ARP packet processing method, communication system and device

• US 9,148,374 B2
• Filed: 08/19/2013
• Issued: 09/29/2015
• Est. Priority Date: 07/20/2007
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Li, Zhenhai
• Primary Examiner(s): Lee, Jae Y
• Assistant Examiner(s): Guadalupe-Cruz, Aixa
• Application Number:
  US13/987,651
• Publication Number:
  US 20130336326A1
• Time in Patent Office: 771 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

An Address Resolution Protocol (ARP) packet processing method. a communication system and a device are disclosed. The method includes: receiving an ARP packet, and judging the type of the ARP packet; when the ARP packet is an ARP request, responding to the ARP request if an entry corresponding to the ARP request is found in a local ARP table; and when the ARP packet is an ARP response. reporting the ARP response if an entry corresponding to the ARP response is found in the local ARP table and a reporting parameter in the entry indicates permission of reporting; or discarding the ARP response if no entry corresponding to the ARP response is found in the ARP table.

Claims

1. An Address Resolution Protocol (ARP) packet processing method performed by a network device, comprising:

receiving, by a forwarding plane processor of the network device, an ARP packet;

determining, by the forwarding plane processor, whether the ARP packet is an ARP response;

reporting, by the forwarding plane processor, the ARP response to a control plane processor of the network device when an entry corresponding to the ARP response is found in a local ARP table of the forwarding plane processor and a reporting parameter in the entry corresponding to the ARP response indicates permission to report the ARP response to the control plane, wherein the local ARP table is communicated to the forwarding plane processor of the network device by the control plane processor of the network device.

2. The method of claim 1, wherein when the entry corresponding to the ARP response is found in the local ARP table, the method further comprises:

if the reporting parameter indicates that the ARP should be reported to the control plane, limiting, by the forwarding plane processor, the speed of the ARP response and then reporting the ARP response to the control plane processor; and

if the reporting parameter indicates that the ARP should not be reported to the control plane, discarding the ARP response.

3. The method of claim 2, wherein the limiting is carried out according to the preset processing rule.

4. The method of claim 2, wherein the limiting is implemented by searching a relevant table.

5. The method of claim 1, further comprising:

when the entry corresponding to the ARP response is found in the ARP table, and the reporting parameter in the entry indicates no permission of reporting,

discarding, by the forwarding plane processor, the ARP response.

6. The method of claim 5, wherein the discarding is carried out according to the preset processing rule.

7. The method of claim 5, wherein the discarding is implemented by searching a relevant table.

8. The method of claims 1, further comprising:

searching the ARP table according to a source Internet Protocol (IP) address of the ARP response.

9. The method of claims 1, wherein after reporting the ARP response, the method further comprises:

modifying the reporting parameter in the entry corresponding to the ARP response in the ARP table to no permission of reporting.

10. The method of claim 1, wherein an entry of the local ARP table comprises a flag having at least two states, wherein the first state indicates that the entry in the local ARP specifies a relationship between an IP address and MAC address of a gateway and the second state indicates that the entry in the local ARP specifies a relationship between an IP address of a gateway and a MAC address of a proxy device that forwards ARP packets to the gateway.

11. The method of claim 1, wherein an entry of the local ARP table comprises corresponding relation between an Internet Protocol (IP) address of a gateway interface and a Media Access Control (MAC) address of the gateway interface.

12. The method of claim 11, wherein when a Virtual Router Redundancy Protocol (VRRP) is enabled on the gateway interface, the entry of the local ARP table is maintained according to state change of VRRP.