Patent ID: 8189580
Filing Date: 2012-05-29
Classification: H04L

Abstract:
1. A method of blocking a host in an IPv6 network, the method comprising the steps of: when a policy for blocking the host from accessing the network is set, capturing a Neighbor Discovery Protocol (NDP) packet within the network; determining whether the captured NDP packet is included in the block policy according to the captured NDP packet type, where a packet type includes one of NS (neighbor solicitation), NA (neighbor advertisement), RS (router solicitation), and RA (router advertisement); if the captured NDP packet is an NS packet, determining whether the host is the blocked host based on source information of the NS packet; if the source information is determined to correspond to the blocked host, determining whether the captured NDP packet is a Duplicate Address Detection (DAD) check packet; if the captured NDP packet is included in the block policy according to the source information and the captured NDP packet is a DAD check packet, blocking the host by generating a modified NA packet for an IP of the host and sending the modified NA packet in a unicast IP form, wherein the host is unauthorized from accessing the network; otherwise, if the source information is determined not to correspond to the blocked host, determining whether the host is the blocked host based on destination information; and if the captured NDP packet is included in the block policy according to the destination information and the captured NDP packet is not a DAD check packet, blocking the host by generating a modified NA packet for an IP of the host and sending the modified NA packet in a multicast IP form, wherein the host is unauthorized from accessing the network.