知搜-全球专利检索

  1. 登录
  2. 注册
发明授权
CN106302263B 一种路由口与非路由口二层隔离的方法、装置及交换机 有权

一种路由口与非路由口二层隔离的方法、装置及交换机
摘要：
本发明提供了一种路由口与非路由口二层隔离的方法、装置及交换机，涉及交换机领域，解决现有交换机二层隔离技术存在缺陷的问题，该方法包括：获取交换机的路由口位图和非路由口位图；分别获取路由口位图中的路由口接收的二层报文及非路由口位图中的非路由口接收的二层报文；分别获取路由口接收的二层报文中及非路由口接收的二层报文中转发类型为二层转发的报文；对路由口接收的二层报文中转发类型为二层转发的报文执行丢弃的操作；对非路由口接收的二层报文中转发类型为二层转发的报文，在交换机的访问控制列表中按照所述路由口位图执行出口掩码EgressMask的操作。本发明的方案很好的实现了路由口与非路由口的二层隔离。
摘要（英）：

A method and device for layer-2 isolation between route ports and non-route ports, and a switch. The method comprises: acquiring a route port bitmap and a non-route port bitmap of a switch; respectively acquiring layer-2 packets received by route ports in the route port bitmap and layer-2 packets received by non-route ports in the non-route port bitmap; respectively acquiring a packet with a forwarding type being layer-2 forwarding from the layer-2 packets received by the route ports and the layer-2 packets received by the non-route ports; discarding the packet with a forwarding type being layer-2 forwarding in the layer-2 packets received by the route ports; and for the packet with a forwarding type being layer-2 forwarding in the layer-2 packets received by the non-route ports, carrying out an EgressMask operation according to the route port bitmap in an access control list of the switch. The technical solution successfully realizes layer-2 isolation between route ports and non-route ports.

公开/授权文献
0/0