可提供MPLS VPN网络安全性保障的解决方案  

Aproach of Providing Security Protection for MPLS VPN

作　　者：范亚芹[1] 张丽翠[1] 宋维刚[1] 

机构地区：[1]吉林大学通信工程学院,长春130012

出　　处：《吉林大学学报（信息科学版）》2005年第3期241-244,共4页Journal of Jilin University（Information Science Edition）

基　　金：吉林大学新世纪教学改革工程基金资助项目(200145)

摘　　要：基于对多协议标记交换骨干网络的虚拟专用网———MPLSVPN(Multi ProtocolLabelSwitchingVirtualPri vateNetwork)技术的研究,针对MPLS(Multi ProtocolLabelSwitching)不能给客户提供足够大安全系数的问题,在分析MPLSVPN(Multi ProtocolLabelSwitchingVirtualPrivateNetwork)网络的构成和原理的基础上,就安全性保障问题进行研究和讨论,提出了一个对MPLSVPN可提供安全性保障的解决方案,此方案通过结合BGP(BorderGatewayProtocol)、IP(InternetProtocol)地址解析、IPSec(InternetProtocolSecurity)加密和认证技术来完成。结果表明,与原有网络相比,该方案的安全系数可提高30%。On researching of MPLS VPN(Multi-Protocol Label Switching Virtual Private Network), in view of the problem that MPLS can not offer enough safe coefficient,we introduced the structure and principle of MPLS VPN, carried out a discussion for the safe guarantee. We have put forward a solution for MPLS VPN, which has combined the technology of BGP(Border Gateway Protocol),IP(Internet Protocol) Address Analysis, and IPSec(Internet Protocol Security) Encryption and certification. As a result , the safe coefficient which is provided to customer has been increased by 30% though this scheme, compared to the original network.

关 键 词：多协议标记交换 虚拟专用网 认证 

分 类 号：TN915[电子电信—通信与信息系统]