CN1249572C - Plug-and-play ether net access system and method - Google Patents

Abstract

The present invention provides a plug-and-play ethernet access system and a method, wherein a processing module capable of achieving the plug-and-play function is added on the basis of a router or a triplex-layer exchanger of the system; when the module sends the ethernet message to an access device on an access user, a mark for recognizing users is used according to a user's MAC (Medium Access Control) address or a VLANID and MAC address, a user's IP address, gateway address and DNS address are newly generated in the system, and then the user 's message is sent; when the access user receives the ethernet message from the access device, the message is amended, and the ethernet message is sent to the user according to the user's original network configuration.

Description

A Plug and Play Ethernet Access System and Method

technical field

The present invention relates to a plug-and-play Ethernet access system and method, in particular to a plug-and-play Ethernet access device that does not require the computer to modify the network configuration or re-apply for an IP address. Ethernet access system and method.

technical background

Because the Ethernet network has the advantages of fast information transmission and low cost, it has been widely used in daily life, such as in hotels and public halls.

In a common network, the network is divided according to network segments. Different network segments have different IP address segments, and the computers connected to the same network segment are required to have the same network configuration. In the prior art, there are two commonly used configuration methods:

The first, fixed configuration of IP address: that is, under the same network segment, the IP addresses of all computers are fixed and different from each other, but these computers have the same gateway address and DNS (Domain Name Server) server address.

The second type, dynamic application of IP address: that is, under the same network segment, the IP addresses of all computers are dynamically configured through the computer's operating system (such as: WINDOWS). Of course, these computers also have the same gateway address and DNS server address.

However, no matter which of the above two methods is used to configure an IP address for the computer, when a computer is transferred from one network segment to another, in the current application, the network configuration must be modified or the computer must be re-applied Otherwise, the computer cannot carry out normal network communication in the network. In the actual application of hotels, public halls, etc., when the computer moves from one network to another, there will be problems caused by modifying the network configuration or resetting the IP address. Problems such as increased labor costs, time waste, and low efficiency caused by computer applications for IP addresses.

Contents of the invention

The purpose of the present invention is to solve the problems existing in the above-mentioned prior art, and to propose a computer plug-and-play Ethernet access system and method.

The purpose of the present invention is achieved through the following technical solutions:

On the basis of the router or layer-3 switch of the plug-and-play Ethernet access system, a processing device capable of realizing plug-and-play is added.

When the access user sends the Ethernet packet to the access device, the processing method of the system is as follows:

First, it is processed by the plug-and-play processing device, and the processed message is then processed by a router or a layer-3 switch;

In the plug-and-play processing device of the access device, the user's IP address, gateway address, DNS address, and then send the user's message.

When the system accesses the user to receive the Ethernet message, the processing method is as follows:

When the message sent to the user is sent to the access device, it is first processed by a router or a layer-3 switch; the processed message is then processed by a plug-and-play processing device;

When receiving the message sent to the user, first modify the message, and then send the Ethernet message to the user according to the user's original network configuration.

Because above-mentioned technical feature of the present invention, so, compared with prior art, has following advantage:

Access users do not need to modify the network configuration or re-apply for an IP address, they can directly and simply conduct network communication, which is especially suitable for network access in places with high network mobility such as hotels and public halls.

Description of drawings

Fig. 1 is a router or a three-layer switch device logic structure diagram;

Fig. 2 is a logical structure diagram of a plug-and-play device;

Fig. 3 is the flowchart of ARP message processing;

Fig. 4 is a flowchart of DNS message processing;

Fig. 5 is a flowchart of DHCP address allocation processing;

FIG. 6 is a flow chart of message forwarding processing.

Detailed ways

The present invention will be further described below in conjunction with accompanying drawing:

Embodiment 1: The present invention processes the ARP message.

Please refer to Figure 2 and Figure 3, this kind of Ethernet access system that can realize the plug-and-play of computers in the network of access devices without modifying the network configuration or re-applying for IP addresses is shown in Figure 2. The large The dotted box represents the logical structure diagram of the plug-and-play access device. The plug-and-play access device only needs to pre-install a plug-and-play processing device in the router or layer-3 switch equipment, and use the user's MAC address or VLAN ID+MAC address as an index to record the user's original IP address and user mapping. After the IP address and other information, the mapped IP address of the user needs to be on the same network segment. The plug-and-play processing device performs IP address replacement processing on the message sent by the user, replaces the source IP address with the mapped address, and sends the message to a router or a layer-3 switch for processing. For the message sent to the user from the network side, the plug-and-play processing device also performs IP address replacement processing, replaces the destination IP address with the mapped address, fills in the user's MAC address, and sends the message to the user.

When the user accesses the Ethernet in different network segments 4 and sends it to the access device through the input port 5, it is first processed by the plug-and-play module. In the plug-and-play module of the access device, only according to the user's MAC address or VLAN ID+MAC address is used as a mark to identify the user, and the user's IP address, gateway address, and DNS address are regenerated within the system, and then the user's message is sent. The mapped user is on the same network segment 6, and the report is processed. After the text is mapped, the input port 7 enters the router or a layer-3 switch for processing, that is, the packet received and sent to the user is modified first, and then the Ethernet packet is sent to the user through the output port 8 according to the user's original network configuration. The process for the access user to receive Ethernet packets is reversed (see Figure 2).

In the network of the access device, the plug-and-play message exchange process is as follows:

(1) A plug-and-play processing device is pre-installed in the router or layer-3 switch equipment. This module uses the user's MAC address or VLAN ID+MAC address as an index to record the user's original IP address, the user's mapped IP address, etc. information, the user's mapped IP address needs to be on the same network segment;

(2) The plug-and-play processing device performs IP address replacement processing on the message sent by the user, that is, first replaces the source IP address with a mapped address, and then sends the message to an internal router or a layer-3 switch for processing. For the message sent to the user from the network side, the plug-and-play processing device also performs IP address replacement processing, replaces the destination IP address with the mapped address, and fills in the user's MAC address;

(3) The access device is configured with an internal network segment. When the access computer starts to send messages, record the MAC address and IP address of the computer, and at the same time assign an internal network segment address to the user, and change the user's IP address to Internally assign an IP address and send the modified message;

(4) The access device shall perform special processing on the user's ARP request message. Since the user's IP address is allowed to be various, the gateway address is also various, and the access device does not limit this. After the user is connected to the access device, if the user adopts the fixed IP address allocation method, if the user sends a message to another network segment or a device on the same network segment, it needs to send an ARP request message to request the MAC address of the gateway or the same network segment. The MAC address of the segment device. After the access device receives the ARP request, it should send an ARP response message instead of responding to the ARP request, and the MAC address of the response is the MAC address of the device itself. From the perspective of the user, it is considered that the MAC address of the corresponding device has been found, and a data packet can be sent, and the MAC address in the data packet is the MAC address of the access device. After the access device receives the IP packet whose MAC address is its own, it forwards the user packet.

Embodiment 2: the processing of the DNS message in the present invention.

Please refer to Figure 2 and Figure 4, this kind of Ethernet access system that can realize plug-and-play of computers in the network of access devices without modifying network configuration or reapplying for IP addresses, including:

As shown in FIG. 2 , the big dashed box represents a logical structure diagram of the plug-and-play access device. The plug-and-play access device only needs to pre-install a plug-and-play processing device in the router or layer-3 switch equipment. This module uses the user's MAC address or VLAN ID+MAC address as an index to record the user's original IP address. For information such as the IP address after user mapping, the mapped IP address of the user must be on the same network segment. The plug-and-play processing device performs IP address replacement processing on the message sent by the user, replaces the source IP address with the mapped address, and sends the message to the internal router or layer-3 switch for processing. For the message sent to the user from the network side, the plug-and-play processing device also performs IP address replacement processing, replaces the destination IP address with the mapped address, fills in the user's MAC address, and sends the message to the user.

When the user accesses the Ethernet in different network segments 4 and sends it to the access device through the input port 5, it is first processed by the plug-and-play module. In the plug-and-play software module of the access device, only according to the user's MAC The address or VLAN ID+MAC address is used as a mark to identify the user, and the user's IP address, gateway address, and DNS address are regenerated within the system for the user, and then the user's message is sent. The mapped user is on the same network segment 6 and processed After the message is mapped, the input port 7 enters the router or a layer-3 switch for processing, and the message received and sent to the user is modified, and the Ethernet message is sent to the user through the output port 8 according to the user's original network configuration. The process for the access user to receive Ethernet packets is reversed (see Figure 2).

In the network of the access device, the plug-and-play message exchange process is as follows:

(1) A plug-and-play processing device is pre-installed in the router or layer-3 switch equipment, and the user's MAC address or VLAN ID+MAC address is used as an index to record the user's original IP address, the user's mapped IP address and other information, The user's mapped IP address needs to be on the same network segment;

(2) The plug-and-play processing device performs IP address replacement processing on the message sent by the user, replaces the source IP address with the mapped address, and sends the message to an internal router or a layer-3 switch for processing. For the message sent to the user from the network side, the plug-and-play processing device also performs IP address replacement processing, replaces the destination IP address with the mapped address, and fills in the user's MAC address;

(3) The access device configures an internal network segment. When a user requests a domain name service through the DNS protocol, the access device checks and intercepts the DNS request message, and modifies the destination IP address of the request message and the verification of the IP message. And, forward the message to the real DNS server of the network, when the DNS receives the message, modify the destination IP address of the DNS response message and the checksum of the IP message, and send it to the original computer.

Embodiment 3: The present invention supports address allocation processing in the aspect of DHCP.

Please refer to Figure 2 and Figure 5, this kind of Ethernet access system that can realize plug-and-play of computers in the network of access devices without modifying the network configuration or re-applying for IP addresses is shown in Figure 2. The large The dotted box represents the logical structure diagram of the plug-and-play access device. The plug-and-play access device only needs to pre-install a plug-and-play processing device in the router or layer-3 switch equipment. This module uses the user's MAC address or VLAN ID+MAC address as an index to record the user's original IP address. For information such as the IP address after user mapping, the mapped IP address of the user must be on the same network segment. The plug-and-play processing device performs IP address replacement processing on the message sent by the user, replaces the source IP address with the mapped address, and sends the message to the internal router or layer-3 switch for processing. For the message sent to the user from the network side, the plug-and-play processing device also performs IP address replacement processing, replaces the destination IP address with the mapped address, fills in the user's MAC address, and sends the message to the user.

When the user accesses the Ethernet in different network segments 4 and sends it to the access device through the input port 5, it is first processed by the plug-and-play module. In the plug-and-play software module of the access device, only according to the user's MAC The address or VLAN ID+MAC address is used as a mark to identify the user, and the user's IP address, gateway address, and DNS address are regenerated within the system, and then the user's message is sent. The mapped user is on the same network segment 6 and processed After the message is mapped, the input port 7 enters the router or a layer-3 switch for processing, and the message received and sent to the user is modified, and the Ethernet message is sent to the user through the output port 8 according to the user's original network configuration. The process for the access user to receive Ethernet packets is reversed (see Figure 2).

In the network of the access device, the plug-and-play message exchange process is as follows:

(1) A plug-and-play processing device is pre-installed in the router or layer-3 switch equipment. This module uses the user's MAC address or VLAN ID+MAC address as an index to record the user's original IP address, the user's mapped IP address, etc. information, the user's mapped IP address needs to be on the same network segment;

(2) The plug-and-play processing device performs IP address replacement processing on the message sent by the user, replaces the source IP address with the mapped address, and sends the message to the internal router or layer-3 switch for processing. For the message sent to the user from the network side, the plug-and-play processing device also performs IP address replacement processing, replaces the destination IP address with the mapped address, and fills in the user's MAC address;

(3) The access device is configured with an internal network segment. When the access computer starts to send messages, record the MAC address and IP address of the computer. For users who use dynamic address allocation, the access device needs to support the DHCP Relay function or The built-in DHCP Server function allows users to assign IP addresses through DHCP. The assigned address is directly the IP address uniformly mapped by the access device to the user, and the user's IP address is modified to an internally assigned IP address, and the modified message is sent out.

Fig. 2, Fig. 6 have shown the process of message forwarding of the present invention:

(1) If the message received by the access device is a broadcast message, judge whether the message is an ARP request message, if so, then replace the request device to answer, and its MAC address is the user port MAC address of the access device;

(2) If the broadcast message is a DHCP request, then process it according to the DHCP process;

(3) If the broadcast message is not an ARP request or a DHCP request, it is discarded.

(4) If the message is a unicast message sent to the access device, judge whether it is an IP message, if not, discard it, if it is, then judge whether it is a DNS request message, and if so, process it according to the DNS processing method ;

(5) For other types of IP messages, forward the messages, modify other source IP addresses to internally mapped IP addresses, and then hand over the messages to the router for processing.

Claims (9)

1. A plug-and-play Ethernet access system involving a computer in an access device network, comprising: a user computer, a router or a layer-3 switch for exchanging Ethernet messages, wherein the user computer is connected to In different network segments, with different gateway addresses and DNS domain name server addresses, and the user computer is connected to a router or a layer-3 switch and exchanges Ethernet packets through the router or a layer-3 switch. It is characterized in that: the router Or there is a plug-and-play processing device in the front of the three-layer switch equipment that processes Ethernet packets, and realizes that the access device does not require the user computer to modify the network configuration or re-apply for an IP address; The plug-and-play processing device regenerates the user's IP address, gateway address, and DNS address for the user within the system according to the relevant address of the user or the network as a mark to identify the user; then the processed message is delivered to the router or Layer 3 switch for processing; then send the message to a router or Layer 3 switch for processing; then pass the processed message to the plug-and-play processing device for modification; finally send the message according to the original network configuration of the receiving end To the receiving end, the receiving end receives the message. 2. a plug-and-play Ethernet access method utilizing the system described in claim 1 to process messages, characterized in that the method comprises the steps: 2a Send message: first, the plug-and-play processing device uses the relevant address of the user or the network as a mark to identify the user, and regenerates the user's IP address, gateway address, and DNS address for the user within the system; then the processed report The text is processed by a router or a Layer 3 switch; finally, the text is sent out; 2b Receiving the message: firstly, it is processed by a router or a layer-3 switch; then the processed message is handed over to a plug-and-play processing device for modification; finally, the message is sent to the receiving end according to the original network configuration of the receiving end, and the receiving end Receive message; When the plug-and-play processing device processes the message sent by the user or the message from the network side, it uses the MAC media access control address of the user as an index to record the original IP address of the user, and the IP address information after user mapping. Among them, the user's mapped IP address needs to be on the same network segment; The steps of the processing method of the message sent by the user by the plug-and-play processing device are as follows: 8a performing IP address replacement processing to replace the IP address with the mapped address; The 8b message is sent to the internal router or Layer 3 switch for processing; The steps of the processing method of the message from the network side by the plug-and-play processing device are as follows: 9a. IP address replacement processing, modifying the destination IP address to the user source IP address according to the mapping relationship; 9b. Fill in the MAC address of the user, and modify the checksum of the IP message at the same time; 9c. Send the message to the user. 3. The Ethernet access method of plug and play as claimed in claim 2, characterized in that: the message to be sent in the step (2a) is the message to be sent by the user or the message to be sent from the network side message; the receiving end in step (2b) is the user or the network. 4. The plug and play Ethernet access method as claimed in claim 2 or 3, characterized in that: in step (2a), after the access device receives the message to be sent, it also includes the following steps : The access device judges whether the type of the MAC address is broadcast or unicast. If it is a broadcast message, it will be processed according to the processing flow of the broadcast message; if it is a unicast message, it will be processed according to the processing flow of the unicast message. 5. the plug and play Ethernet access method as claimed in claim 4, is characterized in that, the step of the processing method of broadcast message is: access device judges the request type of broadcast message, if it is ARP address resolution If it is a protocol request, it will respond instead of the requested device, and its MAC address is the user port MAC address of the access device; if it is a DHCP dynamic main structure protocol request, it will be processed according to the DHCP process; if it is neither an ARP request nor a DHCP request, then throw away. 6. the plug and play Ethernet access method as claimed in claim 4, is characterized in that, the step of the processing method of unicast message is: whether the access device judges whether it is an IP message, if not then discards, if it is , then determine whether it is a DNS request message, and if so, process it according to the DNS processing method; if it is another type of IP message, forward this message, modify its source IP address to an internally mapped IP address, and then set the This message is handed over to the router for processing. 7. plug and play Ethernet access method as claimed in claim 5, is characterized in that, the step to the processing method of ARP message is: 10a. Receive Ethernet packets; 10b. Because the user's IP address and gateway address are allowed to be various, and the access device has no restrictions on this, so the user must send an ARP request before sending a message to another network segment or a device on the same network segment message request to obtain the MAC address of the gateway or the MAC address of the device on the same network segment; 10c. After receiving the ARP request, send an ARP response message instead of responding to the ARP request. At this time, the MAC address of the response is the MAC address of the device itself, that is, from the user's point of view, it is considered that the MAC address of the corresponding device has been found , can send a data packet, wherein the MAC address in the data packet is the MAC address of the access device, and the access device receives the IP packet whose MAC address is itself; 10d. Forward the user message. 8. the Ethernet access method of plug and play as claimed in claim 6, is characterized in that, the step of the processing method of DNS message is: 11a checks and intercepts the DNS request message; 11b modifying the destination IP address of the request message and the checksum of the IP message; 11c forwards the message to the real DNS server of the network; 11d receives the message and modifies the destination IP address of the DNS response message and the checksum of the IP message, and sends it to the original user computer. 9. The plug-and-play Ethernet access method as claimed in claim 6, characterized in that: when the network configuration of the user computer is to dynamically obtain the IP address mode, the access user computer is supported to obtain the IP address through DHCP dynamic address allocation function, the steps of the DHCP address allocation method are as follows: 12a. After the user computer is turned on, it broadcasts to the local area network through the DHCP protocol to search for the DHCP server, and the access device responds to the message after receiving the message; 12b. After the user computer receives the response from the DHCP server, it requests the DHCP server to assign an IP address. After the access device receives the request message, there are two processing methods: Method 1: Respond to the message and assign an IP address directly, that is, the access device notifies the user that the DHCP server IP address of the computer is the IP address of the access device itself; Method 2: forward the request message to a designated DHCP server, and the server will reply, and the access device will forward the reply message to the user computer. At this time, the IP address belongs to the designated DHCP server; 12c. After the user computer obtains the IP address, it uses this address as the source IP address for sending the message. In addition, according to the network configuration, the user computer obtains DNS configuration information through the DHCP protocol.

Images