W1051基于MPLS技术的VPN网络的实现2

I摘要VPN是一种依靠ISP和其他NSP在公用网络中建立专用数据网络的技术。在虚拟专用网中，任意的两个节点之间的连接并没有传统专用网络所需的端到端的物理链路，而是利用某种公众网的资源动态组成的，是通过特殊设计的硬件和软件直接通过共享的IP网所建立的隧道来完成的。它利用了公共网络做为企业骨干网有低成本的优势，通过相应的加密和认证技术来保证用户内部网络数据在公网上安全传输，克服了公共网络缺乏保密性的弱点，真正实现网络数据的专有性和安全性。MPLS技术属于第三代网络架构技术，它把第2层交换技术跟第3层路由技术结合在一起，以便建立一个具有更好性能、更高稳定性、灵活的和易于扩展的高速主干网络。MPLS适合于动态隧道技术，而隧道技术是目前支持VPN业务的有效手段；同时，MPLS技术通过标记可以实现快速数据转发和网络质量（QoS）控制，也为VPN网络带来与众不同的好处。本文研究的基于MPLS技术的VPN网络正是利用了MPLS的动态隧道技术和网络质量控制技术来实现VPN网络，它结合了MPLS技术和VPN网络两方面的优点，克服了传统技术构建VPN网络的缺点，极大的提高了用户网络运营和管理的灵活性，同时又能满足用户对网络传输的安全性、实时性、宽频带等高性能的需求。关键词：MPLS技术，VPN网络，MPLS技术的VPN网络IIABSTRACTVPN,supportedbyISPandotherNSP,isonetechnologywhichestablishestheprivatedatanetworkinthepublicnetwork.ActuallyintheVirtualPrivateNetwork,itdoesnothavetheend-to-endphysicallinkbetweenthetworandomnodesthatthetraditionalprivatenetworkneed.Usually,itconsistsofsomedynamicresourcesfromthepublicnetworkslikeatunnelwhichisestablishedthroughthesharingIPnetworkandthespeciallydesignedhardwareaswellasthesoftware.Consideringthelowercost,ittakesthepublicnetworkasbackbonenetworkinenterprises.Throughthecorrespondingencryptionandauthenticationtechniquesitmakessurethatinternalnetworkuserscantransmitthedataonlinesafely.Atthesametime,VPNhasremovedtheweakpointaboutthesecurityinthepublicnetworkwhichalsoguaranteethedata’sproprietaryandsafety.TheMPLStechnologybelongstothirdgenerationnetworkconstructiontechnology.Itcombinesthe2ndexchangetechnologywiththe3rdroutetechnologysoastobuildupahigh-speednetworkthathasabetterperformance,higherstability,moreflexibilityandeasierexpansibility.MPLSshouldbeusedinthedynamictunnelwhichisaeffectivewaytocarryouttheVPNserviceatpresent.Atthesametime,theMPLStechnologymayrealizethefastdatarepeaterandthequalityofservice(QoS)controls,italsobringstheoutoftheordinaryadvantagefortheVPNnetwork.WhatthearticlemainlydiscussedisrightabouttheusingofMPLSdynamictunneltechnologyandtheserviceofqualitytorealizetheVPNnetworkbasedonMPLS.ItcombinestheadvantagesofbothMPLStechnologyandtheVPNnetwork,thenovercomestheshortcomingofthetraditionalVPNnetworktechnology.Anditenormouslyenhancestheflexibilityoftheusers’networkonmanagingandoperatingwhichsimultaneouslymeetstheusers’demandonthehighperformanceofthenetworkdatatransmissionsuchassecurity,real-time,thewidebandorsomething.Keywords:MPLS,VPNnetwork,MPLSVPNnetworktechnologyIII目录第1章绪论................................................................................错误!未定义书签。1.1课题概要..........................................................................................错误!未定义书签。1.2课题研究的意义..............................................................................错误!未定义书签。第2章VPN基础.........................................................................错误!未定义书签。2.1VPN技术..........................................................................................错误!未定义书签。2.1.1什么是VPN..............................................................................错误!未定义书签。2.1.2VPN的工作原理.......................................................................错误!未定义书签。2.2VPN的应用方案..............................................................................错误!未定义书签。2.3实现VPN的隧道技术................................................................错误!未定义书签。2.4VPN的安全..................................................................................错误!未定义书签。第3章VPN的发展和未来趋势.................................................错误!未定义书签。3.1安全协议构筑VPN的首要特性....................................................错误!未定义书签。3.2VPN的设计原则..............................................................................错误!未定义书签。3.3VPN技术的现状..............................................................................错误!未定义书签。3.3.1VPN技术的应用现状...............................................................错误!未定义书签。3.3.2市场的应用现状.......................................................................错误!未定义书签。3.4VPN存在的问题..............................................................................错误!未定义书签。3.4.1VPN的管理有待加强...............................................................错误!未定义书签。3.4.2第二层协议的问题...................................................................错误!未定义书签。3.4.3IPsec与动态地址分配问题......................................................错误!未定义书签。3.5VPN的趋势和未来展望..................................................................错误!未定义书签。3.5.1发展趋势...................................................................................错误!未定义书签。3.5.2VPN技术的应用前景...............................................................错误!未定义书签。3.5.3VPN服务方式的趋势...............................................................错误!未定义书签。3.6VPN的发展方向..............................................................................错误!未定义书签。第4章MPLS交换技术...............................................................错误!未定义书签。4.1MPLS交换技术的概述...................................................................错误!未定义书签。4.1.1与MPLS相关的几个概念及定义..........................................错误!未定义书签。IV4.1.2MPLS技术的实现....................................................................错误!未定义书签。4.2MPLS的优势........................................