基于MPLS VPN技术的组网的设计与实现

发布时间：2018-05-30 15:36

本文选题：MPLS + VPN　；参考：《吉林大学》2014年硕士论文

【摘要】：网络技术自90年代中期到现在，迅速发展，解决了各种经济、生活中信息化不断面临的问题和挑战。随着经济的稳定高速发展，企业的业务也在逐渐扩张，部分企业相继在全国范围内设立办事处分公司等分支机构。因此，在支持现有的、先进的全国集中式IT网络架构的基础上，如何更好的支持跨地区、跨部门业务的互联互通，满足全国范围内县域网点实现广域互连、扁平化管理、迅速提升信息化水平的需求，支持企业在全国范围内快速部署网点服务机构、迅速拓展业务，建设一个上下贯通、横纵互联、功能完善、高速稳定、安全可靠、统一规范的网络架构显得尤为重要。对于组网技术来说，VPN组网，即虚拟专用网络被广泛的使用。这种虚拟的专用网络技术由于不建立物理上链接，主要通过技术手段虚拟一条通路实现网络数据的传输和通信。使用VPN组网规划的网络具有良好的保密性以及信息传输不受干扰等优点，越来越受到人们的研究和应用。由于在局域网中建立VPN链接时不会影响网络内的其它计算机链接到公共网络，但只能够有一台计算机建立链接，因此VPN组网的方式适合于计算机比较多的企业用户。直联组网也就是通过直接连接的方式构建网络。比如各省内的三、四级机构不再链接到省内的一级机构或者二级机构，而是直接链接到网络中心处。对于在全国范围内迅速建立并部署网点，采用直联组网的方式能够既支持原有IT网络架构，还能减少对现有网络的调整和改造。 MPLS VPN是一种旨在解决现存网络中存在的诸多与数据包转发有关的问题的技术，通过MPLS VPN组网的网络具有较好的QoS性能，满足丢包率、时延的要求，拥有良好的冗余机制，，同时具有低投入、低使用、低维护的良好的经济性能。因此对于在全国范围内拓宽业务建立分支机构来说有较高的实用性和经济效益。MPLS VPN技术作为一个重要的应用研究方向，广泛应用到实际网络建设中。本文通过深入研究MPLS VPN技术、BGP路由选择协议以及QoS技术，以中国平安机构为背景，针对该机构的网络现状以及组网需求，设计了实现中国平安机构直联组网的方案，完成了系统的部署、参数的配置等组网实现工作。通过本课题的研究使得中国平安机构的组网结构得到极大优化，组织结构更加良好，为迅速拓展的业务导致的网络升级提供了强有力的技术保障,实现了各异地分支机构对总部以及各分支机构的的各种应用系统及资源的安全访问。设计的方案满足中国平安机构的实际，达到了预先设定的建设目标。
[Abstract]:Network technology has developed rapidly from the middle of 1990s to now, which has solved the problems and challenges faced by various kinds of economy and life informatization. With the steady and rapid development of economy, the business of enterprises is expanding gradually, and some enterprises have set up offices, branches and other branches all over the country. Therefore, on the basis of supporting the existing, advanced national centralized IT network architecture, how to better support the interconnection of cross-regional and inter-departmental services, to meet the needs of nationwide county network to achieve wide-area interconnection and flattening management, To rapidly improve the level of information demand, support enterprises in the rapid deployment of network services across the country, rapidly expand business, build a top and bottom, horizontal and vertical interconnection, perfect function, high speed and stability, safety and reliability, Uniform and standardized network architecture is particularly important. For networking technology, VPN networking, that is, virtual private network is widely used. This kind of virtual private network technology realizes the transmission and communication of network data mainly by means of virtual path because it does not establish physical link. VPN network planning has the advantages of good confidentiality and non-interference of information transmission, so it has been studied and applied more and more. Since the establishment of VPN links in local area networks will not affect other computers in the network to link to the public network, but only one computer can establish links, so the way of VPN networking is suitable for enterprise users with more computers. The direct connection network is also through the direct connection way constructs the network. For example, the third and fourth level organizations in the provinces no longer link to the first or second level institutions in the province, but directly link to the network center. For the rapid establishment and deployment of network in the whole country, the direct network can not only support the original IT network architecture, but also reduce the adjustment and transformation of the existing network. MPLS VPN is a technology aimed at solving many problems related to packet forwarding in existing networks. The network with MPLS VPN has better QoS performance, meets the requirements of packet loss rate and delay, and has a good redundancy mechanism. At the same time with low input, low use, low maintenance of good economic performance. Therefore, as an important research direction, MPLS VPN technology is widely used in practical network construction. In this paper, the MPLS VPN routing protocol and QoS technology are studied in depth. Based on the background of China Ping an Organization, according to the current network situation and the network requirements of the organization, a scheme to realize the direct networking of China Ping an Organization is designed. Completed the system deployment, parameter configuration and other network implementation work. Through the research of this topic, the network structure of China Ping an Organization is greatly optimized, and the organization structure is better, which provides a strong technical guarantee for the network upgrade caused by the rapidly expanding business. The secure access to various application systems and resources of different branches is realized. The designed scheme meets the reality of China's safety organization and achieves the predefined construction target.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.1

【参考文献】