基于MPLS技术的二层虚拟专用网络系统的设计与实现

发布时间：2018-03-26 21:28

本文选题：多协议标签交换　切入点：虚拟专用网络　出处：《山东大学》2014年硕士论文

【摘要】：随着企业分支机构的增多,企业的物理分布范围也越来越大,尤其是在信息化程度如此高的互联网时代,企业内部分支机构之间通信的安全性和有效性越来越引起企业的关注。在以前的企业网络设计中,要实现远程客户之间的专用链路,只能租用物理专线,这对企业来说无疑是一笔不小的成本支出,同时也增加了服务提供商网络布线的复杂度。如何在有限的物理资源上满足每个企业的需求昵?基于MPLS的VPN就是这样一种虚拟网络技术。MPLS技术通过在运营商网络中某两台远端设备之间的每一跳路由上分配标签,进而在两台设备之间建立虚拟的链路。网络服务提供商会为每一个定制虚拟网络服务的企业打上一个唯一的标记。对于每一个企业来说,这条虚拟链路是独占的,而对于运营商来说却又是供很多企业共享的。国内的虚拟专用网络大多基于三层即网络层进行开发,这种方式能够解决企业的需求,但是却固定了网络的传输方式,因为三层的虚拟网络使企业内部的数据流量需要进行三层的数据交换,并且服务提供商网络的边缘设备需要保存大量的私网路由信息。基于MPLS技术的二层虚拟网络能更好的解决这个问题。它实现对数据包的标签操作在网络的第二层,不需要再进入IP层,这样数据包对上层是透明的,网络层就可以采用不同的网络协议而不影响数据的传输。这保证了企业内部信息传输的安全可靠,大大降低了企业的成本,同时也减轻了运营商网络边缘设备的负担。本项目是在XX公司Comware平台上进行开发的。Comware平台能够给用户提供全面的网络功能,满足了用户对网络操作系统的需求,是目前国内网络通信领域少数支持全系列网络设备的网络操作系统。在此基础上进行该项目开发可以很方便的使用已有的其它的通信协议或者在已有的通信协议上进行协议功能扩展,从而有效的完成该项目。本项目实现LDP方式的MPLS L2VPN。L2VPN将作为Comware平台上的一个独立进程,实现L2VPN特性的控制平面,通过在LDP进程中运行VC线程进行信令通告。项目最终的成果是在运营商网络上建立L2VPN虚拟实例,生成L2VPN转发控制逻辑,用以控制二层数据包的转发。
[Abstract]:With the increasing of enterprise branches, physical distribution scope of enterprises is also growing, especially in such a high degree of information of the Internet era, between the branches of internal communication safety and effectiveness has attracted more and more attention from enterprises. In the previous enterprise network design, to achieve the specific link between the remote client. Can only rent the physical line, this is not a small cost to the enterprise, but also increase the complexity of the service provider network cabling.
How to meet the needs of each enterprise or in physics on the limited resources? MPLS VPN is a virtual network based on.MPLS technology through each hop routing between two sets of remote equipment in network operators on the distribution label, and then establish the virtual link between two devices. Mark network services the chamber of Commerce for every custom virtual network service enterprises play a unique. For each enterprise, the virtual link is exclusive, but for operators but also for many enterprises sharing. Network virtual private network in China are mostly based on the development of three layer network layer, the the way to address the needs of enterprises, but the fixed transmission network, because the virtual network layer three makes data flow within the enterprise needs three level data exchange, and network service providers The edge device needs to preserve a large number of private network routing information.
The two layer virtual network MPLS technology can better solve this problem. It is based on the realization of the packet label operation in the second layer of the network, no need to enter the IP layer, so that the data packet is transparent to upper layer, the network layer can adopt different network protocols without affecting data transmission. This ensures that the internal information transmission safety and reliability, greatly reduces the cost of enterprises, but also reduce the burden on the operator's network edge device.
This project is carried out in the XX Comware platform developed on the.Comware platform to provide comprehensive network functions to the user, to meet the needs of users of the network operating system, network operating system is currently a network communications support a full range of network equipment. On the basis of the development of the project to other communication protocols is very convenient the use of the existing communication protocol or in the protocol extensions, so as to effectively complete the project. The project implementation LDP the MPLS L2VPN.L2VPN Comware will serve as a platform on a separate process, the realization of control plane characteristic of L2VPN, by running the VC threads in the LDP process for project final notice. The result is to establish L2VPN virtual instances in the operator's network, generating L2VPN forwarding control logic is used to control the two layer packet forwarding.

【学位授予单位】：山东大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.1

【参考文献】