Internet Access Device with MAC-Address- Translation Ethernet Switching Functionalities And Multi Tenant Premises Communications Management Server Interoperating with The Aforementioned IAD And a Method for Enhancing Subscriber Identification And Network Security And Service Quality for Multi-Tenant Premises Subscribers Where Internet Connectivity Is Provided on The Complex LAN, utilizing the Aforementioned

摘要

PURPOSE: A system for embodying subscriber identification strengthening and network security strengthening in environment in which an Internet connection service is provided to plural subscribers who are mutually independent in a premise LAN(Local Area Network) by a subscriber gateway switch and a department communication management server is provided to strengthen the security of a network executed through an Internet connection providing system by discriminating the plural subscribers connected to the premise LAN. CONSTITUTION: A subscriber gateway Ethernet switch(LAN-gate)(16n) has a MAC(Media Access Control) address converting module(16-1) and a control communication module(16-3). The MAC address converting module(16-1) converts an original source MAC address of an Ethernet frame generated in a subscriber Ethernet station into one among MAC addresses operated by the MAC address converting module(16-1) according to the control of a department communication management server(10), and outputs the converted MAC address to the outside of home. The MAC address converting module(16-1) converts a destination MAC address inputted through the subscriber Ethernet station into an original MAC address of a subscriber Ethernet station of a home inside, and transmits the destination MAC address. The control communication module(16-3) communicates with the department communication management server(10), and decides an identification MAC address of the subscriber gateway Ethernet switch(LAN-gate)(16n). The control communication module(16-3) receives a connection relay MAC address pool, and reports a kind of the MAC address of the subscriber gateway Ethernet switch(LAN-gate)(16n) and the state of the MAC address to the department communication management server(10). The department communication management server(10) has a DHCP(Dynamic Host Configuration Protocol) subsystem(10-2) and a LAN-gate management subsystem(10-1). The DHCP subsystem(10-2) automatically invests IP addresses to the subscriber Ethernet stations, and manages the invested IP addresses. The LAN-gate management subsystem(10-1) assigns an MAC address used by the subscriber gateway Ethernet switch(LAN-gate)(16n), assigns an IP address according to the contents of use provision, judges a kind of the IP, and instructs the DHCP subsystem(10-2) according to the judged result. The LAN-gate management subsystem(10-1) receives the report with respect to the MAC addresses and the IP addresses from the subscriber gateway Ethernet switch(LAN-gate)(16n), compares the received data with data recorded in the department communication management server(10), and transmits the compared result.