WO2017156979A1 - 一种媒体接入控制mac地址处理方法及装置 - Google Patents

一种媒体接入控制mac地址处理方法及装置 Download PDF

Info

Publication number
WO2017156979A1
WO2017156979A1 PCT/CN2016/096231 CN2016096231W WO2017156979A1 WO 2017156979 A1 WO2017156979 A1 WO 2017156979A1 CN 2016096231 W CN2016096231 W CN 2016096231W WO 2017156979 A1 WO2017156979 A1 WO 2017156979A1
Authority
WO
WIPO (PCT)
Prior art keywords
mac address
drift
attribute
mac
vlan
Prior art date
Application number
PCT/CN2016/096231
Other languages
English (en)
French (fr)
Inventor
沈宇扬
叶茂
王玉珂
余晓星
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2017156979A1 publication Critical patent/WO2017156979A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00—Indexing scheme associated with group H04L61/00
    • H04L2101/60—Types of network addresses
    • H04L2101/618—Details of network addresses
    • H04L2101/622—Layer-2 addresses, e.g. medium access control [MAC] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5053—Lease time; Renewal aspects

Definitions

  • This document relates to the field of communications, and in particular to a media access control (MAC) address processing method and apparatus.
  • MAC media access control
  • the broadband access device provides the MAC address anti-drift function for the traditional fixed access users. With the development of mobile services, broadband access devices will also be connected to wireless service access points. The MAC address of wireless users will drift as the user's location changes. Therefore, MAC drift is a normal behavior for wireless users. Allowed.
  • the traditional broadband access device cannot provide the MAC address anti-drift function for the fixed access user, but provides the function of allowing the MAC address to drift for the mobile access user, which brings the operator and user experience and operation and maintenance. Inconvenient problems, no effective solutions have been proposed yet.
  • the embodiment of the present invention provides a media access control (MAC) address processing method and device, which can provide a MAC address anti-drift function for a fixed access user, and is a mobile access user.
  • MAC media access control
  • a method for processing a MAC address including:
  • the MAC entry includes at least a MAC address, a port, and a virtual local area network (VLAN);
  • VLAN virtual local area network
  • drift attribute of a preset MAC address, where the drift attribute includes allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • the MAC address is processed according to a drift attribute of the MAC address.
  • processing the MAC address according to the drift attribute of the MAC address includes: without intervention, learning the MAC address if the drift attribute is to allow the MAC address to drift.
  • processing the MAC address according to the drift attribute of the MAC address includes: writing the MAC address as a static MAC address to the switch chip if the drift attribute is prohibiting the MAC address drift.
  • the method further includes: aging the static MAC address after a preset time is exceeded.
  • acquiring the drift attribute of the preset MAC address according to the VLAN includes: acquiring a drift attribute of the preset MAC address according to the label of the VLAN.
  • an apparatus for MAC address processing comprising:
  • a learning module configured to learn a MAC entry of the message, where the MAC entry includes at least a MAC address, a port, and a virtual local area network VLAN;
  • Obtaining a module configured to acquire a drift attribute of a preset MAC address according to the VLAN, where the drift attribute includes allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • the processing module is configured to process the MAC address according to a drift attribute of the MAC address.
  • the processing module includes: a first processing unit, configured to not learn to learn the MAC address if the drift attribute is to allow the MAC address to drift.
  • the processing module includes: a second processing unit, configured to write the MAC address as a static MAC address to the switch chip if the drift attribute is to prohibit the MAC address from drifting.
  • the obtaining module includes: an acquiring unit, configured to acquire a drift attribute of a preset MAC address according to the label of the VLAN
  • a MAC entry of a learning message is adopted, where the MAC entry includes at least a MAC address, a port, and a virtual local area network VLAN, and a drift attribute of a preset MAC address is obtained according to the VLAN, where the drift Attribute is to allow the MAC address to drift or prohibit the MAC address from drifting; processing the MAC according to the drift attribute of the MAC address.
  • the address scheme solves the problem that the traditional broadband access device existing in the related technology cannot simultaneously provide the MAC address anti-drift function for the fixed access user, and provides the mobile access user with the function of allowing the MAC address to be drifted to the operator.
  • the traditional broadband access device can provide the function of preventing the drift of the MAC address of the fixed access user, and also provide the function of allowing the MAC address to be drifted for the mobile access user.
  • the function of the traditional broadband access device is expanded without increasing the hardware cost, which facilitates the operator to expand the service function and brings a good user experience.
  • FIG. 1 is a flowchart 1 of a MAC address processing method according to an embodiment of the present invention
  • FIG. 2 is a second flowchart of another MAC address processing method according to an embodiment of the present invention.
  • FIG. 3 is a block diagram 1 of another MAC address processing apparatus according to an embodiment of the present invention.
  • FIG. 4 is a second structural block diagram of a MAC address processing apparatus according to an embodiment of the present invention.
  • FIG. 5 is a structural block diagram of a MAC address processing apparatus according to an alternative embodiment of the present invention.
  • FIG. 6 is a schematic flowchart 1 of a MAC address processing method according to an alternative embodiment of the present invention.
  • FIG. 7 is a second schematic flowchart of another MAC address processing method according to an alternative embodiment of the present invention.
  • FIG. 1 is a flowchart of a method at a MAC address according to an embodiment of the present invention. As shown in FIG. 1, the process may include the following steps:
  • Step S100 learning a MAC entry of the message, where the MAC entry includes at least a MAC address, a port, and a virtual local area network VLAN;
  • how to learn the MAC entry of the packet may be implemented by using the well-known techniques of the present invention, and is not intended to limit the scope of the present invention, and details are not described herein again.
  • Step S102 Acquire a drift attribute of a preset MAC address according to the VLAN, where the drift attribute includes allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • Step S104 processing the MAC address according to the drift attribute of the MAC address.
  • MAC anti-aliasing is a common security feature in broadband access equipment engineering applications. It is characterized by not allowing MAC addresses to drift between ports. For example, the MAC-A address is learned from port 1. If the MAC-A data stream comes in from port 2 at this time, and the MAC-A entry learned by port 1 has not expired, MAC-A is not allowed to learn from port 2.
  • the underlying hardware supports anti-floating, and provides global or port-level MAC address anti-blanching enable settings. In a scenario where a fixed user accesses and a security requirement is high, the mac anti-blanking function of the device is turned on, and the user is prohibited. The MAC address drift between the two is to prevent users from interfering with each other and improve the quality of service. In addition, for the user-side loop situation that often occurs, opening the MAC anti-floating can also reduce the impact on the entire network after the occurrence of this situation.
  • broadband access devices will also be connected to wireless service access points, and the wireless user's MAC address will drift as the user's location changes, so for wireless access (mobile access) users MAC drift is a normal behavior to allow.
  • Broadband access equipment For traditional fixed access service users, if you do not want to reduce the security requirements, you should also maintain the MAC anti-freeze policy, while for mobile service users, you should allow MAC drift.
  • the traditional broadband access device cannot provide the MAC address anti-drift function for the fixed access user, and provides the function of allowing the MAC address to be drifted for the mobile access user, which brings the operator and user experience and operation and maintenance. Inconvenient problems, no effective solutions have been proposed yet.
  • two services of different types of fixed access service and mobile access service are distinguished by dividing different VLANs, and a VLAN-based MAC address anti-drift is implemented on the broadband access device.
  • the method does not require upgrading the hardware device, and relies on the upper layer software control of the broadband access device under the relevant hardware device to implement the device to support VLAN-based MAC address anti-drift, and realizes that the traditional broadband access device can provide a fixed access user MAC.
  • the MAC station movement control function also provides mobile access users with the ability to allow MAC address drift, extending the tradition without increasing hardware costs.
  • the function of the broadband access device facilitates the operator to expand the business function and brings a good user experience.
  • FIG. 2 is a flowchart of another method for MAC address according to an embodiment of the present invention. As shown in FIG. 2, the process may include the following steps. :
  • Step S200 learning a MAC entry of the message, where the MAC entry includes at least a MAC address, a port, and a virtual local area network VLAN;
  • the MAC entry may also include a port.
  • Step S202 Acquire a drift attribute of a preset MAC address according to the VLAN, where the drift attribute includes allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • Step S204 determining whether the MAC address drift attribute is to allow the MAC address to drift
  • Step S206 in the case of YES, the broadband access device does not interfere with learning the MAC address
  • step S208 in the case of NO, the MAC address is written as a static MAC address to the switch chip.
  • the drift attribute of the MAC address is determined according to the VLAN, and the MAC address is processed according to different results of the judgment.
  • Different VLANs correspond to different broadband access services.
  • VLAN-A can correspond to fixed access services and VLAN-N corresponding mobile access services. Set the fixed access service to VLAN-A.
  • the drift attribute of VLAN-A is to disable MAC address flapping.
  • the broadband access device learns the packet, it obtains the MAC address and VLAN-A. According to VLAN-A or the service. It is a fixed access service, and the drift attribute is to prohibit MAC address drift.
  • the broadband access device writes the MAC address to the static MAC address table, and no longer allows other ports of the broadband access device to learn the MAC address.
  • the broadband access device can support the MAC address drift of the mobile access service user, and the security feature of the MAC address drift function of the fixed access service user.
  • the broadband access device supports the vlan-based mac anti-drift. Value, with high practicability, expands the capabilities of broadband access devices.
  • the mobile access service can also be set to allow drift or disable drift, and the effect achieved can be foreseen.
  • obtaining, by the VLAN, a drift attribute of the preset MAC address may include: acquiring a drift attribute of the preset MAC address according to the label of the VLAN. Root There are various methods or implementations for obtaining the drift attribute of a MAC address according to a VLAN, for example, according to a VLAN ID query; and determining a drift attribute of a MAC address according to a VLAN tag.
  • the mapping between the VLAN ID or the drift attribute of the VLAN tag and the MAC address may be pre-configured, and the drift attribute of the MAC address may be determined according to the correspondence, the VLAN ID, or the VLAN tag.
  • the method for processing the MAC address may further include: aging the static MAC address of the writing hardware after the preset time is exceeded.
  • the static MAC address hardware cannot be aged automatically. You can choose several strategies for prohibiting the aging of the MAC address in the drifting VLAN.
  • the device does not age until the device is restarted or manually cleared. Applicable to the case where the MAC address of the device is sufficient; if the MAC address storage resource of the device is not too abundant, or if the static MAC address is expected to age, do not always occupy the hardware MAC address resource, then the upper layer software is required to simulate the hardware aging process.
  • the static MAC address of the service flow has not been aged.
  • the hit (HIT) flag of the hardware MAC address table is queried when the MAC address aging time expires. If the HIT flag is 1, the HIT flag is changed to 0, if HIT When the flag is 0, the hardware is directly notified to delete the static MAC, and the MAC address entry in the upper layer service software table is deleted synchronously, thereby realizing the aging of the MAC address.
  • the method of the embodiment of the present invention is used in a broadband access device, so that the broadband access device can adapt to the characteristics of the mobile access service, and the security feature of the original fixed access user MAC address anti-drift is also Can be maintained, the scope of the device can be further expanded.
  • the above method can be implemented by a broadband access device.
  • a MAC address processing apparatus is provided in the embodiment of the present invention, and the apparatus is configured to implement the foregoing embodiments and optional implementations, and details are not described herein.
  • the term "module” may implement a combination of software and/or hardware of a predetermined function.
  • the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.
  • FIG. 3 is a structural block diagram of a MAC address processing apparatus according to an embodiment of the present invention. As shown in FIG. 2, the apparatus may include a learning module 30, an obtaining module 32, and a processing module 34. The apparatus will be described below.
  • the learning module 30 is configured to learn a MAC entry of the message, where the MAC entry includes at least a MAC address, a port, and a virtual local area network VLAN;
  • the obtaining module 32 is configured to obtain a drift attribute of the preset MAC address according to the VLAN, where the drift attribute includes allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • the processing module 34 is configured to process the MAC address according to the drift attribute of the MAC address.
  • VLAN-based MAC address anti-drift is implemented on the broadband access device.
  • the method does not require upgrading the hardware device, and relies on the upper layer software control of the broadband access device under the relevant hardware device to implement the device to support VLAN-based MAC address anti-drift, and realizes that the traditional broadband access device can provide a fixed access user MAC.
  • the MAC station movement control function can also provide the mobile access user with the function of allowing the MAC address to drift, and expand the function of the traditional broadband access device without increasing the hardware cost, which facilitates the operation. Business extensions bring a good user experience.
  • the processing module 30 may include: a first processing unit, configured to not learn to learn the MAC address if the drift attribute is to allow the MAC address to drift, and/or the second processing unit, When the drift attribute is to prohibit the MAC address from drifting, the MAC address is written as a static MAC address to the switch chip.
  • FIG. 4 is a block diagram showing the structure of another MAC address processing apparatus according to an embodiment of the present invention.
  • the apparatus may include a learning module 40, an obtaining module 42, a processing module 44, and an aging module 46. The device is described.
  • the learning module 40 is configured to learn a MAC entry of the message, where the MAC entry includes at least a MAC address, a port, and a virtual local area network VLAN;
  • the obtaining module 42 is configured to obtain a drift attribute of the preset MAC address according to the VLAN, where the drift attribute includes allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • the processing module 44 is configured to write the MAC address as a static MAC address to the switch chip if the drift attribute is to prohibit MAC address drift;
  • the aging module 46 is configured to age the static MAC address after a preset time is exceeded.
  • the static MAC address hardware cannot be aged automatically. You can choose several strategies for prohibiting the aging of the MAC address in the drifting VLAN.
  • the device does not age until the device is restarted or manually cleared. Applicable to the case where the MAC address of the device is sufficient; if the MAC address storage resource of the device is not too abundant, or if the static MAC address is expected to age, do not always occupy the hardware MAC address resource, then the upper layer software is required to simulate the hardware aging process.
  • the static MAC address of the service flow has not been aging. For example, when the MAC address aging time expires, the HIT flag of the hardware MAC address table is queried. If the HIT flag is 1, the HIT flag is changed to 0. If the HIT flag is 0. The device directly informs the hardware to delete the static MAC address, and synchronously deletes the MAC address entry in the upper layer service software table, thereby implementing aging of the MAC address.
  • the obtaining module 32 and the obtaining module 42 mentioned in the foregoing apparatus may further include an obtaining unit, configured to acquire a drift attribute of the preset MAC address according to the label of the VLAN.
  • obtaining, by the VLAN, a drift attribute of the preset MAC address may include: acquiring a drift attribute of the preset MAC address according to the label of the VLAN.
  • FIG. 5 is a structural block diagram of a MAC address processing apparatus according to an alternative embodiment of the present invention.
  • the device is located in a broadband access device and may include the following modules:
  • the learning module 50 is similar to the learning module 30 of FIG. 3 and the learning module 40 of FIG. 4, and is configured to learn MAC entries in the message, wherein the MAC entries include at least a MAC address, a port, and a VLAN;
  • the MAC address module 52 is similar to the acquisition module 32 of FIG. 3 and the acquisition module 42 of FIG. 4, and is configured to acquire a drift attribute of a preset MAC address according to a VLAN.
  • the drift attribute of the MAC address may include allowing the MAC address to drift or prohibiting the MAC address from drifting;
  • the MAC address anti-drift service control module 54 is similar to the processing module 34 of FIG. 3 and the processing module 44 of FIG. 4, and is configured to process the MAC address according to the drift attribute of the MAC address, which may be included in the drift attribute to allow In case of MAC address drift, do not interfere with learning MAC
  • the MAC address and the VLAN are written to the switch chip when the drift attribute is disabled.
  • the static MAC address entry can be aged out after the preset time is exceeded.
  • the MAC address hardware table 56 when the drift attribute is set to prohibit the MAC address from drifting, accepts the MAC address and the VLAN to write the hardware entry, and after receiving the preset time, accepts the aging static MAC address entry, and deletes the Static MAC address.
  • the present invention provides a method for implementing VLAN-based MAC address anti-drift on a broadband access device, which does not require upgrading a hardware device, and relies on upper-layer software control of the broadband access device to implement device support based on the relevant hardware device.
  • the MAC anti-floating of the VLAN enables the broadband access device to support both the mobile access user and the security feature of the fixed access user MAC anti-drip.
  • FIG. 6 is a schematic flowchart 1 of a MAC address processing method according to an alternative embodiment of the present invention. As shown in FIG. 6, the method process may include the following steps:
  • Step S600 the broadband access device sets a global allowed MAC address drift
  • Step S602 the broadband access device sets the VLAN of the fixed access service to prohibit MAC address drift
  • Step S604 the VLAN of the mobile access service is set by default to allow MAC address drift.
  • the globally allowed MAC address drift is set on the broadband access device, that is, the hardware allows the MAC address to drift between the user ports. This step ensures that the hardware does not prevent the MAC address from drifting between user ports, ensuring that the user's data packets are not directly discarded by the hardware.
  • the VLAN that sets the fixed access service on the broadband device prohibits the MAC address from drifting.
  • the MAC address drift attribute of the mobile service VLAN can be set by default to allow drift, and the mobile service vlan can use the default value.
  • the VLAN 100-200 that sets the fixed access service prohibits MAC address flapping at this time, the broadband access device port learns the MAC address from the range of VLAN 100-200, and the MAC address anti-blanching service control module will The form of the static MAC is reset to the hardware, so that the MAC addresses in these VLAN segments are no longer learned from other ports, and the anti-aliasing effect is achieved.
  • the MAC address of the fixed access service VOAN 100-200 of the broadband access device is not allowed to drift, and the mobile access service VLAN can be drifted.
  • FIG. 7 is a schematic flowchart of another MAC address processing method according to an alternative embodiment of the present invention. 2, as shown in FIG. 7, the method flow may include the following steps:
  • Step S700 learning MAC-A and VLAN-A
  • the MAC address between the user interfaces of the access device is set to allow drift, and then some VLANs are not allowed to drift, such as the vlan service of the fixed access user; the default anti-drift property of all vlans is allowed to drift, that is, the default is Set the VLAN service MAC address attribute of the mobile access user to allow drift.
  • the learning module of the broadband access device can learn the packet, and at least learn the MAC-A, VLAN-A, and port number of the service packet.
  • Step S702 reporting MAC-A and VLAN-A to the MAC address module
  • the learning module will learn to transmit the MAC-A and VLAN-A of the service message to the MAC address module;
  • Step S704 determining, according to the VLAN-A, whether the anti-drift property of the MAC address is allowed to drift;
  • the MAC address module knows that the VLAN-A corresponds to the nature of the service and the anti-blanching attribute of the MAC address.
  • Step S706 if the result of the determination is yes, do not interfere with learning the MAC address and the VLAN;
  • Step S708 in the case that the determination result is no, the MAC address anti-balancing service control module sets the MAC-A and VLAN-A as static addresses;
  • the MAC address module has a software MAC address table. When the hardware learns the MAC address and reports it to the upper MAC address module. The MAC address module determines the anti-drift property of the VLAN. If the MAC anti-blanking attribute of the VKAN is allowed to drift, no intervention is required. If the MAC anti-blanching attribute of the VLAN is forbidden to drift, the MAC address is a static MAC address. The way is written to the hardware (that is, the switch chip), and the priority of the static MAC address in the hardware is higher than the dynamic MAC address, so that the MAC address of the same VLAN cannot be learned from other ports, and the MAC anti-drift is achieved. Effect.
  • the broadband access device does not interfere with learning the MAC entry of the service packet, that is, the MAC address of the mobile access service is allowed to be reached.
  • a port drifts, and the mobile service packet can be learned from each port.
  • the MAC address anti-blanking service control module 54 uses the MAC address. And the VLAN is written to the hardware entry as a static address, so that the MAC address of the VLAN cannot be learned from other ports, and the MAC anti-aliasing effect is achieved.
  • Step S710 the preset time is reached, and the MAC-A and VLAN-A are aged.
  • the static MAC address hardware cannot be aged automatically. You can choose several strategies for prohibiting the aging of the MAC address in the drifting VLAN.
  • the device does not age until the device is restarted or manually cleared. Applicable to the case where the MAC address of the device is relatively abundant. If the MAC address of the device is not sufficient, or if the static MAC address is expected to age, do not always occupy the hardware MAC address resource.
  • the upper layer software is required to simulate the hardware aging process.
  • the static MAC address of the service flow is not aged. For example, when the MAC address aging time expires, the HIT identifier of the hardware MAC address table is queried. If the HIT flag is 1, the HIT flag is changed to 0. If the HIT flag is 0, the The hardware is notified to delete the static MAC address, and the MAC address entry in the upper layer service software table is deleted synchronously to implement aging of the MAC address.
  • a broadband access is proposed.
  • the method for implementing VLAN-based MAC address anti-drift on the device does not require upgrading the hardware device.
  • the upper-layer software control of the broadband access device is implemented under the relevant hardware device to implement the device to support VLAN-based MAC address anti-drift, and realize the traditional broadband.
  • the access device can provide the function of allowing the MAC address to be drifted for the mobile access user while providing the function of preventing the drift of the fixed access user MAC address, and expanding the traditional broadband access device without increasing the hardware cost.
  • the function is convenient for operators to expand business functions and bring a good user experience.
  • the method of the embodiment of the present invention is used in a broadband access device, so that the broadband access device can adapt to the characteristics of the mobile access service, and the security feature of the original fixed access user MAC address anti-drift is also Can be maintained, the scope of application of the device is further expanded.
  • Embodiments of the present invention also provide a computer readable storage medium storing computer executable instructions for performing any of the methods described above.
  • each of the above-described modules or steps of the present invention can be implemented by a general-purpose computing device, which can be centralized on a single computing device or distributed across multiple computing devices. Alternatively, they can be used with computing devices
  • the executed program code is implemented such that they can be stored in a storage device by a computing device, and in some cases, the steps shown or described can be performed in a different order than here, or they can be
  • Each of the integrated circuit modules is fabricated separately, or a plurality of modules or steps thereof are fabricated into a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • each module/unit in the foregoing embodiment may be implemented in the form of hardware, for example, by implementing an integrated circuit to implement its corresponding function, or may be implemented in the form of a software function module, for example, executing a program in a storage and a memory by a processor. / instruction to achieve its corresponding function.
  • the invention is not limited to any specific form of combination of hardware and software.
  • the traditional broadband access device can provide the function of preventing MAC address drift of the fixed access user while providing the function of allowing the MAC address to drift, and expanding without increasing the hardware cost.
  • the function of the traditional broadband access device facilitates the operator to expand the business function and brings a good user experience.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Small-Scale Networks (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

一种MAC地址处理方法及装置，该方法包括：学习报文的MAC条目，所述MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；根据所述VLAN获取预先设置的MAC地址的漂移属性，所述漂移属性包括允许所述MAC地址漂移或禁止所述MAC地址漂移；根据所述MAC地址的漂移属性处理所述MAC地址。

Description

一种媒体接入控制MAC地址处理方法及装置 技术领域
本文涉及通信领域，尤指一种媒体接入控制(Media Access Control，简称为MAC)地址处理方法及装置。
背景技术
宽带接入设备中为传统的固定接入用户提供了MAC地址防漂移功能。而随着移动业务的发展，宽带接入设备也会挂接无线业务接入点，无线用户的MAC地址会随着用户位置的改变而发生漂移，因此对于无线用户来说MAC漂移是正常行为要允许的。
针对相关技术中，传统的宽带接入设备无法满足为固定接入用户提供MAC地址防漂移功能，而为移动接入用户提供允许MAC地址漂移的功能，给运营商及用户体验和运营维护带来不便的问题，目前尚未提出有效的解决方案。
发明内容
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。
本发明的实施例提供了一种媒体接入控制(Media Access Control，简称为MAC)地址处理方法及装置，能够在无法满足为固定接入用户提供MAC地址防漂移功能，而为移动接入用户提供允许MAC地址漂移的功能时，给运营商及用户体验和运营维护带来方便。
根据本发明实施例的一个方面，提供了一种MAC地址处理方法，包括：
学习报文的MAC条目，其中，所述MAC条目至少包括MAC地址、端口和虚拟局域网(Virtual Local Area Network，简称为VLAN)；
根据所述VLAN获取预先设置的MAC地址的漂移属性，其中，所述漂移属性包括允许所述MAC地址漂移或禁止所述MAC地址漂移；
根据所述MAC地址的漂移属性处理所述MAC地址。
可选地，根据所述MAC地址的漂移属性处理所述MAC地址包括：在所述漂移属性为允许所述MAC地址漂移的情况下，不干预学习所述MAC地址。
可选地，根据所述MAC地址的漂移属性处理所述MAC地址包括：在所述漂移属性为禁止所述MAC地址漂移的情况下，将所述MAC地址作为静态MAC地址写入交换芯片。
可选地，所述方法还包括：在超过预设时间之后，老化所述静态MAC地址。
可选地，根据所述VLAN获取预先设置的MAC地址的漂移属性包括：根据所述VLAN的标签获取预先设置的MAC地址的漂移属性。
根据本发明实施例的另一方面，提供了一种MAC地址处理的装置，该装置包括：
学习模块，设置为学习报文的MAC条目，其中，所述MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
获取模块，设置为根据所述VLAN获取预先设置的MAC地址的漂移属性，其中，所述漂移属性包括允许所述MAC地址漂移或禁止所述MAC地址漂移；
处理模块，设置为根据所述MAC地址的漂移属性处理所述MAC地址。
可选地，所述处理模块包括：第一处理单元，设置为在所述漂移属性为允许所述MAC地址漂移的情况下，不干预学习所述MAC地址。
可选地，所述处理模块包括：第二处理单元，设置为在所述漂移属性为禁止所述MAC地址漂移的情况下，将所述MAC地址作为静态MAC地址写入交换芯片。
可选地，所述获取模块包括：获取单元，设置为根据所述VLAN的标签获取预先设置的MAC地址的漂移属性
通过本发明实施例，采用学习报文的MAC条目，其中，所述MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；根据所述VLAN获取预先设置的MAC地址的漂移属性，其中，所述漂移属性为允许所述MAC地址漂移或禁止所述MAC地址漂移；根据所述MAC地址的漂移属性处理所述MAC 地址的技术方案，解决了相关技术中存在的传统的宽带接入设备无法同时满足为固定接入用户提供MAC地址防漂移功能，而为移动接入用户提供允许MAC地址漂移的功能，给运营商及用户体验和运营维护带来不便的问题，实现了传统的宽带接入设备在可以提供固定接入用户MAC地址防漂移功能的同时，还可以为移动接入用户提供允许MAC地址漂移的功能，在不增加硬件成本的情况下扩展了传统的宽带接入设备的功能，方便了运营商扩展业务功能，带来了良好的用户体验。
在阅读并理解了附图和详细描述后，可以明白其他方面。
附图概述
图1是根据本发明实施例的一种MAC地址处理方法的流程图一；
图2是根据本发明实施例的另一种MAC地址处理方法的流程图二；
图3是根据本发明实施例的另一种MAC地址处理装置的结构框图一；
图4是根据本发明实施例的再一种MAC地址处理装置的结构框图二；
图5是根据本发明可选实施例的一种MAC地址处理装置的结构框图；
图6是根据本发明可选实施例的一种MAC地址处理方法的流程示意图一；
图7是根据本发明可选实施例的另一种MAC地址处理方法的流程示意图二。
本发明的实施方式
下文中将参考附图并结合实施例来详细说明本发明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互组合。
在本发明的实施例中提供了一种MAC地址处理方法，图1是根据本发明实施例的一种MAC地址处方法的流程图，如图1所示，该流程可以包括如下步骤：
步骤S100，学习报文的MAC条目，其中MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
本步骤中，具体如何学习报文的MAC条目可以采用本领域技术人员的熟知技术实现，并不用于限定本发明的保护范围，这里不再赘述。
步骤S102，根据VLAN获取预先设置的MAC地址的漂移属性，其中，漂移属性包括允许该MAC地址漂移或禁止该MAC地址漂移；
步骤S104，根据该MAC地址的漂移属性处理该MAC地址。
MAC防漂是宽带接入设备工程应用比较普遍的安全特性，它的特点是不允许MAC地址在端口间漂移。比如MAC-A地址在端口1学习到，如果此时MAC-A数据流从端口2进来，并且端口1学习到的MAC-A条目还未老化，则不允许MAC-A从端口2学习到。一般是底层硬件支持防漂，提供全局或者端口级别的MAC地址防漂使能的设置，在固定用户接入并且对于安全性要求比较高的场景下，打开设备的mac防漂功能，禁止用户之间的MAC地址漂移，开启的优点是防止用户之间互相干扰，提高服务质量，另外对于经常出现的用户侧环路情况，打开MAC防漂也能够降低这种情况出现后对于整个网络的影响。
随着移动业务的发展，宽带接入设备也会挂接无线业务接入点，无线用户的MAC地址会随着用户位置的改变而发生漂移，因此对于无线接入(移动接入)用户来说MAC漂移是正常行为要允许的。宽带接入设备对于传统的固定接入业务用户，如果不想降低安全性要求，则还应该保持MAC防漂禁止的策略，而对于移动业务用户，则应该允许MAC漂移。相关技术中，传统的宽带接入设备无法同时满足为固定接入用户提供MAC地址防漂移功能，而为移动接入用户提供允许MAC地址漂移的功能，给运营商及用户体验和运营维护带来不便的问题，目前尚未提出有效的解决方案。
通过附图1提供的方法，将固定接入业务和移动接入业务两种不同性质的业务通过划分不同的VLAN进行区分，提出一种在宽带接入设备上实现基于VLAN的MAC地址防漂移的方法，不要求升级硬件设备，在相关硬件设备下依靠宽带接入设备的上层软件控制来实现设备支持基于VLAN的MAC地址防漂移，实现了传统的宽带接入设备在可以提供固定接入用户MAC地址防漂移(MAC station movement control)功能的同时，还可以为移动接入用户提供允许MAC地址漂移的功能，在不增加硬件成本的情况下扩展了传统 的宽带接入设备的功能，方便了运营商扩展业务功能，带来了良好的用户体验。
在本发明的实施例中还提供了另一种MAC地址处理方法，图2是根据本发明实施例的另一种MAC地址处方法的流程图，如图2所示，该流程可以包括如下步骤：
步骤S200，学习报文的MAC条目，其中MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
可选的，MAC条目还可以包括端口。
步骤S202，根据VLAN获取预先设置的MAC地址的漂移属性，其中，漂移属性包括允许该MAC地址漂移或禁止该MAC地址漂移；
步骤S204，判断该MAC地址漂移属性是否为允许该MAC地址漂移；
步骤S206，在是的情况下，宽带接入设备不干预学习该MAC地址；
步骤S208，在否的情况下，将该MAC地址作为静态MAC地址写入交换芯片。
根据VLAN判断该MAC地址的漂移属性，并根据判断的不同结果处理该MAC地址。而不同的VLAN对应于不同的宽带接入业务，例如VLAN-A可以对应固定接入业务、VLAN-N对应移动接入业务。设置固定接入业务为VLAN-A，VLAN-A对应的漂移属性为禁止MAC地址漂移，当宽带接入设备学习到报文时，获得了MAC地址和VLAN-A，根据VLAN-A或者该业务为固定接入业务，且漂移属性为禁止MAC地址漂移。宽带接入设备将该MAC地址写入静态MAC地址表，不再允许宽带接入设备的其他端口学习该MAC地址。这样可以使得宽带接入设备既能够支持允许移动接入业务用户MAC地址漂移，又能提供禁止固定接入业务用户MAC漂移功能的安全特性，宽带接入设备支持基于vlan的mac防漂显得很有价值，具有很高的实用性，扩展了宽带接入设备的功能。同理，也可以设置移动接入业务为允许漂移或禁止漂移，所达到的效果是可以预见的。
在可选的实施方式中，根据VLAN获取预先设置的MAC地址的漂移属性可以包括：根据VLAN的标签获取预先设置的MAC地址的漂移属性。根 据VLAN获得MAC地址的漂移属性有多种方法或实施方式，例如根据VLAN ID查询；根据VLAN标签判断MAC地址的漂移属性等。
其中，可以预先配置VLAN ID或VLAN标签和MAC地址的漂移属性之间的对应关系，根据对应关系和VLAN ID或VLAN标签确定MAC地址的漂移属性。
在可选的实施方式中，以上处理MAC地址的方法还可以包括：在超过预设时间之后，老化写入硬件的静态MAC地址。静态MAC地址硬件是无法自动老化的，关于禁止漂移VLAN内MAC地址的老化问题可以选择几种策略，一是设备运行过程中永不老化，直到设备重启或者手工执行清除命令才老化，这种策略适用于设备MAC地址比较充裕的情况下；如果设备MAC地址存储资源不是太充裕，还是希望静态MAC地址能够老化，不要一直占有硬件的MAC地址资源，则需要上层软件模拟硬件老化过程，把一段时间内已经没有业务流的静态MAC地址老化，例如，在MAC地址老化时间到时查询硬件MAC地址表的命中(HIT)标识位，如果HIT标识位为1则把HIT标识位改为0，如果HIT标识位为0则直接通知硬件删除该静态MAC，并且同步删除上层业务软件表中的MAC地址表项，从而实现MAC地址的老化。
在实际应用中，将本发明实施例的方法用于宽带接入设备中，使得宽带接入设备能够适应移动接入业务的特点，同时对于原有固定接入用户MAC地址防漂的安全特性也能够得以保持，设备的适用范围可以进一步扩充。
上述方法可以通过宽带接入设备实现。
在本发明的实施例中提供了一种MAC地址处理装置，该装置设置为实现上述实施例及可选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。
图3是根据本发明实施例的一种MAC地址处理装置的结构框图一，如图2所示，该装置可以包括学习模块30、获取模块32和处理模块34，下面对该装置进行说明。
学习模块30，设置为学习报文的MAC条目，其中，MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
获取模块32，设置为根据VLAN获取预先设置的MAC地址的漂移属性，其中，漂移属性包括允许该MAC地址漂移或禁止该MAC地址漂移；
处理模块34，设置为根据该MAC地址的漂移属性处理该MAC地址。
通过本实施例提供的装置，将固定接入业务和移动接入业务两种不同性质的业务通过划分不同的VLAN进行区分，提出一种在宽带接入设备上实现基于VLAN的MAC地址防漂移的方法，不要求升级硬件设备，在相关硬件设备下依靠宽带接入设备的上层软件控制来实现设备支持基于VLAN的MAC地址防漂移，实现了传统的宽带接入设备在可以提供固定接入用户MAC地址防漂移(MAC station movement control)功能的同时，还可以为移动接入用户提供允许MAC地址漂移的功能，在不增加硬件成本的情况下扩展了传统的宽带接入设备的功能，方便了运营商扩展业务功能，带来了良好的用户体验。
在可选的实施方式中，处理模块30可以包括：第一处理单元，设置为在漂移属性为允许该MAC地址漂移的情况下，不干预学习该MAC地址，和/或，第二处理单元，设置为在漂移属性为禁止该MAC地址漂移的情况下，将该MAC地址作为静态MAC地址写入交换芯片。
图4是根据本发明实施例的另一种MAC地址处理装置的结构框图二，如图4所示，该装置可以包括学习模块40、获取模块42、处理模块44和老化模块46，下面对该装置进行说明。
学习模块40，设置为学习报文的MAC条目，其中，MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
获取模块42，设置为根据VLAN获取预先设置的MAC地址的漂移属性，其中，漂移属性包括允许该MAC地址漂移或禁止该MAC地址漂移；
处理模块44，设置为在漂移属性为禁止MAC地址漂移的情况下，将MAC地址作为静态MAC地址写入交换芯片；
老化模块46，设置为在超过预设时间之后，老化该静态MAC地址。
静态MAC地址硬件是无法自动老化的，关于禁止漂移VLAN内MAC地址的老化问题可以选择几种策略，一是设备运行过程中永不老化，直到设备重启或者手工执行清除命令才老化，这种策略适用于设备MAC地址比较充裕的情况下；如果设备MAC地址存储资源不是太充裕，还是希望静态MAC地址能够老化，不要一直占有硬件的MAC地址资源，则需要上层软件模拟硬件老化过程，把一段时间内已经没有业务流的静态MAC地址老化，例如在MAC地址老化时间到时查询硬件MAC地址表的HIT标识位，如果HIT标识位为1则把HIT标识位改为0，如果HIT标识位为0则直接通知硬件删除该静态MAC，并且同步删除上层业务软件表中的MAC地址表项，从而实现MAC地址的老化。
在可选的实施方式中，以上装置中提及的获取模块32、获取模块42还可以包括获取单元，设置为根据VLAN的标签获取预先设置的MAC地址的漂移属性。在可选的实施方式中，根据VLAN获取预先设置的MAC地址的漂移属性可以包括：根据VLAN的标签获取预先设置的MAC地址的漂移属性。根据VLAN获得MAC地址的漂移属性有多种方法或实施方式，例如根据VLAN ID查询；根据VLAN标签判断MAC地址的漂移属性等。
下面再结合具体实施例对本发明进行说明。
图5是根据本发明可选实施例的一种MAC地址处理装置的结构框图。该装置位于宽带接入设备中，可以包括如下模块：
学习模块50，功能类似于附图3的学习模块30、附图4中的学习模块40，设置为学习报文中的MAC条目，其中MAC条目至少包括MAC地址、端口和VLAN；
MAC地址模块52，功能类似于附图3的获取模块32、附图4中的获取模块42，设置为根据VLAN获取预先设置的MAC地址的漂移属性。其中，MAC地址的漂移属性可以包括允许该MAC地址漂移或禁止该MAC地址漂移；
MAC地址防漂业务控制模块54，功能类似于附图3的处理模块34、附图4中的处理模块44，设置为根据该MAC地址的漂移属性处理该MAC地址，可以包括在漂移属性为允许该MAC地址漂移的情况下，不干预学习MAC 地址；在漂移属性为禁止该MAC地址漂移的情况下，将该MAC地址和VLAN写入交换芯片；还可以设置为在超过预设时间后，老化静态MAC地址表项。
MAC地址硬件表56，设置为漂移属性为禁止该MAC地址漂移的情况下，接受该MAC地址和VLAN写入硬件表项，和在超过预设时间后，接受老化静态MAC地址表项，删除该静态MAC地址。
本可选实施例提出一种在宽带接入设备上实现基于VLAN的MAC地址防漂移的方法，不要求升级硬件设备，在相关硬件设备下依靠宽带接入设备的上层软件控制来实现设备支持基于VLAN的MAC防漂，使得宽带接入设备既能够支持移动接入用户，又能保持固定接入用户MAC防漂的安全特性。
图6是根据本发明可选实施例的一种MAC地址处理方法的流程示意图一，如图6所示，该方法流程可以包括如下步骤：
步骤S600，宽带接入设备设置全局允许MAC地址漂移；
步骤S602，宽带接入设备设置固定接入业务的VLAN禁止MAC地址漂移；
步骤S604，默认设置移动接入业务的VLAN允许MAC地址漂移。
首先，宽带接入设备上设置全局允许MAC地址漂移，即硬件允许用户口之间的MAC地址漂移。这一步，保证硬件上是不会防止MAC地址在用户口之间漂移，保证用户的数据包不会被硬件直接丢弃。其次，宽带设备上设置固定接入业务的VLAN禁止MAC地址漂移。再次，可以默认设置移动业务VLAN的MAC地址漂移属性是允许漂移，移动业务vlan使用默认值即可。比如设置固定接入业务的VLAN 100-200禁止MAC地址漂移；此时宽带接入设备端口从VLAN 100-200范围段内学习到的MAC地址，MAC地址防漂业务控制模块会把该MAC地址以静态MAC的形式重新设置给硬件，从而保证这些VLAN段内的MAC地址不会再从其他端口学习到，到达防漂的效果。当然，也可以设置移动接入业务的VLAN为禁止MAC地址漂移。通过以上步骤的配置，宽带接入设备固定接入业务VOAN 100-200的MAC地址不允许漂移，而移动接入业务VLAN则能够漂移。
图7是根据本发明可选实施例的另一种MAC地址处理方法的流程示意 图二，如图7所示，该方法流程可以包括如下步骤：
步骤S700，学习到MAC-A和VLAN-A；
首先接入设备用户口之间的MAC地址是设置为允许漂移的，然后设置某些VLAN不允许漂移，比如固定接入用户的vlan业务；所有vlan的默认防漂属性是允许漂移，即可以默认设置移动接入用户的VLAN业务MAC地址属性为允许漂移。宽带接入设备的学习模块可以学习到报文，至少可以学习到业务报文的MAC-A、VLAN-A以及端口号。
步骤S702，上报MAC-A和VLAN-A至MAC地址模块；
学习模块将学习到业务报文的MAC-A和VLAN-A传输至MAC地址模块；
步骤S704，根据VLAN-A判断该MAC地址的防漂属性是否允许漂移；
MAC地址模块根据VLAN-A查询获知VLAN-A对应的是业务性质以及MAC地址防漂属性。
步骤S706，在判断结果为是的情况下，不干预学习该MAC地址和VLAN；
步骤S708，在判断结果为否的情况下，MAC地址防漂业务控制模块将该MAC-A和VLAN-A设置为静态地址；
MAC地址模块有一张软件MAC地址表，当硬件学习到MAC地址并且上报给上层的MAC地址模块。MAC地址模块判断一下VLAN的防漂属性，如果该VKAN的MAC防漂属性是允许漂移的则不需要干预，如果该VLAN的MAC防漂属性是禁止漂移的，则把该MAC地址以静态MAC地址的方式写入到硬件(即交换芯片)中，而硬件中静态MAC地址的优先级是高于动态MAC地址的，这样相同的VLAN的这个MAC地址就无法从其他端口学习到了，达到MAC防漂的效果。
在MAC地址判断业务是移动接入业务，且MAC地址的防漂属性是允许漂移时，宽带接入设备不干预学习该业务报文的MAC条目，即可以达到允许移动接入业务MAC地址在每一个端口中漂移，可以从每一个端口学习到该移动业务报文。在MAC地址判断业务是固定用户接入业务，且MAC地址的防漂属性是禁止漂移时，MAC地址防漂业务控制模块54将该MAC地址 和VLAN以静态地址的方式写入硬件表项，这样该VLAN的MAC地址就无法从其他端口学习到了，达到MAC防漂的效果。
步骤S710，达到预设时间，老化该MAC-A和VLAN-A。
静态MAC地址硬件是无法自动老化的，关于禁止漂移VLAN内MAC地址的老化问题可以选择几种策略，一是设备运行过程中永不老化，直到设备重启或者手工执行清除命令才老化，这种策略适用于设备MAC地址资源比较充裕的情况下；如果设备MAC不是太充裕，还是希望静态MAC地址能够老化，不要一直占有硬件的MAC地址资源，则需要上层软件模拟硬件老化过程，把一段时间内已经没有业务流的静态MAC地址老化，例如在MAC地址老化时间到时查询硬件MAC地址表的HIT标识位，如果HIT标识位为1则把HIT标识位改为0，如果HIT标识位为0则直接通知硬件删除该静态MAC，并且同步删除上层业务软件表中的MAC地址表项，从而实现MAC地址的老化。
综上所述，通过上述实施例、可选实施例和实施方式，采用将固定接入业务和移动接入业务两种不同性质的业务通过划分不同的VLAN进行区分，提出一种在宽带接入设备上实现基于VLAN的MAC地址防漂移的方法，不要求升级硬件设备，在相关硬件设备下依靠宽带接入设备的上层软件控制来实现设备支持基于VLAN的MAC地址防漂移，实现了传统的宽带接入设备在可以提供固定接入用户MAC地址防漂移功能的同时，还可以为移动接入用户提供允许MAC地址漂移的功能，在不增加硬件成本的情况下扩展了传统的宽带接入设备的功能，方便了运营商扩展业务功能，带来了良好的用户体验。在实际使用中，将本发明实施例的方法用于宽带接入设备中，使得宽带接入设备能够适应移动接入业务的特点，同时对于原有固定接入用户MAC地址防漂的安全特性也能够得以保持，设备的适用范围进一步扩充。
本发明实施例还提出了一种计算机可读存储介质，存储有计算机可执行指令，计算机可执行指令用于执行上述描述的任意一个方法。
显然，本领域的技术人员应该明白，上述的本发明的每一个模块或每一个步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可 执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
本领域普通技术人员可以理解上述方法中的全部或部分步骤可通过程序来指令相关硬件(例如处理器)完成，所述程序可以存储于计算机可读存储介质中，如只读存储器、磁盘或光盘等。可选地，上述实施例的全部或部分步骤也可以使用一个或多个集成电路来实现。相应地，上述实施例中的各模块/单元可以采用硬件的形式实现，例如通过集成电路来实现其相应功能，也可以采用软件功能模块的形式实现，例如通过处理器执行存储与存储器中的程序/指令来实现其相应功能。本发明不限于任何特定形式的硬件和软件的结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。
工业实用性
上述技术方案实现了传统的宽带接入设备在可以提供固定接入用户MAC地址防漂移功能的同时，还可以为移动接入用户提供允许MAC地址漂移的功能，在不增加硬件成本的情况下扩展了传统的宽带接入设备的功能，方便了运营商扩展业务功能，带来了良好的用户体验。

Claims (10)

  1. 一种媒体接入入控制MAC地址处理方法，包括：
    学习报文的MAC条目，其中，所述MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
    根据所述VLAN获取预先设置的MAC地址的漂移属性，其中，所述漂移属性包括允许所述MAC地址漂移或禁止所述MAC地址漂移；
    根据所述MAC地址的漂移属性处理所述MAC地址。
  2. 根据权利要求1所述的方法，其中，根据所述MAC地址的漂移属性处理所述MAC地址包括：
    在所述漂移属性为允许所述MAC地址漂移的情况下，不干预学习所述MAC地址。
  3. 根据权利要求1所述的方法，其中，根据所述MAC地址的漂移属性处理所述MAC地址包括：
    在所述漂移属性为禁止所述MAC地址漂移的情况下，将所述MAC地址作为静态MAC地址写入交换芯片。
  4. 根据权利要求3所述的方法，所述方法还包括：
    在超过预设时间之后，老化所述静态MAC地址。
  5. 根据权利要求1至4任意一项所述的方法，其中，根据所述VLAN获取预先设置的MAC地址的漂移属性包括：
    根据所述VLAN的标签获取预先设置的MAC地址的漂移属性。
  6. 一种媒体接入控制MAC地址处理的装置，包括：
    学习模块，设置为学习报文的MAC条目，其中，所述MAC条目至少包括MAC地址、端口和虚拟局域网VLAN；
    获取模块，设置为根据所述VLAN获取预先设置的MAC地址的漂移属性，其中，所述漂移属性包括允许所述MAC地址漂移或禁止所述MAC地址漂移；
    处理模块，设置为根据所述MAC地址的漂移属性处理所述MAC地址。
  7. 根据权利要求6所述的装置，其中，所述处理模块包括：
    第一处理单元，设置为在所述漂移属性为允许所述MAC地址漂移的情况下，不干预学习所述MAC地址。
  8. 根据权利要求6所述的装置，其中，所述处理模块包括：
    第二处理单元，设置为在所述漂移属性为禁止所述MAC地址漂移的情况下，将所述MAC地址作为静态MAC地址写入交换芯片。
  9. 根据权利要求8所述的装置，所述装置还包括：
    老化模块，设置为在超过预设时间之后，老化所述静态MAC地址。
  10. 根据权利要求6至9任意一项所述的装置，其中，所述获取模块包括：
    获取单元，设置为根据所述VLAN的标签获取预先设置的MAC地址的漂移属性。
PCT/CN2016/096231 2016-03-16 2016-08-22 一种媒体接入控制mac地址处理方法及装置 WO2017156979A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610149761.2A CN107205058B (zh) 2016-03-16 2016-03-16 一种媒体介入控制mac地址处理方法及装置
CN201610149761.2 2016-03-16

Publications (1)

Publication Number Publication Date
WO2017156979A1 true WO2017156979A1 (zh) 2017-09-21

Family

ID=59850125

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/096231 WO2017156979A1 (zh) 2016-03-16 2016-08-22 一种媒体接入控制mac地址处理方法及装置

Country Status (2)

Country Link
CN (1) CN107205058B (zh)
WO (1) WO2017156979A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115118681A (zh) * 2022-06-22 2022-09-27 烽火通信科技股份有限公司 一种软硬件相结合配置mac地址条目的方法、系统和装置
WO2024148813A1 (zh) * 2023-01-09 2024-07-18 中兴通讯股份有限公司 一种媒体介入控制地址处理的方法、电子设备及存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007089030A (ja) * 2005-09-26 2007-04-05 Fujitsu Ltd Ｍａｃ学習補正システム
CN102843440A (zh) * 2011-06-24 2012-12-26 中兴通讯股份有限公司 一种防止媒体访问控制地址漂移的方法及网络处理设备
CN104980526A (zh) * 2014-04-04 2015-10-14 中兴通讯股份有限公司 Mac地址漂移的控制方法、装置及网络设备

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3800198B2 (ja) * 2003-05-16 2006-07-26 ソニー株式会社 情報処理装置、およびアクセス制御処理方法、並びにコンピュータ・プログラム
US7805535B2 (en) * 2003-12-31 2010-09-28 Alcatel Lucent Parallel data link layer controllers in a network switching device
US7539208B2 (en) * 2004-05-25 2009-05-26 Cisco Technology, Inc. Timing system for modular cable modem termination system
US8885486B2 (en) * 2009-03-31 2014-11-11 Cisco Technology, Inc. Detecting and mitigating data plane bridging loops
US8599850B2 (en) * 2009-09-21 2013-12-03 Brocade Communications Systems, Inc. Provisioning single or multistage networks using ethernet service instances (ESIs)
CN101778035B (zh) * 2010-03-09 2013-12-18 中兴通讯股份有限公司南京分公司 一种虚拟专用局域网通信的方法及装置
WO2012060808A1 (en) * 2010-11-01 2012-05-10 Hewlett-Packard Development Company, L.P. Managing mac moves with secure port groups
CN102510371B (zh) * 2011-09-30 2017-12-22 中兴通讯股份有限公司 一种控制数字移动网络联盟内容的方法及装置
CN102821023B (zh) * 2012-08-07 2016-12-21 杭州华三通信技术有限公司 一种vlan配置动态迁移的方法及装置

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007089030A (ja) * 2005-09-26 2007-04-05 Fujitsu Ltd Ｍａｃ学習補正システム
CN102843440A (zh) * 2011-06-24 2012-12-26 中兴通讯股份有限公司 一种防止媒体访问控制地址漂移的方法及网络处理设备
CN104980526A (zh) * 2014-04-04 2015-10-14 中兴通讯股份有限公司 Mac地址漂移的控制方法、装置及网络设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
ZHAO, XIANHONG ET AL.: "The Implementation and Application of MAC Drift Detection Function", DESIGNING TECHNIQUES OF POSTS AND TELECOMMUNICATIONS, 31 August 2013 (2013-08-31) *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115118681A (zh) * 2022-06-22 2022-09-27 烽火通信科技股份有限公司 一种软硬件相结合配置mac地址条目的方法、系统和装置
CN115118681B (zh) * 2022-06-22 2023-05-30 烽火通信科技股份有限公司 一种软硬件相结合配置mac地址条目的方法、系统和装置
WO2024148813A1 (zh) * 2023-01-09 2024-07-18 中兴通讯股份有限公司 一种媒体介入控制地址处理的方法、电子设备及存储介质

Also Published As

Publication number Publication date
CN107205058A (zh) 2017-09-26
CN107205058B (zh) 2021-06-04

Similar Documents

Publication Publication Date Title
WO2018028606A1 (zh) 转发策略配置
US10063470B2 (en) Data center network system based on software-defined network and packet forwarding method, address resolution method, routing controller thereof
CN107733799B (zh) 一种报文传输方法和装置
US11399283B2 (en) Tenant service set identifiers (SSIDs)
EP3451597B1 (en) Packet forwarding
US8819211B2 (en) Distributed policy service
WO2021004536A1 (zh) 报文解析方法和装置
EP3461072A1 (en) Access control
WO2017206787A1 (zh) 通信网络设备的报文转发控制方法及通信网络设备
US11201760B2 (en) Data forwarding method and apparatus based on operating system kernel bridge
US11201781B2 (en) Systems and methods for automatically configuring network isolation
JP2015537261A (ja) 仮想マシン・マイグレーションを決定するための方法および装置
WO2019085975A1 (zh) 一种网络拓扑显示方法及网络管理设备
US8489723B2 (en) Controlling access to managed objects in networked devices
US20160294864A1 (en) Managing rogue devices through a network backhaul
WO2017107871A1 (zh) 访问控制方法和网络设备
US20090207756A1 (en) Network configuration management method
WO2016138845A1 (zh) 一种实现协议报文上送cpu的方法和装置
WO2017080440A1 (zh) 一种路由表更新方法、evpn控制设备及evpn系统
CN111107008A (zh) 一种反向路径检查方法和装置
WO2017156979A1 (zh) 一种媒体接入控制mac地址处理方法及装置
WO2017177648A1 (zh) Ipran系统中兼容super vlan与vlanif的方法
CN114978897B (zh) 基于eBPF和应用识别技术的网络控制方法和系统
US9467932B2 (en) Access control method for WiFi device and WiFi device
CN106330712A (zh) 一种mac地址学习的控制方法和装置

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16894140

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 16894140

Country of ref document: EP

Kind code of ref document: A1