【作者】 朱斌；

【导师】 徐林；

【作者基本信息】 四川大学 ， 计算机应用技术， 2005， 硕士

【摘要】 随着网络规模不断扩大,构建具有更高扩展性、更易于维护管理的VPN成为VPN 网络发展的必然趋势。传统VPN 网络在扩展性、维护管理性等方面已经不能满足ISP(Internet 服务提供商)和企业对VPN 网络的需求。MPLS(多协议标签交换)是一种将数据链路层交换技术与网络层路由技术结合起来的集成数据传输技术。利用MPLS 在VPN 方面的特点,采用MPLS来构建VPN 网络可以很好地解决上述问题。本文设计并实现了这么一种基于MPLS 的VPN 网络。首先,本文分析并指出了传统的采用隧道技术实现的VPN 网络在扩展性、可维护管理性以及拓扑灵活性等方面的不足之处,提出了采用MPLS 来构建VPN 网络,并详细论述了采用MPLS 来实现VPN 的工作过程以及MPLS/VPN 网络的特点和优势。其次,本文设计了成都电信数据支撑中心VPN 网络改造方案,根据该方案构建了MPLS 的VPN 网络,对构建MPLS/VPN 网络的几个主要方面:IGP协议、BGP 协议、路由反射以及VPN 网络结构等方面进行了详细的规划与设计,并将该设计思想在路由设备上进行了具体实现。最后,本文根据该设计模型,对实验网络进行了规划和设计并在具体的路由设备上配置实现,从安全性、扩展性等方面对该VPN 试验网络进行了测试,通过获得的实验数据论证并详细分析了基于MPLS 的VPN 网络除了可以提供传统VPN 网络的安全保障外,在扩展性、拓扑灵活性、以及可维护管理性等方面优于传统的VPN 实现技术,为ISP 和企业构建VPN 提供了很好参考模型和解决方案。更多还原

【Abstract】 Due to enormous network expansion, it becomes an inevitable tendency to construct highly extensional and highly manageable VPN networks. But the traditional VPN network can not meet the demands of ISP and Enterprises in expansion and management. MPLS ( Multi-Protocol Label Switching )combines the transmission technology of L2/L3( Data-link-layer and IP-layer).Using the characters of MPLS to construct VPN, It can solve totally these problems. This paper designs and implements a model of MPLS/VPN. Firstly, this paper analyzes and points out the disadvantages of VPN that use traditional tunnel technology. Putting forward the model of MPLS/VPN and demonstrating the realization procession of MPLS/VPN and its characters and advantages in detail. Secondly, this paper designs VPN reconstruction project of transaction supporting network of CHENGDU telecom, constructing the model of MPLS/VPN. Demonstrating the design and implementation of VPN network in main facets, as follow, IGP protocol 、BGP protocol and router-reflect in detail. In addition,applying these ideas in routers. Finally, According to this VPN model, this paper designs and constructs the experimental network and realizes in routers. Testing this VPN in security 、extension and management. By way of the acquired experimental data , It is demonstrated that MPLS/VPN has high security In addition, operation、flexibility and expansion of MPLS/VPN . It is the better than traditional technology of VPN. The model of MPLS/VPN provides a good reference model and project for ISP and Enterprises.更多还原