Router and method of activating a deactivated computer

The invention relates to a router with a means for Sending a "wake on LAN" -Paketes in a connected local area network. The invention relates to a process for the Activation of a deactivated machine in a local Network by a device, wherein the deactivated computer on the establishment in the local network to connect comprising a second network.

In modern computer systems, there is the possibility the Computer system by a "Wake-On-LAN" feature of a deactivated state to convert into an active state. This includes the requirement that the computer has a "Wake on LAN" suitable network card. One with such a Function equipped computer can be part of a local its network, in which various, networked with each other Computers are. If the function on the network card active, so the computer can be shut down, remains connected to the electricity grid. It is therefore only disabled and not completely turned off. The NIC is still active and receiving traffic on the network between the connected computers. receives the network card is a "Wake-On-LAN" command for this Computer, so it activates the motherboard of the computer and start the computer. This is especially advantageous if functions are only needed temporarily on a computer and the corresponding computer during the remaining time, can be switched off.

The "Wake-On-LAN" command is from another active Computer within the local network, either as a so-called "Broadcast packet", ie as a general broadcast All computers, or as a direct packet to the disabled Computer sent. Are the computers in the local network via a router connected to the Internet, so it is conceivable a deactivated within the local network computer from a computer within the Internet and the router want to activate. This is necessary if, for example, a system administrator remote maintenance to the wants to perform services which the machines on the LAN provides.

So far there are two ways to a disabled Computers within a local network from outside through To enable the router. A first possibility consists in a secure connection to a second active computer establish within the local network and from this out a "Wake-On-LAN" command to the deactivated computer to send. However, it has at least one computer within the its local network active. In addition, this method provides a eventual security risk because of the Internet in the is local network connection established intercepted.

Alternatively, there is the possibility, to the router, the Interface between the local network and the Internet, a send command to "Broadcast Forwarding". The router thereby receives the packet and sends a general message in the local network. This release includes the MAC address of the network card of the command to the computer. This address is unique for each network card. The NIC compares the received MAC address with its own and the computer in accordance enabled. at however, this possibility should the MAC address known be. Also, the router must function of forwarding (Forwarding) a "broadcast packet" is enabled. The However, activation of such a function is a security risk represent.

It is therefore an object of the invention, aufzuzeugen a solution with an activated in the local network is disabled, computer is.

This object is achieved by a router, wherein the "Wake On LAN" packet has been already stored in the router, or the Router, a device for generating a "Wake-On-LAN" -Paketes having. Thus, the router performs the generation the "Wake-On-LAN"-package and sends it to the local network. The security risk of interception is not therefore more.

The problem is with respect to the process by receiving an instrument intended for the disabled computer package through the second network of the device and sending a stored or generated in the device package of the means for activating the deactivated computer gelößt in the local network.

It is from the router and the device has a "Wake On LAN" packet sent to the local network. The NIC the deactivated computer receives for the computer specific Package and activate the computer.

Embodiments of the invention emerge from the subclaims. Thus, it is advantageous if the device for generating and to send the package part of an operating system the router is.

The inventive method may advantageously by a Forwarding the received packet from the device be formed by activation of the computer. A Another advantageous embodiment of the method is the Training the device as a router. Alternatively, the Device as a "firewall" to protect against attacks formed or unauthorized intruders in the local network be.

It is particularly advantageous if a "Wake On LAN" packet is always sent if the received packet a Service requests and the service-providing computer is disabled. Thus, at the request of the disabled started computer and provided the requested service.

In the following, the invention is intended by way of example explained with reference to the drawings in detail will. Show it:<dl tsize="7"><dt>figure 1</dt><dd>An embodiment of the invention,</dd><dt>figure 2</dt><dd>a process instance.</dd></dl>

Figure 1 shows a local area network NW with three contained therein Computers C1, C2 and C3 as well as a router R. In Furthermore, the R router via a physical line a computer connected IC. This computer and the line is part of the Internet, not shown here, which is a computer, has a temporary or fixed IP address. In the following, it is referred to as an external computer.

The three computers C1, C2 and C3 of the local network have NW not shown here NICs on which a unique own MAC address and "Wake-On-LAN" functionality exhibit. On the three computers in each case a so-called Service started. This is expressed by its respective Protocol. On the computer C1 FTP protocol runs (File Transfer Protocol), the computer C2 is for the HTTP protocol (Hyper Text Transfer Protocol) is responsible, and Calculator C3 contains the SMTP protocol (Simple Mail Transfer Protocol). The three computers can between themselves and the with external computers exchange data router.

The external computer IC is now calling one of these three services at. For this purpose, it sends a TCP / IP packet to the router R to the Request to the appropriate service. analyzed the router R this requirement, takes from a table shown the MAC or IP address of the computer that requested the including service and translates the request into the Addressing the local network. The request is then from the router to the address of the hosts within the local Network passed. The processed target computer the request and sends back a response from the router recompiled and sent back to the external computer becomes.

Below now is the computer, which the requested service has to be disabled. One possible method example, where the router the deactivated computer after a request a service reactivated figure shows 2. After a checked external request to the router in step 1 this in Step 2, if the computer that requested the Service provides, is active or not. This is usually done by a table in the router the MAC or IP addresses the active computer has stored in the local network. In this table also indicates which request for service which computer is to be forwarded.

If the computer whose service is claimed is active, translates the request, provided with a local destination and routed to the appropriate computer on to step 4. Is not active the computer, then in step 3 "Wake On LAN" packet generated by the router. This package contains a synchronization stream of 6 bytes of hexdezimalen FF sequence, followed by 16 repetitions of the MAC address the target computer. This package is called "Broadcast" package sent to the local network. After a certain Waiting time 5, to give the activated computer time, the to start service, is a new request, whether the computer is actively carried out. If the computer is now active and the started service, the request to the target computer forwarded. Otherwise, the process is repeated.

Thus no longer need an external computer, a "Wake On LAN" packet be created and sent to the router, but the router takes over the generation and dispatch the packet to the correct computer. This has the advantage, that the external computer to build the local network does not have to know. This eliminates special knowledge of MAC addresses of the local computer as well as knowledge of Broadcast forwarding. The potential vulnerability closed as a external computer as normal via the IP address the router is requesting a service and the router determines the local destination address using the requested service. The router also handles the activation of the computer.

In addition to a signal generated by the router broadcast package that contains the MAC address of the computer to be activated, can at a fixed IP address within the local network NW these are given directly. Thus, in dynamic Award as well as a fixed allocation of IP addresses within the network a "Wake-On-LAN" feature through the Routers are executed. The corresponding "Wake On LAN" packet will always be sent when the service-providing is computer disabled. In addition to a router, it is possible to carry out the process with a firewall. This can additionally be single external IP addresses designate, the permission for the "Wake-On-LAN" feature have and so further increase security.