CN103312545A - Method for restoring closed ports and network device - Google Patents
Method for restoring closed ports and network device Download PDFInfo
- Publication number
- CN103312545A CN103312545A CN2013102382222A CN201310238222A CN103312545A CN 103312545 A CN103312545 A CN 103312545A CN 2013102382222 A CN2013102382222 A CN 2013102382222A CN 201310238222 A CN201310238222 A CN 201310238222A CN 103312545 A CN103312545 A CN 103312545A
- Authority
- CN
- China
- Prior art keywords
- physical port
- port
- recovery
- closing
- closed
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Computer And Data Communications (AREA)
Abstract
The invention discloses a method for restoring closed ports and a network device. The method is applicable to devices with multiple physical ports and includes: starting UP of the physical ports which accord with restoring conditions during batching physical port restoring of the device. By the method, multiple physical ports, required to be restored, of the device can be restored accurately and fast, manual restoring operation aiming at each physical port is unnecessary, and speed and accuracy in physical port restoring are increased.
Description
Technical field
The present invention relates to communication technical field, particularly relate to a kind of method and network equipment that recovers close port.
Background technology
Unite States Standard and the (NIST of technical research institute, National Institute of Standard and Technology), it is the part of the US Department of Commerce, special is department of U.S. government and agency's issue standard and guilding principle, these standards and policy are issued as Federal Information Processing Standards (FIPS, Federal Information Processing Standards).
FIPS140 is crypto module safety standard (Security Requirements for Cryptographic Modules).FIPS140-2 is second version of FIPS140 series, and the calendar year 2001 issue is the official release of current FIPS140.FIPS140-2 has 4 ranks, and the federal agency buying of America ﹠ Canada comprises the product of cryptosecurity characteristic, all needs to authenticate by FIPS140-2.
The safety that FIPS relates to has 11 aspects, is respectively password specification, authentication, log management etc.
The FIPS pattern: equipment namely enters the FIPS pattern after enabling FIPS, and the modules such as equipment password specification, authentication, log management meet the FIPS standard under this pattern; Corresponding right and wrong FIPS pattern with it, equipment is not subjected to the impact of FIPS standard under this pattern.
Journal file writing protection function: under the FIPS/CC pattern; can enable the daily record writing protection function; namely when the daily record file size has reached limit or Insufficient disk space; do not allow in journal file, to write daily record again; simultaneously equipment also can be carried out shutdown(and closes) all UP(open) physical port; would rather also to protect existing daily record by interrupt network, also avoid having the danger that does not have daily record in the situation of flow.Can be by shutdown for special mouths such as management mouth, stacking opening, console.
Product is in the situation that full or Insufficient disk space are write in daily record at present, and what take is the physical port of all UP of shutdown, stops all business datum flows, and equipment is in " island state ".When equipment need to recover such physical port, currently only be configured recovery (by the main frame that belongs at this switching equipment on the administration interface of port, carry out the configuration of un shutdown for each port) or the manual configuration (manual to each port is carried out set) that re-issues un shutdown to port, to allow equipment recover normal operation.
Yet, recover in the prior art to have at least following problem because the mode of the physical port of closing in the situation of full or Insufficient disk space is write in daily record: no matter be that configuration restore or manual recovery all need to configure or set operation accordingly for each pent port, the complexity and the work load that recover have so not only been increased, also easily make mistakes, and the speed that port recovers is slower.
Summary of the invention
The invention discloses a kind of method and network equipment that recovers close port, can avoid carrying out recovery configuring for each port, recover fast and accurately pent physical port, guarantee to greatest extent the continuation of flow.
In order to achieve the above object, the embodiment of the invention provides a kind of method of recovering close port, comprising:
When equipment carried out the recovery of batch processing physical port, the physical port that will meet the recovery condition was opened UP.
Preferably, described equipment carries out before the recovery of batch processing physical port, and described method also comprises:
During the physical port of all UP of device shutdown, the physical port of described all UP that record is closed;
The described physical port of closing that meets the recovery condition is specially: described record close physical port.
Preferably, described equipment carries out before the recovery of batch processing physical port, and described method also comprises:
During the physical port of all UP of device shutdown, in the port attribute table of each physical port of closing, add the batch processing label;
The described physical port that meets the recovery condition is specially: the physical port of closing that includes described batch processing label in the port attribute table.
Preferably, the physical port of described all UP of device shutdown is specially: the physical port of all UP is closed during less than the first preset value in the residue log store space that described equipment is judged self.
Preferably, behind the physical port of described all UP of device shutdown, described method also comprises: the log store space of described equipment cleaning self.
The embodiment of the invention also provides a kind of network equipment that recovers close port, comprising:
The Recovery processing module is used for when the network equipment carries out the recovery of batch processing physical port, and the physical port that will meet the recovery condition is opened UP.
Preferably, the described network equipment also comprises:
Judge module is used for judging whether to satisfy the default trigger condition of closing, and is being judged as when being, the physical port that processing module is closed all UP is closed in indication first;
First closes processing module, is used for closing the physical port of all UP, and records the physical port of described all UP that close;
The described physical port of closing that meets the recovery condition is specially: described record close physical port.
Preferably, the described network equipment also comprises:
Judge module is used for judging whether to satisfy the default trigger condition of closing, and is being judged as when being, the physical port that processing module is closed all UP is closed in indication second;
Second closes processing module, is used for closing the physical port of all UP, and adds the batch processing label in the port attribute table of each physical port of closing;
The described physical port that meets the recovery condition is specially: the physical port of closing that includes described batch processing label in the port attribute table.
Preferably, describedly satisfy the pre-conditioned residue log store space of the described network equipment that is specially less than the first preset value.
Preferably, the described network equipment also comprises:
Daily record cleaning module is used for closing processing module or second first and closes the log store space of clearing up the network equipment after processing module is closed the physical port of all UP.
In the embodiment of the invention, by making equipment when carrying out the recovery of batch processing physical port, recovery meets the physical port of recovery condition, can make a plurality of physical ports that need recovery of accurate, the fast quick-recovery of equipment, need not the artificially for the operation that each physical port recovers, improved speed and accuracy that physical port recovers.
Description of drawings
Fig. 1 is a kind of schematic flow sheet that recovers the method for close port that the embodiment of the invention provides;
Fig. 2 is a kind of structural representation that recovers the device of close port that the embodiment of the invention provides;
Fig. 3 is a kind of structural representation that recovers the device of close port that the embodiment of the invention provides;
Fig. 4 is a kind of structural representation that recovers the device of close port that the embodiment of the invention provides.
Embodiment
For problems of the prior art, the embodiment of the invention provides a kind of method of recovering close port, qualified physical port is opened when carrying out the batch processing recovery by making equipment, can avoid carrying out recovery operation for each physical port, improve speed and accuracy that port recovers.
A kind of method of recovering close port that the embodiment of the invention provides is applied to have the equipment of a plurality of physical ports, and the method comprises:
When equipment carried out the recovery of batch processing physical port, the physical port that will meet the recovery condition was opened UP.
In the practical application, the physical port that is in closed condition may be closed owing to many reasons, such as keeper's configuration, log store insufficient space or be subjected to network attack etc., and equipment carries out physical port when recovering because specific reasons triggers, and may only need the physical port of recovered part.The situation that the port that recovers for fear of recovery or needs to wrong port is not resumed need to make equipment determine to meet the physical port of recovery condition and recover.Below be triggered when closing physical port with equipment, closed the physical port of all UP when being triggered, and when follow-up recovery, needed to recover these pent physical ports and be further detailed.
In order to make equipment can accurately recover corresponding physical port, can make in the following way equipment determine corresponding physical port, and the physical port of determining is recovered:
(1) during the physical port of all UP of device shutdown, the physical port of all UP that record is closed.Then equipment is when carrying out the batch processing recovery, and the physical port of closing of these records is exactly qualified physical port, namely needs the physical port that recovers.Such as, in the practical application, can record the identification information of the physical port of closing in this close event in this chained list for chained list of close event record of all UP ports once, such as port numbers etc.Equipment is when carrying out the batch processing recovery, and the physical port that the identification information of the physical port that records in the chained list is corresponding is exactly the physical port that needs unlatching.
(2) during the physical port of all UP of device shutdown, in the port attribute table of each physical port of closing, add the batch processing label.Equipment is when carrying out the batch processing recovery, and the physical port that carries the batch processing label in the port attribute table is exactly the physical port that needs recovery.Such as, if what the triggering physical port was closed is former because the log store insufficient space, can in the attribute list of physical port, add the label that Log shutdown is closed in a daily record, equipment is when carrying out the batch processing recovery, and the physical port that carries Log shutdown label in the port attribute table is exactly the physical port that needs unlatching.Certainly in the practical application, the batch processing label can also be by other means, make equipment need determine the port of recovery, such as a special field is set in the port attribute table, and when the physical port of all UP of device shutdown, special field in the port attribute table of the physical port of this all UP is set to particular value, and being used for this port of sign is the physical port that need to carry out batch save.Like this, equipment just can judge whether this physical port is recovered according to the value of respective field in the port attribute table of certain physical port in follow-up recovery process.
Need to prove, in the practical application, equipment be triggered close the physical port of all UP before, may make some physical ports be in closed condition owing to administrative staff's the other reasonses such as configuration, then in follow-up recovery process, the port that equipment need to recover should not comprise the port of closing because of above-mentioned other reasons.
Preferably, in the embodiment of the invention, trigger equipment close all UP physical port reason can for: the residue log store space of equipment is less than preset value.In concrete the application, can make log store space that equipment judges self according to the default cycle whether less than preset value, and be judged as when being, close the physical port of all UP.
Preferably, if equipment is owing to the log store insufficient space is closed physical port, then can also make after the device shutdown physical port, the log store space of Automatic clearance self, thus obtain enough memory spaces.In the practical application, can make equipment that the daily record of self storage is put in order (such as deletion, compression etc.) or the disk of self is put in order.Then trigger physical port and automatically recover, reduce the interruption of flow.
In the embodiment of the invention, by making equipment when carrying out the recovery of batch processing physical port, recovery meets the physical port of recovery condition, can make a plurality of physical ports that need recovery of accurate, the fast quick-recovery of equipment, need not the artificially for the operation that each physical port recovers, improved speed and accuracy that physical port recovers.
The preferred implementation of the method for the recovery close port that the embodiment of the invention one is provided below in conjunction with concrete application scenarios is elaborated.
For convenience of description, supposing to carry out the equipment that physical port recovers is the network equipment, this network equipment is monitored the residue log store space of self, and in self residue log store space less than 5% the time, close the physical port of self all UP, as shown in Figure 1, the method for the recovery close port that provides of the embodiment of the invention can comprise the steps:
Whether step 101, the network equipment judge the residue log store space of self less than or equal to preset value, if so, and execution in step 102, if not, process ends then.
In the practical application, preset value can be the log store space with respect to the ratio in whole log store space, such as 5%, also can be a fixed numbers (such as 30M), it is fixed that occurrence can be established S voluntarily by actual needs.
In the practical application, the network equipment can with disk space enough large and when being in normal operating conditions, the user still might make some physical ports wherein be in closed condition as required, thereby the network traffics of blocking-up respective physical port.Therefore, the network equipment only adds label in the port attribute table of current physical port of closing.
The network equipment can be deleted journal file or after carrying out journal file backup, delete corresponding journal file, and to carry out the process that journal file clears up consistent for equipment in this step and the prior art, do not repeat them here.
After step 103, suppose that the user has inputted the batch processing of carrying out the port recovery and recovered instruction, this instruction is used to indicate the physical port that equipment batch processing recovery is closed less than preset value because of residue storing daily record memory space, and the network equipment can carry out by following steps the recovery of physical port in the embodiment of the invention one.
The batch processing that step 104, the network equipment receive user's input recovers instruction, and this batch processing recovers instruction and is used to indicate all physical ports that network equipment recovery is closed less than preset value because of the residue log store space of the network equipment.
Whether step 105, the network equipment judge the residue log store space of self greater than preset value, if then execution in step 106, if not, process ends then.
In this step, if the memory space of the network equipment is not more than 5%, the reason that the trigger network device shutdown is described still exists, if carry out the recovery of physical port this moment, still can be after recovery very fast trigger network device shutdown port, so not only can not normally open physical port, also can cause simultaneously the repeatedly concussion of port.For fear of this situation, in this step, before opening physical port, also make the network equipment judge that whether the trigger condition that causes physical port to be closed is eliminated, if do not eliminate, does not then recover port, and sending corresponding information, prompting user carries out the cleaning of journal file.
To receive after the recovery configuring order that the user issues the process of unlatching physical port consistent for the network equipment in the process that the network equipment is opened physical port and the prior art, do not repeat them here.
Mode according to step 106-107, the network equipment can automatically be determined the physical port that all are closed less than or equal to preset value because of the residue log store space of self and recover, realization to the physical port of closing accurately, batch save, improved speed and accuracy that physical port recovers.
Based on the inventive concept same with said method, the embodiment of the invention two also provides a kind of network equipment, and as shown in Figure 2, this network equipment comprises:
Based on above-described embodiment two, the network equipment that provides in the embodiment of the invention three can also comprise modules as shown in Figure 3:
First closes processing module 303, is used for closing the physical port of all UP, and records the physical port of described all UP that close.
Preferably, this network equipment can also comprise:
Daily record cleaning module 304 is used for closing the log store space of clearing up the network equipment after processing module 303 is closed the physical port of all UP first.
Based on above-described embodiment two, the network equipment that provides among the another one embodiment four of the present invention can also comprise modules as shown in Figure 4:
Second closes processing module 403, is used for closing the physical port of all UP, and adds the batch processing label in the port attribute table of each physical port of closing.
Preferably, this network equipment can also comprise:
Daily record cleaning module 404 is used for closing the log store space of clearing up the network equipment after processing module 403 is closed the physical port of all UP second.
Preferably, in above-described embodiment three or four, satisfy the pre-conditioned residue log store space of the network equipment that is specially less than the first preset value.
Wherein, the modules of apparatus of the present invention can be integrated in one, and also can separate deployment.Above-mentioned module can be merged into a module, also can further split into a plurality of submodules.
Through the above description of the embodiments, those skilled in the art can be well understood to the present invention and can realize by hardware, also can realize by the mode that software adds necessary general hardware platform.Based on such understanding, technical scheme of the present invention can embody with the form of software product, it (can be CD-ROM that this software product can be stored in a non-volatile memory medium, USB flash disk, portable hard drive etc.) in, comprise some instructions with so that computer equipment (can be personal computer, server, the perhaps network equipment etc.) carry out the described method of each embodiment of the present invention.
It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, the module in the accompanying drawing or flow process might not be that enforcement the present invention is necessary.
It will be appreciated by those skilled in the art that the module in the device among the embodiment can be distributed in the device of embodiment according to the embodiment description, also can carry out respective change and be arranged in the one or more devices that are different from the present embodiment.The module of above-described embodiment can be merged into a module, also can further split into a plurality of submodules.
The invention described above sequence number does not represent the quality of embodiment just to description.
Above disclosed only be several specific embodiment of the present invention, still, the present invention is not limited thereto, the changes that any person skilled in the art can think of all should fall into protection scope of the present invention.
Claims (10)
1. a method of recovering close port is characterized in that, comprising:
When equipment carried out the recovery of batch processing physical port, the physical port that will meet the recovery condition was opened UP.
2. the method for claim 1 is characterized in that, described equipment carries out before the recovery of batch processing physical port, and described method also comprises:
During the physical port of all UP of device shutdown, the physical port of described all UP that record is closed;
The described physical port of closing that meets the recovery condition is specially: described record close physical port.
3. the method for claim 1 is characterized in that, described equipment carries out before the recovery of batch processing physical port, and described method also comprises:
During the physical port of all UP of device shutdown, in the port attribute table of each physical port of closing, add the batch processing label;
The described physical port that meets the recovery condition is specially: the physical port of closing that includes described batch processing label in the port attribute table.
4. method as claimed in claim 2 or claim 3 is characterized in that, the physical port of described all UP of device shutdown is specially: the physical port of all UP is closed during less than the first preset value in the residue log store space that described equipment is judged self.
5. method as claimed in claim 4 is characterized in that, behind the physical port of described all UP of device shutdown, described method also comprises: the log store space of described equipment cleaning self.
6. a network equipment is characterized in that, comprising:
The Recovery processing module is used for when the described network equipment carries out the recovery of batch processing physical port, and the physical port that will meet the recovery condition is opened UP.
7. the network equipment as claimed in claim 6 is characterized in that, also comprises:
Judge module is used for judging whether to satisfy the default trigger condition of closing, and is being judged as when being, the physical port that processing module is closed all UP is closed in indication first;
First closes processing module, is used for closing the physical port of all UP, and records the physical port of described all UP that close;
The described physical port of closing that meets the recovery condition is specially: described record close physical port.
8. the network equipment as claimed in claim 6 is characterized in that, also comprises:
Judge module is used for judging whether to satisfy pre-conditioned, and is being judged as when being, the physical port that processing module is closed all UP is closed in indication second;
Second closes processing module, is used for closing the physical port of all UP, and adds the batch processing label in the port attribute table of each physical port of closing;
The described physical port that meets the recovery condition is specially: the physical port of closing that includes described batch processing label in the port attribute table.
9. such as claim 7 or the 8 described network equipments, it is characterized in that,
Describedly satisfy the pre-conditioned residue log store space of the described network equipment that is specially less than the first preset value.
10. the network equipment as claimed in claim 9 is characterized in that, also comprises:
Daily record cleaning module is used for closing processing module or second first and closes the log store space of clearing up self after processing module is closed the physical port of all UP.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013102382222A CN103312545A (en) | 2013-06-14 | 2013-06-14 | Method for restoring closed ports and network device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013102382222A CN103312545A (en) | 2013-06-14 | 2013-06-14 | Method for restoring closed ports and network device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103312545A true CN103312545A (en) | 2013-09-18 |
Family
ID=49137347
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2013102382222A Pending CN103312545A (en) | 2013-06-14 | 2013-06-14 | Method for restoring closed ports and network device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103312545A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105843970A (en) * | 2016-05-24 | 2016-08-10 | 浪潮电子信息产业股份有限公司 | Method for deleting batch external USB flash disk files by user-defined |
| CN106533822A (en) * | 2015-09-14 | 2017-03-22 | 中兴通讯股份有限公司 | Physical port control method and device |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101594556A (en) * | 2008-05-28 | 2009-12-02 | ***电信传输研究所 | A kind of in the GPON system long-distance management device of data flow classification |
| CN101677445A (en) * | 2008-09-16 | 2010-03-24 | 中兴通讯股份有限公司 | Method and system of clearing service system logs |
| US20110010991A1 (en) * | 2008-03-18 | 2011-01-20 | Yuji Fujii | Container for culture of plant, method for culture of plant and method of production of cutting seedling |
| CN103095505A (en) * | 2013-02-05 | 2013-05-08 | 北京傲天动联技术股份有限公司 | Method and system for controlling power supply of power over Ethernet (POE) exchanger port |
-
2013
- 2013-06-14 CN CN2013102382222A patent/CN103312545A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110010991A1 (en) * | 2008-03-18 | 2011-01-20 | Yuji Fujii | Container for culture of plant, method for culture of plant and method of production of cutting seedling |
| CN101594556A (en) * | 2008-05-28 | 2009-12-02 | ***电信传输研究所 | A kind of in the GPON system long-distance management device of data flow classification |
| CN101677445A (en) * | 2008-09-16 | 2010-03-24 | 中兴通讯股份有限公司 | Method and system of clearing service system logs |
| CN103095505A (en) * | 2013-02-05 | 2013-05-08 | 北京傲天动联技术股份有限公司 | Method and system for controlling power supply of power over Ethernet (POE) exchanger port |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106533822A (en) * | 2015-09-14 | 2017-03-22 | 中兴通讯股份有限公司 | Physical port control method and device |
| WO2017045470A1 (en) * | 2015-09-14 | 2017-03-23 | 中兴通讯股份有限公司 | Physical-port control method and apparatus |
| CN106533822B (en) * | 2015-09-14 | 2020-06-09 | 中兴通讯股份有限公司 | Physical port control method and device |
| CN105843970A (en) * | 2016-05-24 | 2016-08-10 | 浪潮电子信息产业股份有限公司 | Method for deleting batch external USB flash disk files by user-defined |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102844762B (en) | Secure environment management during switches between different modes of multicore systems | |
| CN111262701B (en) | Replay attack detection method, system, equipment and storage medium | |
| US9917853B2 (en) | Correlating event logs to identify a potential security breach | |
| CN107169361A (en) | The detection method and system of a kind of leaking data | |
| CN104615504B (en) | A kind of method and device for realizing data protection | |
| CN108701188A (en) | In response to detecting the potential system and method for extorting software for modification file backup | |
| CN103488481A (en) | Application program control method, terminal equipment and remote control system | |
| CN103106372A (en) | Lightweight class privacy data encryption method and system for Android system | |
| CN105630965B (en) | User's space safety deleting file system and method on a kind of mobile terminal flash media | |
| US10542017B1 (en) | Systems and methods for personalizing security incident reports | |
| CN108027757A (en) | Recover the system and method for data for never transparent data backup stream | |
| CN107563192A (en) | A kind of means of defence for extorting software, device, electronic equipment and storage medium | |
| DE102017115758A1 (en) | Systems and methods for a secure payment terminal without batteries | |
| CN107229414A (en) | Memory space recovery method and device | |
| CN106021027B (en) | Terminal data processing method and system | |
| CN106130777A (en) | System safeguarded by a kind of industrial equipment based on cloud computing | |
| CN103312545A (en) | Method for restoring closed ports and network device | |
| CN105224416B (en) | Restorative procedure and related electronic device | |
| CN104536852A (en) | Data recovery method and device | |
| CN105022676A (en) | Recovery method and device of main memory database redo log files | |
| CN108304222A (en) | Apparatus management/control system and method | |
| CN103136487A (en) | Method, device and system for managing data in hard disc hidden area | |
| CN102982288B (en) | The encryption of data and the equipment of deciphering and method is performed in portable terminal | |
| CN109240804B (en) | Method and device for managing disk resources of virtual machine | |
| CN106130717A (en) | A kind of file storage decryption method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20130918 |
|
| RJ01 | Rejection of invention patent application after publication |