山东电信IP VPN网管系统设计与实现

发布时间：2018-09-07 21:20

【摘要】：随着互联网技术的不断发展和进步,市场用户的逐渐成熟和稳定,如何更好地利用网络资源,为用户提供经济合理的网络解决方案,以提高网络效率,网络运行数据成为迫切需要解决的问题。VPN技术构建企业网络提供了强有力的支持,并作为一个高效的技术平台的,IPMPLS骨干网实现IP VPN提供了一个灵活,可扩展的技术。MPLS技术,近年来已逐渐成熟,一方面,VPN服务可以节省用户的车道占用成本,轻松访问,维修方便;手MPLS技术提供了一个面向连接的IP在其网络上的技术,提供了多种服务适当的保护措施,因此MPLS VPN得到了广泛的客户认可,并成为运营商开展IP VPN服务的主要途径。在本文中,通过学习基本技术和MPLS VPN网络的应用程序的分析。总结自然网络的MPLS VPN安全机制,包括实现BGP路由地址隔离和检疫,隐藏的核心网络基础设施,并抵御攻击。根据总结的网络安全需求,成立了由当今现有的MPLS VPN网络的技术和经验,在实际配置,完善了一系列的MPLS VPN实现安全性,包括VRF路由控制,邻居认证,网络访问列表中使用等等。并在此设计的基础上,完成MPLS VPN网络安全和应用程序特定的设计。一方面,可有助于MPLSVPN网络安全的进一步加强,使得MPLS VPN具有与ATM或Frame Relay的VPN同等或更好的安全保障;另一方面,也有助于弥补人们对MPLS VPN安全性认识的不足,并为MPLS VPN网络实施人员实现网络安全提供有效的指导。
[Abstract]:With the continuous development and progress of Internet technology and the gradual maturity and stability of market users, how to make better use of network resources to provide users with economical and reasonable network solutions to improve network efficiency, Network running data has become an urgent problem to be solved. VPN technology provides strong support for the construction of enterprise network, and as an efficient technology platform, implementing IP VPN provides a flexible and extensible technology. In recent years, VPNs have become more and more mature. On the one hand, they can save users' lane cost, easily access and maintain easily, and hand MPLS technology provides a connection-oriented IP technology on its network. It provides a variety of appropriate protection measures, so MPLS VPN has been widely recognized by customers and become the main way for operators to carry out IP VPN services. In this paper, by learning the basic technology and MPLS VPN network application program analysis. This paper summarizes the MPLS VPN security mechanism of the natural network, including implementing BGP routing address isolation and quarantine, hiding the core network infrastructure, and resisting attacks. According to the requirements of network security, the technology and experience of the existing MPLS VPN network are established. In the actual configuration, a series of MPLS VPN security are perfected, including VRF routing control, neighbor authentication, and so on. Use in network access lists and so on. On the basis of this design, MPLS VPN network security and application-specific design are completed. On the one hand, it can help to further strengthen the security of MPLSVPN network, so that MPLS VPN has the same or better security guarantee as ATM or Frame Relay's VPN; on the other hand, it can also help to make up for the deficiency of people's understanding of MPLS VPN security. And provide effective guidance for MPLS VPN network implementers to realize network security.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.07

【共引文献】