CN105933471B - Method for simplifying and allocating isolation domain IP based on DHCP admission - Google Patents
Method for simplifying and allocating isolation domain IP based on DHCP admission Download PDFInfo
- Publication number
- CN105933471B CN105933471B CN201610483626.1A CN201610483626A CN105933471B CN 105933471 B CN105933471 B CN 105933471B CN 201610483626 A CN201610483626 A CN 201610483626A CN 105933471 B CN105933471 B CN 105933471B
- Authority
- CN
- China
- Prior art keywords
- dhcp
- message
- user terminal
- dhcp server
- access system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 18
- 238000002955 isolation Methods 0.000 title claims abstract description 17
- 238000012545 processing Methods 0.000 abstract description 7
- 238000012423 maintenance Methods 0.000 abstract description 5
- 230000009286 beneficial effect Effects 0.000 abstract description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/50—Address allocation
- H04L61/5007—Internet protocol [IP] addresses
- H04L61/5014—Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Small-Scale Networks (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention relates to a method for simplifying and allocating an isolation domain IP based on DHCP admission, which comprises the following steps of 1: a DHCP access system captures a DHCP DISCOVER message sent by a user terminal; step 2: modifying the broadcast message into an isolation domain gateway relay message, and sending the isolation domain gateway relay message to a DHCP server; and step 3: after receiving the DHCP OFFER message responded by the DHCP server, the DHCP access system modifies the unicast message into a broadcast message and forwards the broadcast message; and 4, step 4: after receiving the DHCP ACK message sent by the DHCP server, the DHCP access system changes the destination IP into the user terminal IP and forwards the message, thereby completing the IP address allocation under the condition of one-time DHCP. The invention has the beneficial effects that: in the process that the DHCP server allocates the IP to the user terminal, whether the DHCP server and the user terminal are in the same network segment or not does not need to be considered, the processing logic of the system is simplified, the cost of system deployment is reduced, and the later-stage system maintenance is simpler.
Description
Technical Field
The invention relates to a method for simplifying network deployment requirements when IP is allocated aiming at a DHCP server, in particular to a method for simplifying and allocating isolation domain IP based on DHCP admission, belonging to the field of network communication.
Background
In an intranet, most hosts acquire IP addresses in a DHCP mode, but at present, a terminal host cannot be corresponding to a person and cannot forcibly install compliance software, an external host randomly accesses a network and cannot distinguish access authority of staff in a visitor domain, and DHCP admission needs to be deployed to solve the problems.
In the existing DHCP admission system, one case is that the subscriber terminal and the DHCP server are in the same network segment, and the other case is that the subscriber terminal and the DHCP server are not in the same network segment. In actual deployment, there are two different processing logics for determining whether the DHCP server and the user terminal are in the same network segment. Therefore, the processing logic is complex, the workload is increased invisibly, and the maintenance of the system in the later period is not facilitated.
Therefore, how to provide a method for simplifying and allocating the isolation domain IP based on DHCP admission is the research object of the invention.
Disclosure of Invention
In order to overcome the defects of the prior art, the invention solves the problem that whether the DHCP server and the user terminal are in the same network segment or not and different logic processing is required on the basis of the prior art, so that the DHCP server and the user terminal are processed according to the same set of logic whether in the same network segment or not, and the problems of complex processing logic and difficult later-stage system maintenance are fundamentally solved.
In order to solve the problems of the prior art, the technical scheme adopted by the invention is as follows:
a method for simplifying and allocating an isolation domain IP based on DHCP admission comprises the following steps:
(1) in the starting state, the DHCP access system captures a DHCP DISCOVER message sent by a user terminal, and executes the next step no matter whether a DHCP server and the user terminal are in the same network or not;
(2) the DHCP access system is connected with a Trunk port of the switch, and at the moment, the DHCP access system receives two messages, and if the messages are unicast messages with relays, the messages are discarded; if the broadcast message is not provided with the relay, continuing the next step;
(3) modifying the broadcast message into an isolation domain gateway relay message, and sending the isolation domain gateway relay message to a DHCP server;
(4) after receiving the message sent in the step (3), the DHCP server responds to the DHCP OFFER message;
(5) the DHCP access system modifies the unicast message into a broadcast message after receiving the DHCP OFFER message sent by the DHCP server and forwards the broadcast message;
(6) after receiving the message, the user terminal continues to send a DHCP REQUEST message;
(7) then the DHCP access system only receives a broadcast message, and does not receive a unicast message with a relay;
(8) continuing the process of the step (3);
(9) after receiving the message sent in the step (8), the DHCP server responds to a DHCP ACK message;
(10) the DHCP access system receives the DHCP ACK message sent by the DHCP server, changes the target IP into the user terminal IP and forwards the user terminal IP; this completes the assignment of the IP address in the case of DHCP.
The invention has the beneficial effects that: in the process that the DHCP server allocates the IP to the user terminal, whether the DHCP server and the user terminal are in the same network segment or not does not need to be considered, the processing logic of the system is simplified, the cost of system deployment is reduced, and the later-stage system maintenance is simpler.
Drawings
FIG. 1 is a schematic diagram of the steps of the present invention.
Fig. 2 is a network deployment diagram of the present invention.
Detailed Description
In order to make the technical solutions of the present invention more understandable to those skilled in the art, the present invention is further analyzed with reference to fig. 1-2.
As shown in fig. 2, a method for simplifying and allocating an isolated domain IP based on DHCP admission includes the following steps:
the method comprises the following steps: the DHCP server sets the IP address to 192.168.11.254, one of the two switches is set to 192.168.10.1/24, and the other switch is set to 192.168.11.1/24;
step two: corresponding configuration is carried out on a DHCP server, and when the PC is in an isolation state, the allocated IP address is an IP address in an isolation domain, namely 192.168.12. X;
step three: the PC1 and the DHCP server are in the same network segment, and the PC2 and the DHCP server are not in the same network segment;
step four: as shown in fig. 1, a DHCP admission system is installed, and all messages of PC1 and PC2 reach the system through Trunk ports of a convergence switch;
step five: starting the PC1, waiting for a plurality of seconds, and checking that the user terminal 1 acquires the isolation domain 192.168.12.X
Step six: starting the PC2, waiting for a plurality of seconds, and checking that the user terminal 2 acquires the isolation domain 192.168.12.X
No matter how the DHCP server is deployed, the isolated domain 192.168.12.X can be acquired using the present system.
The DHCP access system and the DHCP access method provided by the invention can ensure that whether the DHCP server and the user terminal are in the same network segment or not does not need to be considered in the process of allocating the IP to the user terminal by the DHCP server, thereby simplifying the processing logic of the system, reducing the cost of system deployment and ensuring that the later-stage system maintenance is simpler.
The technical solutions provided by the present application are introduced in detail, and the principles and embodiments of the present application are explained herein by applying embodiments, and the descriptions of the embodiments are only used to help understand the method and the core ideas of the present application; meanwhile, for a person skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.
Claims (2)
1. A method for simplifying and allocating an isolated domain IP based on DHCP admission is characterized by comprising the following steps:
(1) in the starting state, the DHCP access system captures a DHCP DISCOVER message sent by a user terminal, and executes the next step no matter whether a DHCP server and the user terminal are in the same network or not;
(2) the DHCP access system is connected with a Trunk port of the switch, receives two messages, and discards the messages if the messages are unicast messages with relays; if the broadcast message is not provided with the relay, modifying the broadcast message into an isolation domain gateway relay message;
(3) modifying the broadcast message into an isolation domain gateway relay message, and sending the isolation domain gateway relay message to a DHCP server;
(4) after receiving the message sent in the step (3), the DHCP server responds to the DHCP OFFER message;
(5) the DHCP access system modifies the unicast message into a broadcast message after receiving the DHCP OFFER message sent by the DHCP server and forwards the broadcast message;
(6) after receiving the message, the user terminal continues to send a DHCP REQUEST message;
(7) then the DHCP access system only receives a broadcast message, and does not receive a unicast message with a relay;
(8) continuing the process of the step (3);
(9) after receiving the message sent in the step (8), the DHCP server responds to a DHCP ACK message;
(10) the DHCP access system receives the DHCP ACK message sent by the DHCP server, changes the target IP into the user terminal IP and forwards the user terminal IP; this completes the assignment of the IP address in the case of DHCP.
2. The method for simplifying the distribution of the isolated domain IP based on the DHCP admission according to the claim 1, characterized in that: the DHCP admission system does not need to consider whether a DHCP server and a user terminal are in the same network.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610483626.1A CN105933471B (en) | 2016-06-28 | 2016-06-28 | Method for simplifying and allocating isolation domain IP based on DHCP admission |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610483626.1A CN105933471B (en) | 2016-06-28 | 2016-06-28 | Method for simplifying and allocating isolation domain IP based on DHCP admission |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105933471A CN105933471A (en) | 2016-09-07 |
| CN105933471B true CN105933471B (en) | 2020-06-02 |
Family
ID=56829251
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610483626.1A Active CN105933471B (en) | 2016-06-28 | 2016-06-28 | Method for simplifying and allocating isolation domain IP based on DHCP admission |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105933471B (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101605090A (en) * | 2008-06-14 | 2009-12-16 | 中兴通讯股份有限公司 | Two layers of middle-agent's of DHCP implementation method in the EPON |
| CN102438051A (en) * | 2012-01-14 | 2012-05-02 | 神州数码网络(北京)有限公司 | Method and system for realizing dynamic host configuration protocol (DHCP) relay of two-layer network switch equipment |
| CN103533091A (en) * | 2012-07-02 | 2014-01-22 | 杭州华三通信技术有限公司 | Method and apparatus for performing dynamic host configuration protocol (DHCP) relay processing on unicast message |
| CN105337886A (en) * | 2015-11-02 | 2016-02-17 | 福建星网锐捷网络有限公司 | DHCP address allocation method and DHCP address allocation device |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7016353B2 (en) * | 2001-06-13 | 2006-03-21 | Telcordia Technologies, Inc. | Method and system for dynamically assigning IP addresses in wireless networks |
| CN101442516B (en) * | 2007-11-20 | 2012-04-25 | 华为技术有限公司 | Method, system and apparatus for DHCP authentication |
| CN105635330B (en) * | 2014-11-05 | 2019-08-02 | 中兴通讯股份有限公司 | A kind of method and apparatus for realizing dhcp broadcast mutual message VLAN N:1 conversion |
-
2016
- 2016-06-28 CN CN201610483626.1A patent/CN105933471B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101605090A (en) * | 2008-06-14 | 2009-12-16 | 中兴通讯股份有限公司 | Two layers of middle-agent's of DHCP implementation method in the EPON |
| CN102438051A (en) * | 2012-01-14 | 2012-05-02 | 神州数码网络(北京)有限公司 | Method and system for realizing dynamic host configuration protocol (DHCP) relay of two-layer network switch equipment |
| CN103533091A (en) * | 2012-07-02 | 2014-01-22 | 杭州华三通信技术有限公司 | Method and apparatus for performing dynamic host configuration protocol (DHCP) relay processing on unicast message |
| CN105337886A (en) * | 2015-11-02 | 2016-02-17 | 福建星网锐捷网络有限公司 | DHCP address allocation method and DHCP address allocation device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105933471A (en) | 2016-09-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109660443B (en) | SDN-based physical device and virtual network communication method and system | |
| US9513970B2 (en) | Optimizing handling of virtual machine mobility in data center environments | |
| WO2019144826A1 (en) | Network identifier mapping method and system, terminal, and identification gateway | |
| JP4081472B2 (en) | Cluster management method and apparatus for network device | |
| CN101883158B (en) | Method and client for acquiring VLAN (Virtual Local Area Network) IDs (Identifiers) and network protocol addresses | |
| CN100493086C (en) | Method for realizing virtual IP protocol | |
| US9100353B2 (en) | Cloud server for managing hostnames and IP addresses, and management method for the cloud server | |
| US9525648B2 (en) | Method for acquiring physical address of virtual machine | |
| KR101589239B1 (en) | Method and apparatus for packet call setup | |
| CN103001868A (en) | Method and device used for synchronous ARP (Address Resolution Protocol) list item of virtual router redundancy protocol backup set | |
| US8832314B2 (en) | Information synchronization method, apparatus and system | |
| CN107770010B (en) | OpenFlow-based home networking method and system | |
| EP2584742A1 (en) | Method and switch for sending packet | |
| CN101895587A (en) | Method, device and system for preventing users from modifying IP addresses privately | |
| CN104618522B (en) | The method and Ethernet access equipment that IP address of terminal automatically updates | |
| CN104468869A (en) | Method for allocating IP addresses to terminals and method and device for obtaining IP addresses | |
| CN105635335B (en) | Social resources cut-in method, apparatus and system | |
| CN101325587A (en) | Method for monitoring DHCP conversation | |
| CN101873320A (en) | Client information verification method based on DHCPv6 relay and device thereof | |
| WO2023010821A1 (en) | Host discovery and addition method and apparatus in data center, and device and medium | |
| WO2016086544A1 (en) | Network interface configuration method and apparatus for network device and storage medium | |
| CN102647360A (en) | Method and equipment for transmitting messages in VRRPE (virtual router redundancy protocol equilibrium) | |
| JP6445408B2 (en) | Communication system and setting method | |
| JP5660602B2 (en) | Communication system, VPN gateway apparatus, and communication method used therefor | |
| CN105933471B (en) | Method for simplifying and allocating isolation domain IP based on DHCP admission |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| EE01 | Entry into force of recordation of patent licensing contract | ||
| EE01 | Entry into force of recordation of patent licensing contract |
Application publication date: 20160907 Assignee: CHINA TECHNOLOGY EXCHANGE Co.,Ltd. Assignor: BEIJING VRV SOFTWARE Corp.,Ltd. Contract record no.: X2023110000147 Denomination of invention: A Implementation Method for Simplified Allocation of Isolation Domain IPs Based on DHCP Access Granted publication date: 20200602 License type: Exclusive License Record date: 20231201 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: A Implementation Method for Simplified Allocation of Isolation Domain IPs Based on DHCP Access Effective date of registration: 20231206 Granted publication date: 20200602 Pledgee: CHINA TECHNOLOGY EXCHANGE Co.,Ltd. Pledgor: BEIJING VRV SOFTWARE Corp.,Ltd. Registration number: Y2023110000520 |