基于MPLS的VPN互访技术  

VPN exchange visit based on MPLS

作　　者：童样 张水平[1] 李有峰 张凤琴[1] 梁栋[1] 

机构地区：[1]空军工程大学信息与导航学院,陕西西安710077

出　　处：《计算机工程与设计》2014年第9期3018-3023,共6页Computer Engineering and Design

摘　　要：针对VPN互访问题,根据IPSec-VPN互访方法的不足,提出动态MPLS-VPN方法。利用随机分配的标签,在需要互访的不同VPN网络节点之间构建MPLS通道,利用互访规则集检验节点的连接申请,根据过滤规则控制数据包的传输,通过设定传输时长限制节点互访的时间,实现VPN之间按节点、按方向、按时间的细粒度互访控制,确保数据传输的安全性和高效性。给出动态MPLS-VPN方法实现互访的步骤,对方法进行分析比较。To meet the demand of the exchange visit between the VPNs, the dynamic MPLS-VPN model was put forward based on the shortages of the IPSec-VPN method. The MPLS gallery was built by using randomly distributed label, the node＇ s connec- tion application was inspected by the comparison with exchange visit rule sets, the transmission of node ＇s data packets was controlled according to filter rules, and the exchange visit time of nodes was limited by setting the transmission time. The finegrained exchange visit controlling is achieved according to the nodes, the packet flows, and the transmission time, and the safety and the high-efficiency of the data transmission are ensured. Detail steps of the dynamic MPLS-VPN method achieving exchange visit goals were given, and the method was compared with the IPSec-VPN exchange visit method.

关 键 词：VPN互访 动态MPLS-VPN互访规则集 细粒度控制 标签分发 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]