Patent ID: 11876704
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A network device, comprising:
a processor; and
a non-transitory computer readable memory storing a program for execution by the processor, the program including instructions to:
obtain a configuration policy from a management device, wherein the configuration policy is associated with controlling access between a plurality of branch devices, and wherein each of the plurality of branch devices is connected to the network device; and
configure a destination for all traffic being sent between the plurality of branch devices based on the configuration policy, wherein:
configuring the destination of the traffic causes the traffic being sent between the plurality of branch devices to be transmitted to the destination and prevents access between each branch device of the plurality of branch devices and each other branch device, and
the destination is a filtering device on the network device;

receive access traffic from a target branch device, wherein the target branch device is one of the plurality of branch devices;
redirect all of the access traffic of the target branch device to the filtering device;
obtain, by the network device, filtered traffic from the filtering device, wherein the filtered traffic is traffic obtained after the filtering device filters the access traffic of the target branch device; and
send, by the network device, the filtered traffic to a local area network (LAN) device.