201005016105沈琼瑛-毕业设计

毕业设计(论文)材料专业班级通信工程101班姓名沈琼瑛指导教师刘耀林（讲师）所在学院信息科技学院2014年4月总目录一、毕业设计(论文)二、指导老师评语表三、评阅人评阅表四、答辩记录表五、答辩委员会评语表毕业设计(论文)题目基于MPLS技术的VPN案例设计专业通信工程班级101班姓名沈琼瑛指导教师刘耀林(讲师)所在学院信息科技学院完成时间：2014年4月承诺书我谨此郑重承诺：本毕业设计（论文）是本人在指导老师指导下独立撰写完成的。凡涉及他人观点和材料，均依据著作规范作了注释。如有抄袭或其它违反知识产权的情况，本人愿接受学校处分。承诺人（签名）：年月日基于MPLS技术的VPN案例设计信息科技学院通信工程专业沈琼瑛摘要：随着Internet网络的飞速发展，越来越多的企业利用Internet开展各种商务活动，对于基于IP网络的业务质量的要求也越来越高。大部分的企业在不同的地区都有自己的分公司，为了和分公司实时交互数据信息，企业得向ISP租赁网络提供服务，但公网数据信息极度不安全。MPLSVPN技术利用公用网络来连接到企业私有网络，能够节约企业租用专线的成本，接入方便，维护简单；另一方面，它用安全机制来保障数据机密性，安全真实性和完整性的严格访问控制，因此MPLSVPN已得到了客户的广泛认知，并成为运营商开展IPVPN业务的主要方式。本文介绍了VPN技术、MPLS技术、三层MPLSVPN技术概述和主要应用。最后，把基于MPLSVPN的解决方案具体应用到信息系统中，并详细说明了在网络拓扑、IP地址、路由及BGP等各技术点的具体规划和设计，并在完成网络构建后进行大量网络性能参数的测试和分析，保证信息系统网络的安全平稳运行。关键词：多标记协议交换技术；虚拟专用网；BGPDesignOfVPNProjectBasedOnMPLSTechnologyShenQiongying，MajorinCommunicationofengineering,CollegeofInformationScienceandTechnologyAbstract:WiththerapiddevelopmentoftheInternet,moreandmoreenterprisescarryoutvariousbusinessactivitiesbytheInternet,forthequalityofservicerequirementsbasedonIPnetworksincreasinglyhigher.Forthemajorityofenterprises,theyhavetheirownbranchesindifferentcities.Inordertoexchangethereal-timedatawiththeemployeesinthebranchoffices,enterpriseshavetoaskthenetworktoprovideservicebytheISP.ButthepublicInternetdateinformationisextremelyunsafe.MPLSVPNtechnologyistousethepublicnetworktoconnecttothecorporateprivatenetwork.Itcanreducetheuser’scostofleaseline,easytoaccessandmakesthemaintenancesimple;Ontheotherhand,itusethesecuritymechanismstoprotectandstrictlycontrolthedataconfidentiality,makingthemsecurityauthenticityandintegrity.SomoreandmorepeoplerecognizetheMPLSVPN,andithasbecomesthemajormodeofserviceoperator’sIPVPNservices.ThearticleintroducesthebasetheoryofVPNtechnology,MPLStechnology,threelayersofMPLSVPNtechnologyoverviewsandthemainapplication.Finally,thesolutionbasedonMPLSVPNtechnologyforspecificapplicationtotheinformationsystem,anddetailsthetopologyofthenetwork,IPaddress,routingandBGP,etcalltechnicalpointsofthespecificplanninganddesign.Aftercompletebuildnetwork,andtheapplicationofalotoftestingandanalysisofalargenumberofnetworkdataacquisitionparameters,theresultsshowthatthenetworkperformancegood.Keywords:Multi-ProtocolLabelSwitchingtechnology；VisualPrivateNetwork；BGP目录1绪论..................................................................................................................................11.1课题背景..................................................................................................................11.2MPLSVPN的发展与现状......................................................................................22MPLSVPN技术特点和工作原理.....................................................................................32.1VPN技术概述.........................................................................................................32.2MPLS技术概述.......................................................................................................32.3MPLSVPN技术概述..............................................................................................52.4MPLSVPN体系架构..............................................................................................62.4.1虚拟路由转发..............................................................................................62.4.2路由标识符..................................................................................................72.4.3路由对象......................................................................................................72.4.4MP-BGP中的路由传播...............................................................................72.4.5带标签报文的转发......................................................................................82.5MPLSVPN的优缺点..............................................................................................93基于MPLSVPN的案例实现...........................................................................................93.1案例概述..................................................................................................................93.2IP地址规划与配置................................................................................................103.3案例实施过程........................................................................................................113.3.1启用核心IGP协议....................................................................................113.3.2启用MPLS数据交换................................................................................133.3.3建立IBGP邻居.........................................................................................143.3.4为VPN用户指定VRF.............................................................................143.3.5配置MP-BGP(BGPVPNv4)....................................................................153.3.6指定团体属性的RT参数.........................................................................173.3.7配置PE-CE的路由协议...........................................................................174案例结果及测试...........................................................................