Huawei Technologies Co., Limited

Yun Qin

Ling Wu

De Sheng

Dharmanandana Reddy Pothula

Antony Paul

Chandra Mohan Padamati

A gateway device selection method is provided. The method includes: receiving, by a terminal device, a message from a gateway device, where the message includes identification information of the gateway device, and the identification information of the gateway device indicates information about the gateway device; determining, by the terminal device, that the identification information of the gateway device is consistent with preset identification information of a gateway device on the terminal device, and using the gateway device as a selected gateway device; and sending, by the terminal device, a data packet to the selected gateway device. This helps the terminal device correctly identify the gateway device to which the terminal device is to send data.

Gateway selection method, device, and system

The method includes: receiving, by a first member device, a second EAPOL-MKA packet sent by a second member device; determining, by the first member device, a first cipher suite, and determining a first secure association key SAK corresponding to the first cipher suite; and sending, by the first member device, the first cipher suite and the first SAK to the second member device in CA. Based on the foregoing technical solution, a device in the CA may determine a cipher suite and a secure association key corresponding to the cipher suite that are used for MACsec secure data transmission. In addition, all devices in the CA support the determined cipher suite. In this way, a problem that the cipher suite needs to be re-determined because one or more devices do not support the cipher suite determined by the first device can be avoided.

Data transmission security protection method and network device

Disclosed are a system, method and devices for simultaneous MACsec key agreement (MKA) negotiation between the devices. The present application controls a basic TLV message exchange between supplicant and authenticator in case of race condition to establish the secure association key (SAK) channel. The present application by controlling a basic TLV message exchange enables to establish a secure channel in race condition and achieves a high reliability of the product as this makes product launch MACsec services quickly and available for the service. Accordingly, when both sides (two supplicants) exchange hello with basic TLV at the same time, triggering the race condition, drops first message from the authenticator at supplicant and update the peer MN and the supplicant will not send reply. The authenticator when send next message (basic+potential peer TLV) with peer MN incremented by 1, the supplicant will respond with incremental message with live peer TLV.

System, method and devices for MKA negotiation between the devices

Embodiments of the present invention relate to a method and a device for establishing a router neighbor. The method includes: obtaining a first discovery protocol Hello message sent by a neighbor router, where the first Hello message carries identification information and priority information of the neighbor router; and determining whether to add the relevant information of the neighbor router into the neighbor list of a local end router, according to the priority information of the neighbor router, and/or priority information of the local end router, and/or whether the identification information of the neighbor router is identification information of an opposite end device of a virtual link configured for the local end router. The embodiments of the present invention ensure that a small device can establish neighbor relationships with a DR and a BDR on a network and that the small device's OSPF function is normal.

Growing community of inventors

Shanghai, China

Yun Qin