic Host Configuration Protocol server can be provided by the IP address that once provided.
(4) the stage of recognition: i.e. stage of the Dynamic Host Configuration Protocol server IP address confirming to provide.After receiving the DHCP Request request message of dhcp client transmission, Dynamic Host Configuration Protocol server has been searched according to the MAC Address of carrying in DHCP Request message does not have corresponding lease record.If have, send DHCP and reply (DHCP ACK) message as response, the IP address that the notice dhcp client can use distribution.If do not find corresponding lease record, perhaps for some reason can't normal allocation IP the address, send DHCP nonreply (DHCP NAK) message as response, the notice dhcp client can't distribute suitable IP address.Dhcp client need to resend the DHCP-DISCOVER message and come the IP address that please look for novelty.
Dhcp client is from the process of Dynamic Host Configuration Protocol server dynamic obtaining IP address, adopt broadcast mode to send the DHCP message, therefore the disabled user can listen to the MAC(Media Access Control of DHCP validated user, media interviews are controlled) information such as address, the DHCP validated user that oneself disguises oneself as is implemented to attack, as counterfeit in Dynamic Host Configuration Protocol server, man-in-the-middle attack, IP/MAC cheat (Spoofing) and attack, counterfeitly re-rent attack etc., bring the problem of a lot of secure contexts.
Summary of the invention
The method and apparatus that the embodiment of the present invention provides a kind of DHCP message to process can't take precautions against to solve prior art the safety problem that the disabled user attacks Dynamic Host Configuration Protocol server.
For solving the problems of the technologies described above, a kind of method that the embodiment of the present invention provides DHCP message to process comprises:
Configuration recurrence option processing policy;
Receive the DHCP message;
Check the option option that described DHCP message carries;
According to described recurrence option processing policy, inquiry option information table when described DHCP message carries repetition option, filters described DHCP message;
The option that the described DHCP message of described inspection carries comprises:
Record the option information that described DHCP message carries, wherein option information comprises option type and occurrence number, and the option information that described DHCP message is carried is saved to described option information table.
The equipment that the embodiment of the present invention provides a kind of DHCP message to process comprises:
Dispensing unit is used for configuration recurrence option processing policy;
Receiver is used for receiving the DHCP message;
Inspection unit is used for checking the option option that described DHCP message carries; Concrete being used for recorded the option information that described DHCP message carries, and wherein option information comprises option type and occurrence number, and the option information that described DHCP message is carried is saved to described option information table;
Processing unit is used for according to described recurrence option processing policy, and inquiry option information table when described DHCP message carries repetition option, filters described DHCP message.
The technical scheme that adopts the embodiment of the present invention to provide is carried the DHCP message of repetition option type by filtration, can solve prior art and can't take precautions against the safety problem that the disabled user attacks Dynamic Host Configuration Protocol server.
Description of drawings
Fig. 1 is the DHCP message format;
Fig. 2 is the method flow diagram that a kind of DHCP message that the embodiment of the present invention provides is processed;
Fig. 3 is the equipment block diagram that a kind of DHCP message that the embodiment of the present invention provides is processed.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, obviously, described embodiment is only a part of embodiment of the present invention, rather than whole embodiment.
The DHCP message format as shown in Figure 1, wherein:
Op: the action type of message, be divided into request message and response message, 1 is request message; 2 is response message.Concrete type of message identifies in the option field.
Htype: hardware address type.
Hlen: hardware address length.Only to the Ethernet support, hardware address length is fixed as 6 at present in system.
The number of the DHCP relay of hops:DHCP message process.The DHCP request message is every through a DHCP relay, and this field will increase by 1.
Xid: the random number by client software produces is used for matching request and response message.
Secs: client enters the time of IP application IP addresses process or upgrades the time of IP address process; According to circumstances set by client software.Do not use at present, be fixed as 0.
Flags: attribute field.First bit is broadcasting response identification position, and being used for identifying the dhcp server response message is to adopt clean culture or broadcast mode transmission, and mode of unicast is adopted in 0 expression, and broadcast mode is adopted in 1 expression.All the other bits keep need not.
The IP address of ciaddr:DHCP client.
The yiaddr:DHCP server-assignment is to the IP address of client.
The siaddr:DHCP client is obtained the server ip address of the information such as IP address.
The giaddr:DHCP client send after request message through the IP address of first DHCP relay.
The hardware address of chaddr:DHCP client.
The sname:DHCP client is obtained the server name of the information such as IP address.
The file:DHCP server is startup profile name and the routing information of dhcp client appointment.
Options: optional elongated Option Field.Option and the Dynamic Host Configuration Protocol server interactive information of dhcp client by carrying in the DHCP message.The form of option is as follows:
| code | len | value |
Wherein, code represents the type of option, and len is the byte number of Value field, and value is used for carrying the configuration informations such as effective rental period, server ip address.
For example code is 82 option, is called relay agent information option (Relay Agent Information option), referred to as option82.
Usually there is not repetition option in the mutual DHCP message of dhcp client and Dynamic Host Configuration Protocol server, i.e. two or more identical option of code, Dynamic Host Configuration Protocol server also can't be resolved the DHCP message that carries repetition option.The DHCP validated user if not method user this moment disguises oneself as, structure carries the DHCP message aggression Dynamic Host Configuration Protocol server of repetition option in a large number, will cause the Dynamic Host Configuration Protocol server processing expenditure to increase severely and even paralyse, and then affect the address assignment of validated user.
The method and apparatus that the embodiment of the present invention provides a kind of DHCP message to process.Described method comprises: receive the DHCP message; Check the option option that described DHCP message carries; When described DHCP message carries repetition option, filter described DHCP message.The technical scheme that adopts the embodiment of the present invention to provide can be taken precautions against the safety problem that the disabled user brings by the DHCP message aggression Dynamic Host Configuration Protocol server that carries in a large number repetition option.
Referring to Fig. 1, be the method flow diagram that a kind of DHCP message that the embodiment of the present invention provides is processed, comprising:
101: receive the DHCP message.
The network equipment receives the DHCP message, and described DHCP message comprises DHCP Discover message, DHCP Request message, and DHCP discharges (Release) message, and DHCP refuses (Decline) message, DHCP notice (Inform) message etc.
The described network equipment comprises Dynamic Host Configuration Protocol server, DHCP relay equipment, DHCP Snooping equipment etc.
The described network equipment can be resolved all option that carry in described DHCP message.
102: check the option that described DHCP message carries.
The described network equipment can record the option information that described DHCP message carries, and described option information comprises option type and occurrence number.
The described network equipment can be preserved the option information table, comprises option information in described option information table.
103: when described DHCP message carries repetition option, filter described DHCP message.
The described network equipment can be inquired about the option information table, when existing occurrence number greater than 1, when namely repeating option, filters described DHCP message.
Optionally, before receiving the DHCP message, the described network equipment can configure the recurrence option processing policy, described recurrence option processing policy can be the DHCP message that filters the repetition option of any type, it can also be the DHCP message of the repetition option of filter particular types, for example, filtration types is the DHCP message of 82 repetition option; Described recurrence option processing policy can also be to filter the option occurrence number of any type greater than the DHCP message of threshold value, for example, the option occurrence number of filtering any type is greater than 3 DHCP message, can also be that the option occurrence number of filter particular types is greater than the DHCP message of threshold value, for example, filtration types is 82 option occurrence number greater than DHCP message of 3 etc.
If the DHCP message that described recurrence option processing policy repeats for the option that filters any type, the described network equipment can be inquired about the option information table, when having occurrence number greater than 1 option information, filters described DHCP message.
If the DHCP message that the option that described recurrence option processing policy is filter particular types repeats, the described network equipment can be according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number was filtered described DHCP message greater than 1 o'clock.
If described recurrence option processing policy is to filter the option occurrence number of any type greater than the DHCP message of threshold value, the described network equipment can be inquired about the option information table according to occurrence number, when having occurrence number greater than the option information of threshold value, filter described DHCP message.
If the option occurrence number that described recurrence option processing policy is filter particular types is greater than the DHCP message of threshold value, the described network equipment can be according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number is filtered described DHCP message during greater than threshold value.
Optionally, the described network equipment can also arrange the state of described recurrence option processing policy, for example the state of described recurrence option processing policy is set to enable (enable) or 1, and expression filters according to described recurrence option processing policy the DHCP message that carries repetition option; The state of described recurrence option processing policy is set to enable (disable) or 0, and expression is not processed the DHCP message according to described recurrence option processing policy.
For instance, the network equipment receives DHCP Request message, has carried option51, option51, option53, option54, option82, option82, the options such as option82.
The network equipment checks all option that this DHCP Request message carries, and records option information, and is as shown in table 1.
Table 1option information table
| Type | Occurrence number |
| 51 | 2 |
| 53 | 1 |
| 54 | 1 |
| 82 | 3 |
| … | … |
Suppose, described network equipments configuration following recurrence option processing policy:
Strategy 1: filtration types is the DHCP message of 82 repetition option
Strategy 2: the option occurrence number of filtering any type is greater than 4 DHCP message
State when tactful 1 is set to enable (enable), and the state of strategy 2 is set to enable (disable):
The network equipment is according to type 82 inquiry option information tables (as table 1), and there is type 82 in described option information table, and corresponding occurrence number is 3, and namely option82 repeats, and filters described DHCP message; When the state of described recurrence option processing policy is set to enable (disable).
State when tactful 1 is set to enable (disable); The state of strategy 2 is set to enable (enable):
The network equipment is according to occurrence number inquiry option information table (as table 1), there is no occurrence number greater than 4 option information, do not filter described DHCP message.
Referring to Fig. 2, be the equipment block diagram that a kind of DHCP message that the embodiment of the present invention provides is processed, described equipment comprises receiver 201, inspection unit 202 and processing unit 203.Wherein:
Described receiver 201 is used for receiving the DHCP message;
Described inspection unit 202 is used for checking the option option that described DHCP message carries;
Described processing unit 203 is used for filtering described DHCP message when described DHCP message carries repetition option.
Described equipment comprises Dynamic Host Configuration Protocol server, and DHCP relay equipment, DHCP are intercepted (Snooping) equipment etc.
Described DHCP message comprises that DHCP finds (Discover) message, and DHCP asks (Request) message, and DHCP discharges (Release) message, and DHCP refuses (Decline) message, DHCP notice (Inform) message etc.
Described equipment can be resolved all option that carry in described DHCP message.
Described inspection unit 202 can record the option information that described DHCP message carries, and described option information comprises option type and occurrence number.
Described equipment can be preserved the option information table, comprises option information in described option information table.
Described processing unit 203 can be inquired about the option information table, when existing occurrence number greater than 1, when namely repeating option, filters described DHCP message.
Described equipment can also comprise:
Dispensing unit 204 was used for before receiving the DHCP message, configuration recurrence option processing policy.
Described recurrence option processing policy can be the DHCP message that filters the repetition option of any type, can also be the DHCP message of the repetition option of filter particular types, and for example, filtration types is the DHCP message of 82 repetition option.Described recurrence option processing policy can also be to filter the option occurrence number of any type greater than the DHCP message of threshold value, and for example, the option occurrence number of filtering any type is greater than 3 DHCP message; Can also be the option occurrence number of filter particular types greater than the DHCP message of threshold value, for example, filtration types is 82 option occurrence number greater than DHCP message of 3 etc.
If described recurrence option processing policy is the DHCP message of the repetition option that filters any type, described processing unit 203 can be inquired about the option information table, when having occurrence number greater than 1 option information, filters described DHCP message.
If the DHCP message of the repetition option that described recurrence option processing policy is filter particular types, described processing unit 203 can be according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number was filtered described DHCP message greater than 1 o'clock.
If described recurrence option processing policy is to filter the option occurrence number of any type greater than the DHCP message of threshold value, described processing unit 203 can be inquired about the option information table according to occurrence number, when having occurrence number greater than the option information of threshold value, filter described DHCP message.
If the option occurrence number that described recurrence option processing policy is filter particular types is greater than the DHCP message of threshold value, described processing unit 203 can be according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number is filtered described DHCP message during greater than threshold value.
Optionally, described dispensing unit 204 can also arrange the state of described recurrence option processing policy, for example the state of described recurrence option processing policy is set to enable (enable) or 1, and expression filters according to described recurrence option processing policy the DHCP message that carries repetition option; The state of described recurrence option processing policy is set to enable (disable) or 0, and expression is not processed the DHCP message according to described recurrence option processing policy.
The technical scheme that adopts the embodiment of the present invention to provide, carry the DHCP message of repetition option type by filtration, can solve the safety problem that prior art can't be taken precautions against the DHCP message aggression Dynamic Host Configuration Protocol server of disabled user by carrying in a large number repetition option type.
One of ordinary skill in the art will appreciate that all or part of step that realizes in above-described embodiment method is to come the relevant hardware of instruction to complete by program, described program can be stored in computer-readable recording medium, described storage medium can be ROM/RAM, disk or CD etc.
The above; only for the better embodiment of the present invention, but protection scope of the present invention is not limited to this, anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily or replacement are within all should being encompassed in protection scope of the present invention.
Claims (7)
1. the method that the dynamic host configuration protocol DHCP message is processed, is characterized in that, comprising:
Configuration recurrence option processing policy;
Receive the DHCP message;
Check the option option that described DHCP message carries;
According to described recurrence option processing policy, inquiry option information table when described DHCP message carries repetition option, filters described DHCP message;
The option that the described DHCP message of described inspection carries comprises:
Record the option information that described DHCP message carries, wherein option information comprises option type and occurrence number, and the option information that described DHCP message is carried is saved to described option information table.
2. method according to claim 1, is characterized in that, and is described according to described recurrence option processing policy, and inquiry option information table when described DHCP message carries repetition option, filters described DHCP message and specifically comprises:
If the DHCP message that described recurrence option processing policy repeats for the option that filters any type, inquiry option information table when having occurrence number greater than 1 option information, filters described DHCP message;
If the DHCP message that the option that described recurrence option processing policy is filter particular types repeats, according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number was filtered described DHCP message greater than 1 o'clock;
If described recurrence option processing policy is to filter the option occurrence number of any type greater than the DHCP message of threshold value, according to occurrence number inquiry option information table, when having occurrence number greater than the option information of described threshold value, filter described DHCP message;
If the option occurrence number that described recurrence option processing policy is filter particular types is greater than the DHCP message of threshold value, according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number is filtered described DHCP message during greater than described threshold value.。
3. method according to claim 1, is characterized in that, described configuration recurrence option processing policy comprises that also the state that described recurrence option processing policy is set is for enabling (enable) or removing to enable (disable).
4. the equipment that the dynamic host configuration protocol DHCP message is processed, is characterized in that, comprising:
Dispensing unit is used for configuration recurrence option processing policy;
Receiver is used for receiving the DHCP message;
Inspection unit is used for checking the option option that described DHCP message carries; Concrete being used for recorded the option information that described DHCP message carries, and wherein option information comprises option type and occurrence number, and the option information that described DHCP message is carried is saved to described option information table;
Processing unit is used for according to described recurrence option processing policy, and inquiry option information table when described DHCP message carries repetition option, filters described DHCP message.
5. equipment according to claim 4, is characterized in that,
Described processing unit specifically is used for:
If the DHCP message that described recurrence option processing policy repeats for the option that filters any type, inquiry option information table when having occurrence number greater than 1 option information, filters described DHCP message;
If the DHCP message that the option that described recurrence option processing policy is filter particular types repeats, according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number was filtered described DHCP message greater than 1 o'clock;
If described recurrence option processing policy is to filter the option occurrence number of any type greater than the DHCP message of threshold value, according to occurrence number inquiry option information table, when having occurrence number greater than the option information of described threshold value, filter described DHCP message;
If the option occurrence number that described recurrence option processing policy is filter particular types is greater than the DHCP message of threshold value, according to described particular type inquiry option information table, when there being described particular type, and corresponding occurrence number is filtered described DHCP message during greater than described threshold value.
6. equipment according to claim 4, is characterized in that, described dispensing unit also is used for the state of described recurrence option processing policy being set for enabling (enable) or removing to enable (disable).
7. the described equipment of according to claim 4 to 6 any one, is characterized in that, described equipment comprises Dynamic Host Configuration Protocol server, DHCP relay equipment, and perhaps DHCP intercepts Snooping equipment.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2011101766029A CN102231741B (en) | 2011-06-28 | 2011-06-28 | Method and apparatus for processing DHCP message |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2011101766029A CN102231741B (en) | 2011-06-28 | 2011-06-28 | Method and apparatus for processing DHCP message |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102231741A CN102231741A (en) | 2011-11-02 |
| CN102231741B true CN102231741B (en) | 2013-11-06 |
Family
ID=44844274
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2011101766029A Expired - Fee Related CN102231741B (en) | 2011-06-28 | 2011-06-28 | Method and apparatus for processing DHCP message |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102231741B (en) |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101188628A (en) * | 2007-12-29 | 2008-05-28 | 华为技术有限公司 | Method, system, network and service information distribution device for distributing service information |
| CN102082835A (en) * | 2009-11-27 | 2011-06-01 | 华为技术有限公司 | Method and device for distributing IP (internet protocol) addresses |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7356009B1 (en) * | 2002-10-02 | 2008-04-08 | Cisco Technology, Inc. | Method and apparatus for configuring a mobile node to retain a “home” IP subnet address |
-
2011
- 2011-06-28 CN CN2011101766029A patent/CN102231741B/en not_active Expired - Fee Related
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101188628A (en) * | 2007-12-29 | 2008-05-28 | 华为技术有限公司 | Method, system, network and service information distribution device for distributing service information |
| CN102082835A (en) * | 2009-11-27 | 2011-06-01 | 华为技术有限公司 | Method and device for distributing IP (internet protocol) addresses |
Non-Patent Citations (1)
| Title |
|---|
| T. Lemon.《Encoding Long Options in the Dynamic Host Configuration Protocol (DHCPv4)》.《IETF Network Working Group》.2002,第4页-第6页. * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102231741A (en) | 2011-11-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101572712B (en) | Method for preventing attack of counterfeit message and repeater equipment thereof | |
| CN103534994B (en) | The method, apparatus and system of communication are realized after a kind of virtual machine (vm) migration | |
| CN1845554B (en) | Control method for dynamically distributing IP address in 3G network | |
| CN103888551A (en) | Internet protocol address obtaining method in network, relay device and system | |
| CN108418806B (en) | Message processing method and device | |
| CN102325202B (en) | Method and equipment for managing customer address table | |
| CN101771732B (en) | Message processing method, device and network equipment | |
| CN101827138B (en) | Optimized method and device for processing IPV6 filter rule | |
| CN101184099B (en) | Second IP address assignment method based on dynamic host machine configuration protocol access authentication | |
| CN101534329A (en) | IP address assignment method and system | |
| CN101188514A (en) | Method, device and system for automatically discovering network element device | |
| CN101917444A (en) | Method and device for creating IP source address binding list item, and switch | |
| CN102355510B (en) | Medium/media access control (MAC) address allocation method, device and system | |
| CN105245629A (en) | DHCP-based host communication method and device | |
| CN101582888A (en) | Method for creating neighbor discovery table item and server | |
| CN111935335A (en) | DHCP address allocation method and device | |
| CN102238245B (en) | Address allocation method and equipment | |
| CN101577723B (en) | Method for preventing neighbor discovery protocol message attack and device | |
| CN102394948A (en) | DHCP (dynamic host configuration protocol) address distribution method and DHCP server | |
| CN101656724A (en) | Anti-attack method and dynamic host configuration protocol server | |
| CN101888388A (en) | Method and device for realizing virtual media access control address | |
| CN101729314A (en) | Method and device for recovering dynamic table entries and dynamic host configuration protocol snoopingsnooping equipment | |
| CN102185724A (en) | Address management method and equipment | |
| CN102340555A (en) | Medium/media access control address allocation method, device and system | |
| CN103929506A (en) | Method and device for distributing IP address for IP hard disk |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20131106 |