【摘要】 网络管理系统是IPSec(IPsecurity,IP安全)VPN(virtualprivatenetwork,虚拟专用网络)作为一种电信运营业务的关键组成部分。VPN节点设备部署在运营商网络的边缘,这种网络模式使得对节点的管理不同于对传统网络的管理,其中,VPN业务网络拓扑的自动发现和对私有网络中的设备进行管理是两个关键的问题。本文通过在网络管理系统中指定根节点,然后利用根节点中的SA(securityassociation,安全联盟)信息来获得其他VPN节点的地址信息,从而实现VPN拓扑的自动发现;针对私有网络中的设备地址不可达的问题,本文提出了主动注册的技术,并利用主动注册同网络管理代理转发技术相结合的方法实现了对私有网络中设备的管理。更多还原

【Abstract】 Management of IPSec VPN is a key element of the carrier’s service. However VPN device is located at edge of carrier’s network, which make traditional network management impossible. There are two key problems, one is network finding automatically and the other is to manage devices, which located at private network. In this paper we proposed that the network management server use the SA information of VPN device to establish the VPN topology and to find the whole VPN from a base VPN device that has a public IP address. To manage the VPN device located in private network we need it to enroll itself to agent which will forward the SNMP messages come from network management server to VPN devices located in private network.更多还原