摘要:
A method for control of communications from an edge device of an access network, via the provisioning or the non-provisioning of at least one layer 2 destination address of at least one other edge device of the access network to the edge device by a network management module of the access network. The at least one layer 2 destination address is delivered to the edge device on request of the edge device. In an exemplary embodiment, the edge device checks, upon arrival of a packet including at least one layer 2 destination address, whether the at least one layer 2 destination address is stored within a communications restriction filter of the edge device and generates the request including the at least one layer 2 destination address in case the at least one layer 2 destination address is not stored within the communication restriction filter.
摘要:
Access multiplexer systems (1) for performing stateless auto-configuration processes for use in networks (10) comprising access multiplexers (2,3) for receiving discovery messages from sources, which discovery messages comprise multicast destination addresses defining numbers of destinations, are, to increase the security of the networks (10), provided with agents (4) for replacing the multicast destination addresses in the discovery messages by further destination addresses defining further numbers of destinations, which further numbers of destinations are smaller than the numbers of destinations. Discovery messages are defined in RFC 2461 and 2462 and comprise solicitation messages, with the sources comprising hosts (21-23) and with the destinations comprising network-units (12-14), or comprise advertisement messages, with the sources comprising network-units (12-14) and with the destinations comprising hosts (21-23).
摘要:
An access multiplexer system for performing stateless auto-configuration processes for use in networks comprising access multiplexers for receiving discovery messages from sources, which discovery messages comprise multicast destination addresses defining numbers of destinations. In order to increase the security of the networks, the system is provided with agents for replacing the original number of multicast destination addresses in the discovery messages with a further number destination addresses defining further destinations, wherein the further number of destinations is smaller than the original number of destinations. Discovery messages are defined in RFC 2461 and 2462 and comprise solicitation messages, with the sources comprising hosts and with the destinations comprising network-units, or comprise advertisement messages, with the sources comprising network-units and with the destinations comprising hosts.
摘要:
A method for control of communications from an edge device (ED1) of an access network (AN), via the provisioning or the non-provisioning of at least one layer 2 destination address (MAC2) of at least one other edge device (ED2) of said access network (AN) to said edge device (ED1) by a network management module (NMM) of said access network (AN), is characterised by the fact that said at least one layer 2 destination address (MAC2) is delivered to said edge device (ED1) on request of said edge device (ED1). In a preferred embodiment said edge device (ED1) checks, upon arrival of a packet including at least one layer 2 destination address, whether said at least one layer 2 destination address is stored within a communications restriction filter (CRF) of said edge device (ED1) and generates said request including said at least one layer 2 destination address in case said at least one layer 2 destination address is not stored within said communication restriction filter (CRF).