Abstract: The present invention discloses a method, system and device for removing Media Access Control (MAC) addresses. The method includes: sending, by a first User-facing Provider Edge (UPE), a MAC Address Withdraw message, when a handover happens on an access network; receiving, by a network provider edge (NPE), the MAC Address Withdraw message; and removing, by the NPE, a Backbone Media Access Control (B-MAC) address table corresponding to a Virtual Private LAN Service (VPLS) network and forwarding the MAC Address Withdraw message, if the message carries no specific identifier; or directly forwarding, by the NPE, the MAC Address Withdraw message, if the message carries a specific identifier. In the present invention, a specific identifier is added to a MAC Address Withdraw message so as to avoid unnecessary MAC address learning by NPE and UPE devices and to reduce the impact, caused by MAC address learning, on network devices.

Abstract: A method, an apparatus and a system for operating Quality of Service, QoS, based on stream, are provided. The method may include: delivering a Real-Time Transport Protocol, RTP, data stream feature to a forwarding plane; learning a RTP packet which is delivered by the forwarding plane conforming to the RTP data stream feature; and judging the RTP data stream to be a determined RTP data stream based on the RTP packet learned; identifying and monitoring the determined RTP data stream to obtain control strategy of QoS of the determined RTP data stream; and delivering the control strategy of the QoS of the determined RTP data stream to the forwarding plane so that the forwarding plane manipulates QoS of the determined RTP data stream based on the control strategy of QoS.

Abstract: A reliability processing method and system in networking of Metro Ethernet Network providing multi-service are provided. The method includes: establishing a Virtual Router Redundancy Protocol (VRRP) group with at least two service control gateways, establishing network connections between an access device (UPE) and the service control gateways in the Virtual Router Redundancy Protocol group by a Virtual Private LAN Service (VPLS); establishing Layer 2 service and Layer 3 service connections between an active service control gateway and the Access device after active and standby service control gateways in the Virtual Router Redundancy Protocol group are determined according to a processing result of a Virtual Router Redundancy Protocol message, and performing Layer 2 service and Layer 3 service processing.

Abstract: A method for establishing a hierarchical network with Backbone Provider Bridges includes: dividing the network into a plurality of layers, and partitioning each layer into at least one domain; each domain assigning a service tag for itself; a local domain sending a mapping request including a user type ID to a further domain in the same layer; the further domain in the same layer returning a service tag corresponding to the user type ID to the local domain; the local domain establishing and saving a mapping relationship; and edge devices of each domain learning MAC addresses. Further, a system and device having the same are also provided in the disclosure.

Abstract: A method and system for obtaining path maximum transfer unit in network, include first, at the path start node sending the second layer message which carries the path MTU field for carrying path MTU value and at each node which the second layer message passed renewing the MTU value in the field according to the values preserved in each node; then, when the second layer message arrives at the path terminal node, regarding the MTU value being carried in the path MTU field in the second layer message as the path MTU value corresponding with the path. The present invention acquires the size of path MTU by use of Ethernet network OAM process, avoids the failure of transmitting the OAM message to object end caused by the reason that the size of transmitted OAM message exceeds the MTU of path when the route itself is normal. Therefore, the present invention can increase the reliability of OAM message transmission effectively, and assure the reliability of OAM function realization in Ethernet network.

Abstract: A trunk interface in Resilient Packet Ring (RPR) is provided and a method and an apparatus for implementing interface trunking in RPR with a plurality of stations, where at least one of the stations includes a plurality of RPR interfaces. A plurality of physical link ports in an RPR interface are combined into a logical link port, so as to implement logical combination of a plurality of first physical link. A trunk interface is formed with the combined logical link ports, and a logical address is assigned to the trunk interface. Furthermore, the communication traffic of the stations may be apportioned among the physical link ports, so as to provide link balance. The physical links are provided on different rings. When any fault occurs, a new ring may be formed so as to make the communication link unblocked. With the present invention, the interface bandwidth is increased, the address (MAC address/IP address) resources are saved and the interface (link) reliability is increased.

Abstract: The invention relates to a method for preventing TCP SYN package flood attack, and belongs to the computer network security field. First, the firewall receives a client a TCP SYN connection request package, and responses, as an agent of the server, an acknowledgement of the TCP SYN connection request package with zero window size to the client. Then, the firewall records information about the TCP SYN connection request package and checks whether the connection request is legal. When the firewall has received a TCP SYN response package from the server, it returns an acknowledgement of said TCP SYN response package. At the same time, the firewall, as an agent of the server, sends an acknowledgement packet with nonzero window size to the client for initiating data transmission from the client. After that, data packets are transferred between the client and the server forwarded by the firewall as an agent.

Abstract: The invention relates to a method for preventing TCP SYN package flood attack, and belongs to the computer network security field. First, the firewall receives a client a TCP SYN connection request package, and responses, as an agent of the server, an acknowledgement of the TCP SYN connection request package with zero window size to the client. Then, the firewall records information about the TCP SYN connection request package and checks whether the connection request is legal. When the firewall has received a TCP SYN response package from the server, it returns an acknowledgement of said TCP SYN response package. At the same time, the firewall, as an agent of the server, sends an acknowledgement packet with nonzero window size to the client for initiating data transmission from the client. After that, data packets are transferred between the client and the server forwarded by the firewall as an agent.