Network control apparatus and method with port security controls

摘要

Port security in some embodiments is a technique to apply to a particular port of a logical switching element such that the network data entering and existing the logical switching element through the particular logical port have certain addresses that the switching element has restricted the logical port to use. For instance, a logical switching element may restrict a particular logical port to one or more certain network addresses To enable a logical port of a logical switch for port security, the control application of some embodiments receives user inputs that designate a particular logical port and a logical switch to which the particular logical port belongs. The control application in some embodiments formats the user inputs into logical control plane data specifying the designation. The control application in some embodiments then converts the logical control plane data into logical forwarding data that specify port security functions.

主权项

1. A method for controlling a logical switching element comprising one or more logical ports, the logical switching element implemented by a set of managed switching elements that forward data packets in a network, the method comprising:
determining a set of network addresses for a logical port of the logical switching element; identifying a physical port of a particular managed switching element of the set of managed switching elements that corresponds to the logical port, wherein different logical ports of the logical switching element correspond to physical ports of different managed switching elements; and configuring the particular managed switching element to drop data packets entering or exiting the physical port of the particular managed switching element when the data packets do not include a network address in the set of network addresses for the logical port.