Network access control method and device

A first device comprising:

• a memory, configured to store a program code, wherein
• the memory is connected to at least one processor, and when the program code is executed by the at least one processor, the first device is caused to:
• receive a first domain name request packet sent by a second device in an internal network, wherein the first domain name request packet carries a source internet protocol (IP) address and a first local domain name, and the first local domain name indicates a device other than the second device in the internal network, the first device being a forwarding device in the internal network;
• determine whether the first local domain name is authenticated;
• when the first local domain name is authenticated, generate a first entry in forwarding information, wherein the first entry comprises a first address pair comprising the source IP address and a first IP address corresponding to the first local domain name, and the forwarding information comprises one or more entries each of which includes a corresponding address pair;
• receive a data request packet sent by the second device, wherein the data request packet carries the source IP address and a destination IP address;
• and
• determine, based on the source IP address, the destination IP address, and the forwarding information, whether to forward the data request packet, wherein the data request packet requests to access the internal network.

A non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores instructions, and the instructions, when executed by at least one processor, cause a first device to perform:

• receiving a first domain name request packet sent by a second device in an internal network, wherein the first domain name request packet carries a source internet protocol (IP) address and a first local domain name, and the first local domain name indicates a device other than the second device in the internal network, the first device being a forwarding device in the internal network;
• determining whether the first local domain name is authenticated;
• when the first local domain name is authenticated, generating an entry in forwarding information, wherein the entry comprises an address pair comprising the source IP address and a first IP address corresponding to the first local domain name, and the forwarding information comprises one or more entries each of which includes a corresponding address pair;
• receiving a data request packet sent by the second device, wherein the data request packet carries the source IP address and a destination IP address;
• and
• determining, based on the source IP address, the destination IP address and the forwarding information, whether to forward the data request packet, wherein the data request packet requests to access the internal network.