公开(公告)号：US20150249666A1

公开(公告)日：2015-09-03

申请号：US14573069

申请日：2014-12-17

Applicant: ALAXALA Networks Corporation

Inventor： Satoru KATO ,  Tomomi SUZUKI ,  Michihiro YOSHIDA

IPC: H04L29/06

CPC classification number: H04L63/1458 ,  H04L63/08

Abstract: A system manager sets a port connected to a specific device (for example, a router device) among a plurality of ports of a switch device as a reliable port. If a packet is received in the reliable port, the switch device manages an IP address and a MAC address of the router device by a reliable port information table. When a packet is received from a port not set as the reliable port, the switch device refers to the reliable port information table. At this time, when the received packet is an address resolution packet having impersonated a router device, the switch device discards the packet without transmitting the packet, thereby preventing a cyber attack on a terminal.

Abstract translation: 系统管理器将连接到交换机设备的多个端口中的特定设备（例如，路由器设备）的端口设置为可靠端口。 如果在可靠端口收到数据包，交换机将通过可靠的端口信息表管理路由器设备的IP地址和MAC地址。 当从未设置为可靠端口的端口接收到报文时，交换机设备可以参考可靠的端口信息表。 此时，当接收到的分组是具有模拟路由器设备的地址解析分组时，交换机设备在不发送分组的情况下丢弃分组，从而防止对终端的网络攻击。