WO2015117400A1

WO2015117400A1 - Packet forwarding and processing method and device, and broadband access device

Info

Publication number: WO2015117400A1
Application number: PCT/CN2014/089243
Authority: WO
Inventors: 叶茂; 沈宇扬
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-07-25
Filing date: 2014-10-23
Publication date: 2015-08-13
Also published as: CN105282032A

Abstract

Provided are a packet forwarding and processing method and device, and a broadband access device. The method comprises: configuring an address pool which is used for conducting packet forwarding, wherein MAC addresses are stored in the address pool, and the MAC addresses comprise a reserved MAC address and/or one or more source MAC addresses of a packet which is recovered after the packet is forwarded; and according to the reserved MAC address and/or the source MAC addresses of the packet in the address pool, conducting packet forwarding and processing. The present invention solves the problem in the related art of wasting of resources caused by the fact that there are large demands for reserved MAC addresses but it is likely that a user may not use the reserved MAC addresses, thereby achieving the effects of effectively reducing the number of reserved MAC addresses and ensuring the security of user information.

Description

Message forwarding processing method, device and broadband access device

Technical field

The present invention relates to the field of communications, and in particular, to a packet forwarding processing method and apparatus, and a broadband access device.

Background technique

In the current network networking, the user access control (Media Access Control, MAC address) address is configured by the user. When the user accesses the network, the traditional network device does not modify the user MAC address, resulting in the user MAC. The address is actually untrustworthy. There may be conflicts with other users. Address conflicts may cause other consequences such as system service interruption. In addition, the user's original MAC is also exposed in the network layer devices. If the MAC address of the user device is mastered, the user location information may be obtained by intercepting the network communication content. In order to solve the above problems, the International Standards Organization proposed the concept of virtual MAC (virtual MAC). The so-called virtual MAC is actually replacing the user MAC with other MAC addresses. The MAC is not uniquely specified, and the information of the user's location cannot be obtained through the MAC address. . However, there is no way and method of replacement. In summary, the virtual MAC is mainly for: (1) to prevent user address conflicts. (2) Prevent user information from being threatened according to the MAC address.

The actual virtual MAC deployment directly replaces the user MAC with the pre-planned MAC address of the system. The current network is developing rapidly, the number of access users is large, and the number of access network devices is increasing. The traditional virtual MAC arrangement requires not only pre-reserving MAC address planning for various devices, but also pre-reserving a large number of MAC addresses for possible users. Even if these users may not use the technology.

Therefore, in the related art, there is a problem that the reserved MAC address is large, and the reserved MAC address may not be used by the user, thereby causing waste of resources.

Summary of the invention

The present invention provides a packet forwarding processing method and apparatus, so as to at least solve the related art, there is a large demand for a reserved MAC address, and a reserved MAC address may not be used by a user, thereby causing waste of resources. problem.

According to an aspect of the present invention, a packet forwarding processing method is provided, including: configuring an address pool for packet forwarding, wherein the address pool stores a MAC address, and the MAC address includes a reservation. a MAC address and/or one or more source MAC addresses of the packets that are recovered after forwarding the packet; according to the reserved MAC address in the address pool and/or the source MAC address of the packet Perform packet forwarding processing.

Preferably, the configuring the address pool for performing packet forwarding includes: determining, by using a MAC address in the address pool, the source MAC address of the packet to be a trusted MAC address. Address; if the judgment result is yes, the source MAC address is added to the address pool.

Preferably, performing packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet includes: determining whether the recovered source MAC address exists in the address pool; If the result of the determination is yes, the received MAC address of the packet to be forwarded is replaced with the source MAC address for packet forwarding.

Preferably, performing packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet includes: using a MAC address in the address pool to source the MAC address of the packet After the address is replaced, the packet processing is performed according to the replaced MAC address; the correspondence between the source MAC address and the replaced MAC address is stored; and the replaced MAC address is obtained according to the correspondence The downlink processing of the packet is performed by replacing the source MAC address.

Preferably, after the configuration of the address pool for packet forwarding, the method further includes: determining whether an aging time preset by the MAC address in the address pool is expired; and if the determination result is yes, releasing the location Indicates the MAC address of the address pool whose aging time expires.

According to another aspect of the present invention, a message forwarding processing apparatus is provided, including: a configuration module, configured to configure an address pool for packet forwarding, wherein the address pool stores a MAC address, The MAC address includes a reserved MAC address and/or one or more source MAC addresses of the packet that are recovered after the packet is forwarded; the processing module is configured to use the reserved MAC address in the address pool and / or the source MAC address of the packet is forwarded by the packet.

Preferably, the configuration module includes: a first determining unit, configured to determine whether the source MAC address is a trusted MAC address after replacing the source MAC address of the packet by using a MAC address in the address pool And an adding unit configured to add the source MAC address to the address pool if the determination result of the first determining unit is YES.

Preferably, the processing module includes: a second determining unit, configured to determine whether the source MAC address is recovered in the address pool; and the first forwarding unit is configured to determine that the second determining unit is If yes, the received MAC address of the packet to be forwarded is replaced with the source MAC address for packet forwarding.

Preferably, the processing module includes: a first processing unit, configured to: after the source MAC address of the packet is replaced by using a MAC address in the address pool, report the packet according to the replaced MAC address a storage unit configured to store a correspondence between the source MAC address and the replaced MAC address; the second processing unit is configured to replace the replaced MAC address with the source MAC according to the correspondence The address performs downlink processing of the packet.

Preferably, the device further includes: a determining module, configured to determine whether an aging time preset by the MAC address in the address pool expires; and releasing the module, if the determining result of the determining module is yes, Release the MAC address of the address pool whose aging time expires.

According to still another aspect of the present invention, a broadband access device is provided, comprising the apparatus of any of the above.

The address pool configured for packet forwarding is configured by the present invention, wherein the address pool stores a MAC address, where the MAC address includes a reserved MAC address and/or one or more packets are forwarded. Deleting the source MAC address of the packet; performing packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet, and solving the related technology The MAC address requirement is large, and the reserved MAC address may not be used by the user, thereby causing waste of resources, thereby achieving the effect of effectively reducing the reserved MAC address and ensuring the security of the user information.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

FIG. 1 is a flowchart of a packet forwarding processing method according to an embodiment of the present invention; FIG.

2 is a structural block diagram of a message forwarding processing apparatus according to an embodiment of the present invention;

3 is a block diagram showing a preferred structure of a configuration module 22 in a message forwarding processing apparatus according to an embodiment of the present invention;

4 is a block diagram 1 of a preferred structure of a processing module 24 in a message forwarding processing apparatus according to an embodiment of the present invention;

FIG. 5 is a second structural block diagram of a processing module 24 in a message forwarding processing apparatus according to an embodiment of the present invention;

FIG. 6 is a block diagram showing a preferred structure of a message forwarding processing apparatus according to an embodiment of the present invention; FIG.

7 is a structural block diagram of a broadband access device according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of virtual MAC deployment according to a preferred embodiment of the present invention; FIG.

9 is a flow chart of packet forwarding by a virtual MAC according to a preferred embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In this embodiment, a packet forwarding processing method is provided. FIG. 1 is a flowchart of a packet forwarding processing method according to an embodiment of the present invention. As shown in FIG. 1, the process includes the following steps:

Step S102, configuring an address pool for packet forwarding, where the address pool stores a MAC address, where the MAC address includes a reserved MAC address and/or one or more packets that are retransmitted after forwarding the packet. Source MAC address;

Step S104: Perform packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet.

Through the foregoing steps, the packet forwarding process is performed according to the reserved MAC address and/or the reclaimed source MAC address. Compared with the related art, the reserved MAC address planning is performed on various devices in advance, and there is a large demand for the reserved MAC address. The reserved MAC address may not be used by the user, which may result in waste of resources. The above processing can effectively solve the above problem, thereby effectively reducing the reserved MAC address and ensuring the security of the user information.

The address pool configured for packet forwarding includes multiple processing. For example, the MAC address can be directly reserved. Preferably, only one MAC address can be reserved. Of course, multiple MAC addresses can be reserved as needed. For example, The method of recovering the source MAC address of the packet forwarding process may be adopted. The following processing may be adopted: after the source MAC address of the packet is replaced by the MAC address in the address pool, it is determined whether the source MAC address is trusted. MAC address; if the judgment result is yes, the source MAC address is added to the address pool.

In the case of packet forwarding processing based on the reserved MAC address and/or the source MAC address of the packet in the address pool, in order to minimize the need for the reserved MAC address, the packet can be forwarded by using the reclaimed MAC address. For example, If the result of the determination is yes, the received MAC address of the packet to be forwarded is replaced with the source MAC address for packet forwarding.

When the packet forwarding process is performed according to the reserved MAC address in the address pool and/or the source MAC address of the packet, the correspondence between the replacement MAC addresses may be stored in order to provide the processing efficiency of the packet. After the source MAC address of the packet is replaced by the MAC address in the address pool, the packet is processed according to the replaced MAC address; the correspondence between the source MAC address and the replaced MAC address is stored; The replaced MAC address is replaced with the source MAC address for downlink processing of the packet.

To optimize the use of the resource, you can also perform the aging process on the MAC address that is not used for the long-term use. For example, you can determine the MAC address in the address pool. Whether the aging time expires; if the judgment result is yes, the MAC address of the aging time expired in the address pool is released. It should be noted that, after the MAC address is released, if the user needs to replace the MAC address when performing the service process again, in order to protect the security of the information, the user may randomly allocate the reserved MAC address.

In this embodiment, a message forwarding processing device is also provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

2 is a structural block diagram of a message forwarding processing apparatus according to an embodiment of the present invention. As shown in FIG. 2, the apparatus includes a configuration module 22 and a processing module 24. The apparatus will be described below.

The configuration module 22 is configured to configure an address pool for packet forwarding, where the address pool stores a MAC address, and the MAC address includes a reserved MAC address and/or one or more packets that are retransmitted after forwarding the packet. The source MAC address of the file; the processing module 24 is connected to the configuration module 22, and configured to perform packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet.

FIG. 3 is a block diagram showing a preferred structure of the configuration module 22 in the message forwarding processing apparatus according to the embodiment of the present invention. As shown in FIG. 3, the configuration module 22 includes a first determining unit 32 and an adding unit 34. 22 for explanation.

The first determining unit 32 is configured to determine whether the source MAC address is a trusted MAC address after replacing the source MAC address of the packet by using the MAC address in the address pool, and adding the unit 34 to the first determining unit. 32. Set to add the source MAC address to the address pool if the determination result of the first determining unit is YES.

FIG. 4 is a block diagram of a preferred structure of the processing module 24 in the message forwarding processing apparatus according to the embodiment of the present invention. As shown in FIG. 4, the processing module 24 includes: a second determining unit 42 and a first forwarding unit 44. The processing module 24 will be described.

The second determining unit 42 is configured to determine whether there is a recovered source MAC address in the address pool; the first forwarding unit 44 is connected to the second determining unit 42 and is set to be in the case that the determination result of the second determining unit is YES. The MAC address of the received packet to be forwarded is replaced with the source MAC address for packet forwarding.

FIG. 5 is a block diagram of a preferred structure of the processing module 24 in the packet forwarding processing apparatus according to the embodiment of the present invention. As shown in FIG. 5, the processing module 24 includes: a first processing unit 52, a storage unit 54, and a second processing unit. 56. The device will be described below.

The first processing unit 52 is configured to perform the report processing of the packet according to the replaced MAC address after the source MAC address of the packet is replaced by the MAC address in the address pool, and the storage unit 54 is connected to the first processing. The unit 52 is configured to store the correspondence between the source MAC address and the replaced MAC address. The second processing unit 56 is connected to the storage unit 54 and is configured to replace the replaced MAC address with the source MAC address according to the correspondence. Downstream processing of the message.

FIG. 6 is a block diagram of a preferred structure of a message forwarding processing apparatus according to an embodiment of the present invention. As shown in FIG. 6, the apparatus further includes a determining module 62 and a releasing module 64, in addition to all the structures shown in FIG. This preferred structure will be described.

The determining module 62 is connected to the configuration module 22, and is configured to determine whether the preset aging time of the MAC address in the address pool expires; the releasing module 64 is connected to the determining module 62 and the processing module 24, and is configured to be in the determining module. If the judgment result is yes, the MAC address whose aging time expires in the address pool is released.

FIG. 7 is a structural block diagram of a broadband access device according to an embodiment of the present invention. As shown in FIG. 7, the broadband access device 70 includes the packet forwarding processing device 72 of any of the above.

Based on the above problems in the related art, in the present embodiment, a method for implementing a virtual MAC (DHCP) on an Ethernet or related network is provided, which can effectively reduce the demand for a MAC address.

The solution is mainly for the device that starts the virtual MAC function, and recycles the source MAC of the port to which the new MAC has been allocated. The implementation of the MAC address recycling is as follows: The system configures a reserved MAC address pool. In theory, the address pool only needs to reserve a MAC address in advance. The MAC address needs to be pre-planned to avoid conflicts with other devices or actual users. In actual use, in order to prevent some users from using illegal addresses or to protect some users, you can configure the MAC to MAC address pool as required.

After the virtual MAC function is enabled, the system intercepts the user's uplink packet and determines whether the MAC address of the user packet has been replaced. If it needs to be replaced, an address is allocated from the MAC pool to the user for communication with other users. All subsequent source MAC addresses are replaced with the assigned MAC addresses. Check the user's original MAC address. Whether it is a conflict or whether it is an untrusted MAC address. The so-called conflict means that the user MAC is the same as the MAC address of the user who already has the service. If the user MAC address is not conflicting and trusted, the original MAC address of the user is put into the MAC address pool as a new address allocation.

It should be noted that the aging of the address is performed according to the normal aging. When the so-called virtual MAC aging of the user, if the user MAC address is not allocated, it is directly deleted from the address pool, and if it has been assigned, the MAC address is marked. Released when the user is aging. In addition, if the user MAC is placed in the address pool, it needs to determine whether it already exists in the address pool. If it exists, it only needs to update the status and clear the flag to be released.

Through the above embodiments and the preferred embodiments, the requirement for the reserved MAC address after the virtual MAC function is enabled is effectively reduced, and the security of the user data information can also be protected.

Preferred embodiments of the present invention will now be described with reference to the accompanying drawings.

8 is a schematic diagram of virtual MAC deployment according to a preferred embodiment of the present invention. As shown in FIG. 8, each device implementing a virtual MAC virtual MAC address must have a MAC address pool for the first user and The MAC address of the untrusted user is replaced. In addition, the address pool needs to save the MAC address that can be used by other users after replacement.

For some special MAC addresses, if the MAC address actually exists in other users, or the system administrator does not want to expose the user MAC address to other devices, the MAC address can be set as an untrusted MAC address. Such a MAC address will not be reclaimed, but the user MAC will still be replaced after the virtual MAC function is turned on.

After the Virtual MAC is enabled, the uplink and downlink of the user stream need to be processed separately.

FIG. 9 is a flowchart of packet forwarding by a virtual MAC according to a preferred embodiment of the present invention. As shown in FIG. 9, the process includes the following steps:

Step S902, receiving user uplink data;

Step S904, detecting the user MAC address corresponding to the message, if a conflict is detected, proceeding to step S906, otherwise proceeding to step S910;

Step S906, determining whether the user MAC address is trusted? If the result of the determination is yes, proceed to step S908, otherwise proceed to step S910;

Step S908, the source address is recovered and stored in the address pool;

Step S910, allocating a reserved new address;

In step S912, the system exchange and other service processing are submitted.

In combination with the above processing flow, the preferred processing manners in each step are described below: the system uses a switch to control whether the user enables the virtual MAC function, and in the case of the opening, in the user upstream, before the user enters the system switching process, The user MAC address reported by the user is detected and the uplink MAC address is replaced. The replacement rule is to preferentially use the MAC address reclaimed by other users from the MAC address pool to save the reserved MAC address of the system. If the MAC address pool has no reclaimed address, the port is used. The system reserves the MAC address. For a trusted MAC address, the MAC address is reclaimed into the address pool for use by the next virtual MAC user. Untrusted MAC addresses are not reserved and are discarded directly. The user stream is then exchanged for system processing, and the correspondence diagram between the user's original MAC and the replaced MAC is retained. The replaced user stream is forwarded according to the normal process. For the MAC address that the system recognizes as being replaced, it is directly handed over to the switch and the service for processing. It is no longer necessary to participate in the uplink virtual MAC processing process to speed up system switching and service processing efficiency.

In the downlink processing, in order to ensure that the user equipment can be recognized normally, the virtual MAC used by the user must be replaced with the original MAC, as long as it is identified as the replaced virtual MAC user, before being sent to the downlink user, according to the saved original MAC address of the user. The virtual MAC correspondence replaces the MAC address with the original MAC address of the user.

The correspondence between the original MAC address and the replacement MAC address of the user is only removed after the system aging time expires, or the system administrator forcibly releases the user. The so-called user MAC address aging means that the user has no traffic for a long time, and the system releases the resources occupied by the user. After the release, if the user enters the system again to enter the service process and needs to replace the MAC address, in order to ensure the security of the user information, the system recommends that the replaced virtual MAC address be randomly allocated according to the reserved MAC address pool instead of the last allocation. MAC address.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, through the foregoing embodiments and the preferred embodiments, the related art has a problem that the reserved MAC address is required to be large, and the reserved MAC address may not be used by the user, thereby causing waste of resources. In addition, the effect of effectively reducing the reserved MAC address and ensuring the security of the user information is achieved.

Claims

A packet forwarding processing method includes:

Configuring an address pool for packet forwarding, where the address pool stores a MAC address, where the MAC address includes a reserved MAC address and/or one or more packets that are recovered after forwarding the packet. Source MAC address of the text;

And performing packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet.
The method of claim 1, wherein the configuring the address pool for packet forwarding comprises:

After the source MAC address of the packet is replaced by using the MAC address in the address pool, it is determined whether the source MAC address is a trusted MAC address.

In the case where the determination result is yes, the source MAC address is added to the address pool.
The method of claim 1, wherein the packet forwarding process according to the reserved MAC address in the address pool and/or the source MAC address of the packet includes:

Determining whether the recovered source MAC address exists in the address pool;

If the result of the determination is yes, the received MAC address of the packet to be forwarded is replaced with the source MAC address for packet forwarding.
The method of claim 1, wherein the packet forwarding process according to the reserved MAC address in the address pool and/or the source MAC address of the packet includes:

After the source MAC address of the packet is replaced by the MAC address in the address pool, the packet is processed according to the replaced MAC address.

And storing a correspondence between the source MAC address and the replaced MAC address;

And performing the downlink processing of the packet by replacing the replaced MAC address with the source MAC address.
The method according to any one of claims 1 to 4, further comprising: after configuring the address pool for performing packet forwarding, further comprising:

Determining whether the preset aging time of the MAC address in the address pool expires;

If the result of the determination is yes, the MAC address in the address pool whose aging time expires is released.
A packet forwarding processing apparatus includes:

The configuration module is configured to configure an address pool for packet forwarding, where the address pool stores a MAC address, where the MAC address includes a reserved MAC address and/or one or more packets are forwarded. Source MAC address of the recovered message;

The processing module is configured to perform packet forwarding processing according to the reserved MAC address in the address pool and/or the source MAC address of the packet.
The apparatus of claim 6 wherein said configuration module comprises:

The first determining unit is configured to determine whether the source MAC address is a trusted MAC address after replacing the source MAC address of the packet by using a MAC address in the address pool;

The adding unit is configured to add the source MAC address to the address pool if the determination result of the first determining unit is YES.
The apparatus of claim 6 wherein said processing module comprises:

a second determining unit, configured to determine whether the recovered source MAC address exists in the address pool;

The first forwarding unit is configured to replace the received MAC address of the packet to be forwarded with the source MAC address for packet forwarding if the determination result of the second determining unit is YES.
The apparatus of claim 6 wherein said processing module comprises:

The first processing unit is configured to perform the report processing of the packet according to the replaced MAC address after the source MAC address of the packet is replaced by using the MAC address in the address pool;

a storage unit, configured to store a correspondence between the source MAC address and the replaced MAC address;

The second processing unit is configured to perform the downlink processing of the packet by replacing the replaced MAC address with the source MAC address according to the correspondence.
The apparatus according to any one of claims 6 to 9, further comprising:

The determining module is configured to determine whether an aging time preset by the MAC address in the address pool expires;

And releasing the module, configured to release the MAC address of the address pool in which the aging time expires if the judgment result of the determining module is yes.
A broadband access device comprising the apparatus of any one of claims 6 to 10.