1 ¸ÅÊö

 

1.1 MPLS VPN¼¼Êõ²¼¾°

 

    VPN£¨Virtual Private Network£©µÄ¸ÅÏë×îÔçÊÇ´ÓרÏßÒý·¢µÄ¡£ÏȾÙÒ»¸öÀý×Ó×¢Ã÷Ϊʲô±ØÒªVPN
£¬ÀýÈçÒ»¸ö¹«Ë¾ÔÚÈ«¹ú¸÷µØ¶¼Óзֹ«Ë¾
£¬ÄÇôͨ³£Ëü±ØÐë×âÓÃרÏßʵÏÔìóÒµÄÚ²¿µÄ»¥ÁªÍøÂç
£¬ÕâÖÖ·½Ê½±ØÒªÔÚÁ½µØ»ò¶à¸öµØÖ·Ö®¼ä×âÓÃÔ¶³ÌÏß·
£¬²»ÂÛÊÇ·ñº±¼û¾Ý´«ÊäÕâÌõÔ¶³ÌÏß·¶¼¹Ì¶¨·ÖÅä
£¬Óû§Ö§³öµÄ¼ÛÖµºÜ¸ß¡£×¨ÏßÍøÂçÓµÓÐÒÔÏÂÌص㣺

 

    1. °²È«ÐÔ¸ß
£¬Ïß·ΪÓû§×¨ÓÃ
£¬·ÖÆçÓû§¼äÊÇÎïÀí¸ôÀëµÄ£»
 

    2. ¼ÛÖµ°º¹ó£»
 

    3. ´ø¿íÀË·ÑÑϳÁ£»

 

    ÓÉÓÚרÏßÍøÂçÓµÓеÄһЩ¹Ì³öȱµã
£¬VPNµÄÖ÷ÕžÍÊÇͨ¹ý¹«ÓÃÍøÂ罫ÒìµØµÄÍøµã»¥ÁªÊµÏÖÒ»¸ö˽ÓÐÍø¾ÍÏñÓÃרÏßÁª½ÓÆðÀ´µÄÒ»Ñù¡£ÆäʵÏֵķ½Ê½¾ÍÊÇÔÚ¹«ÍøÉϳÉÁ¢Ä³ÖÖ´ó¾ÖµÄÁ´Â·×÷ΪIPµÄËí·½øÐÐÒìµØÍøµã»¥Áª¡£ÔÚ¹«ÍøÉÏʵÏÖVPN
£¬Óû§Ö»±ØÒªÖ§³öµ½ÍøÂç·þÎñÌṩÉ̵ı¾µØÏß·ÓöÈ
£¬²¢ÇÒÔÚûº±¼û¾Ý´«ÊäʱÄܹ»¶Ï¿ªÏνӽøÒ»²½½Ú¼óÁË¿ªÏú¡£

 

1.2 VPN½ç˵

 

    ¹ËÃû˼Òå
£¬Ð鹹רÓÃÍø£¨Virtual Private Network£©²»ÊÇÕæµÄרÓÃÍøÂç
£¬µ«È´¿ÉÄÜʵÏÖרÓÃÍøÂçµÄÖ°ÄÜ¡£ËùνÐé¹¹
£¬ÊÇÖ¸Óû§²»ÔÙ±ØÒªÕ¼ÓÐÏÖʵµÄÔ¶³ÌÊý¾ÝÏß·
£¬¶øÊÇʹÓ÷þÎñÌṩÉÌÏÖ³ÉÍøÂçµÄÊý¾ÝÏß·£¨Í¨¹ýʹÓÃËí·¼¼Êõ£©¡£ËùνרÓÃÍøÂç
£¬ÊÇÖ¸Óû§¿ÉÒÔΪ×Ô¼ºÔ충һ¸ö×îÇкÏ×Ô¼ºÐèÒªµÄÍøÂç
£¬¾ÍÏñÊÇ˽ÓеÄÍøÂçÒ»Ñù¡£

 

1.3 BGP/MPLS VPN

 

    ÎÒÃÇ֪·ʵÏÖVPNµÄ·½Ê½ÓкöàÖÖ
£¬ÀýÈçÓлùÓÚµÚ¶þ²ãËí·ºÍ̸£¨L2TP£©µÄVPN
£¬Ò²ÓлùÓÚµÚÈý²ãËí·ºÍ̸£¨ÈçIPSec£©µÄVPN¡£¶øBGP/MPLS IP VPNÊÇÁí±íÒ»ÖÖʵÏÖVPNµÄ·½Ê½
£¬Äܹ»ËµËüÊÇÒ»ÖÖ½éÓÚµÚ¶þ²ãºÍµÚÈý²ãËí·ºÍ̸µÄVPN
£¬ÕâÖØÒªÊÇÓÉMPLS¾ö¶¨µÄ¡£

 

    ¼ÈÈ»ÊÇVPNÆäËùʵÏÖµÄÖ°ÄÜÒÔ¼°´ïµ½µÄÖ÷Õźʹ«Í³µÄVPNÊÇÒ»ÑùµÄ
£¬Ö»ÊÇ»ùÓÚMPLSµÄIP VPNºÍ´«Í³µÄIP VPNÏà±Å×кöàÓÅÊÆ¡£Èç¶ÔÓÚVPNÓû§¶øÑÔ
£¬ËüÄܹ»´ó´ó¼ò»¯Óû§µÄÖÎÀí¹¤×÷Á¿
£¬²»ÔÙ±ØҪʹÓÃרÃŵÄVPNÉ豸£¨ÈçVPN²¦Èë·þÎñÆ÷£©Ö»±ØҪʹÓô«Í³µÄ·ÓÉÆ÷¾ÍÄܹ»¹¹½¨VPN¡£

 

    ¶ÔÓÚÔËÓªÉ̶øÑÔ
£¬Ñ¡È¡MPLS VPNºÜÈÝÒ×ʵÏÖVPNµÄÀ©´ó
£¬Í¬Ê±¸øÔËÓªÉÌ´øÀ´¸ü´óµÄÉÌ»ú¡£
 

 

    ÕâÀïÚ¹ÊÍÒ»ÏÂΪʲôÊǽÐBGP/MPLS VPNÄØ£¿ÕâÊÇÓÉÓÚMPLSÀûÓÃÓÚLayer 3µÄVPNÖÐҪʹÓÃBGP×÷ΪMPLSµÄ±êÇ©·Ö·¢ºÍ̸
£¬¾ÍºÃ±ÈMPLSÀûÓÃÓÚIPµ¥²¥×ª·¢ÖбØÐëʹÓÃLDP×÷ΪÆä±êÇ©·Ö·¢ºÍ̸
£¬Ê¹ÓÃBGPºÍ̸ÔÚ·þÎñÌṩÉÌÍøÂçµÄPEÖ®¼ä»¥»»VPN·ÓÉÒÔ¼°°ó¶¨µÄ±êÇ©¡£

 

2 BGP/MPLS VPN¼Ü¹¹

 

 

                                  ͼ2-1

 

    ÔÚMPLS VPNµÄÏνÓÄ£ÐÍÖÐ
£¬ÍøÂçÓÉÔËÓªÉ̵ĹǸÉÍøÓëÓû§µÄ¸÷¸öSite×é³É
£¬ËùνVPN¾ÍÊǶÔsite¼¯ÖеĻ®·Ö
£¬Ò»¸öVPN¾Í¶ÔÓ¦Ò»¸öÓÉÈô¸Ésite×é³ÉµÄ¼¯ÖС£

 

2.1 ÊõÓï

 

ÏÈÒýÈ뼸¸ö¸ÅÏ룺

 

    CE£¨Custom Edge£©£ºÓû§SiteÖÐÖ±½ÓÓë·þÎñÌṩÉÌÏàÁ¬µÄ±ßÔµÉ豸
£¬Í¨³£ÊÇ·ÓÉÆ÷
 

 

    PE£¨Provider Edge£©£º¹Ç¸ÉÍøÖеıßÔµÉ豸
£¬ËüÖ±½ÓÓëÓû§µÄCEÏàÁ¬

 

    P ·ÓÉÆ÷£¨Provider Router£©£º¹Ç¸ÉÍøÖв»ÓëCEÖ±½ÓÏàÁ¬µÄÉ豸

 

    VPN Site£ºVPNÓû§µÄÕ¾µã
£¬ÊÇVPNÖеÄÒ»¸ö¹ÂÁ¢µÄIPÍøÂç
£¬¸ÃÍøÂçÄÚ²¿×ÔÉíÊÇIP»¥ÁªµÄ
£¬µ«ÊǺÍÆäËüÕ¾µã£¨»òÕßÊÇ×ÓÍø£©Í¨³£À´Ëµ²»Í¨¹ý¹Ç¸ÉÍø²»ÓµÓÐÁ¬Í¨ÐÔ¡£¹«Ë¾×ܲ¿
£¬·ÖÖ§»ú¹¹¶¼ÊÇsiteµÄ¾ßÌåÖÆ×Ó¡£CEͨ³£ÊÇVPN SiteÖеÄÒ»¸ö·ÓÉÆ÷»òÈý²ã»¥»»É豸ÉõÖÁÊÇÒ»¸öÖ÷»ú¡£Ò»¸öCEÉ豸×ÜÊDZ»ÒÔΪ´¦ÓÚÒ»¸öµ¥¶ÀµÄÕ¾µã
£¬µ«ÊÇÒ»¸öÕ¾µãÄܹ»Í¬Ê±ÊôÓÚ¶à¸öVPN¡£

 

    VRF£ºÃ¿¸öPE¶¼ÊØ»¤ºÍÖÎÀíһϵÁеÄת°ä·¢
£¬ ÆäÖÐÒ»¸öת°ä·¢½Ð×ö“ȱʡµÄת°ä·¢”»òÕ߽Гȫ¾Öת°ä·¢”£»ÆäËüµÄת°ä·¢½Ð“VPN ·ÓÉת°ä·¢£¨VPN Routing and Forwarding tables£©”¡£ÈôÊÇÒ»¸ö±¨ÎÄͨ¹ýAC´ïµ½PE
£¬¸ÃACûÓÐͬÈκÎVRF¹ØÁªµÄ»°
£¬ÄÇô½«Ê¹ÓÃÈ«¾ÖµÄ·ÓɱíΪ¸Ã±¨ÎĵÄÖ÷ÕŵØÖ·²éÕÒ·ÓÉ¡£Äܹ»µ¥Ò»µÄÀí½âΪ
£¬È«¾ÖµÄת°ä·¢´æ·ÅµÄÊǹ«ÍøµÄ·ÓÉ£¨±£ÕÏSPÍøÂçÖÐ×ÔÉíPEºÍPE
£¬PEºÍPÖ®¼ä¿ÉÄÜ»¥Í¨£©
£¬VRF´æ´¢µÄÊÇVPNÕ¾µãµÄ˽ÓзÓÉ¡£

 

2.2 ×é³ÉµÀÀí

 

    1. MPLS VPNµÄÍøÂç»ú¹ØÓÉ·þÎñÌṩÉÌÀ´ÊµÏÖ¡£ÔÚÕâÖÖÍøÂç»ú¹ØÖÐ
£¬ÓÉ·þÎñÌṩÉÌÏòÓû§ÌṩVPN·þÎñ
£¬Óû§¸Ð´¥²»µ½¹«¹²ÍøÂçµÄ´æÔÚ
£¬¾ÍÈçͬռÓжÀÁ¢µÄÍøÂç×ÊÔ´Ò»Ñù¡£

 

    2. ͬÑù¶ÔÓÚ·þÎñÌṩÉ̹ǸÉÍøÂçÄÚ²¿µÄ P ·ÓÉÆ÷
£¬Ò²¾ÍÊDz»ÓëCE Ö±½ÓÏàÁ¬µÄ·ÓÉÆ÷¶øÑÔ
£¬Ò²²»ÖªÂ·ÓÐVPNµÄ´æÔÚ
£¬½ö½öÕƹܹǸÉÍøÄÚ²¿µÄÊý¾Ý´«Êä¡£µ«Æä±ØÐë¿ÉÄÜÖ§³ÖMPLSºÍ̸
£¬²¢Ê¹ÄܸúÍ̸¡£

 

    3. ËùÓеÄVPNµÄ¹¹½¨¡¢ÏνӺÍÖÎÀí¹¤×÷¶¼ÊÇÔÚPEÉϽøÐеÄ¡£PEλÓÚ·þÎñÌṩÉÌÍøÂçµÄ±ßÔµ
£¬´ÓPEµÄ½Ç¶ÈÀ´¿´
£¬Óû§µÄÒ»¸öÁ¬Í¨µÄIP ϵͳ±»ÊÓΪһ¸ösite
£¬Ã¿Ò»¸ösiteͨ¹ýCEÓëPEÏàÁ¬
£¬site ÊÇ×é³ÉVPNµÄ¸ù»ùµ¥Ôª¡£

 

    4. Ò»¸öVPNÊÇÓɶà¸ösite×é³ÉµÄ
£¬Ò»¸ösite Ò²Äܹ»Í¬Ê±ÊôÓÚ·ÖÆçµÄVPN¡£ ÊôÓÚͳһ¸öVPNµÄÁ½¸ösiteͨ¹ý·þÎñÌṩÉ̵Ĺ«¹²ÍøÂçÏàÁ¬
£¬VPNÊý¾ÝÔÚ¹«¹²ÍøÂçÉÏ´«²¼
£¬±Ø±ØÒª±£ÕÏÊý¾Ý´«ÊäµÄ˽ÓÐÐԺͰ²È«ÐÔ¡£ Ò²¾ÍÊÇ˵
£¬Á¥ÊôÓÚij¸öVPNµÄsite·¢ËͳöÀ´µÄ±¨ÎÄÖ»ÄÜת·¢µ½Í¬ÑùÊôÓÚÕâ¸öVPNµÄsite ÀïÈ¥
£¬¶ø²»Äܱ»×ª·¢µ½ÆäËûsite ÖÐÈ¥¡£

 

    5. ͬʱ
£¬ÈκÎÁ½¸öûÓй²Í¬µÄsite µÄVPN¶¼Äܹ»Ê¹ÓóÁµþµÄµØÖ·¿Õ¼ä
£¬¼´ÔÚÓû§µÄ˽ÓÐÍøÂçÖÐʹÓÃ×Ô¼º¶ÀÁ¢µÄµØÖ·¿Õ¼ä
£¬¶ø²»ÓÃ˼¿¼ÊÇ·ñÓëÆäËûVPN»ò¹«ÍøµÄµØÖ·¿Õ¼äì¶Ü¡£ËùÓÐÕâЩ¾Í¶¼±ØÒªÒÀÀµÓÚVRF£¨VPN Routing & Forwarding Instance£©¡£

 

3 BGP MPLS/VPNµÀÀí

 

ÔÚÒ»¸öMPLS VPNÍøÂçÖÐ
£¬±ØÒª½â¾öÒÔÏÂÈý¸öÎÊÌ⣺

 

    1. ±¾µØ·ÓÉì¶ÜÎÊÌâ
£¬¼´£ºÔÚͳһ̨PEÉÏÈôºÎ·Ö±æ·ÖÆçVPNµÄÒ»Ñù·ÓÉ¡£

 

    2. ·ÓÉÔÚÍøÂçÖеĴ«²¼ÎÊÌâ
£¬Á½ÌõÒ»ÑùµÄ·ÓÉ
£¬¶¼ÔÚÍøÂçÖд«²¼
£¬¶ÔÓÚ½Ó¹ÜÕßÈôºÎ·Ö±æ±Ë´Ë£¿

 

    3. ±¨ÎĵÄת·¢ÎÊÌâ
£¬¼´±ã³É¹¦µÄ½â¾öÁË·ÓɱíµÄì¶Ü
£¬µ«Êǵ±PE½Ó¹Üµ½Ò»¸öIP±¨ÎÄʱ
£¬ËûÓÖÈôºÎ¿ÉÄÜ֪·¸Ã·¢¸øÄǸöVPN£¿ÓÉÓÚIP±¨ÎÄÍ·ÖÐΨһ¿ÉÓõÄÐÅÏ¢¾ÍÊÇÖ÷ÕŵØÖ·¡£¶øºÃ¶àVPNÖж¼¿ÉÄÜ´æÔÚÕâ¸öµØÖ·¡£

 

3.1 VRF-VPN·ÓÉת·¢Ê·ý£¨VPN Routing & Forwarding Instance£©

 

    Æäʵ½â¾öµØַì¶ÜµÄÎÊÌâ
£¬Ò²´æÔÚһЩ²½Ö裺ʹÓÃACL¡¢IP unnumber¡¢NAT¡£µ«ÕâЩ·¨×Ó¶¼ÊÇ»ùÓÚ“´ò²¹¶¡”µÄ˼Ïë
£¬Ã»ÄÜ´ÓÐÔÖÊÉϽâ¾öÎÊÌâ¡£

 

    ÒªÏë³¹µ×½â¾ö
£¬±ØÐëÔÚÀíÂÛÉÏÓÐËùÍ»ÆÆ¡£Äܹ»´ÓרÓÃPEÉϵõ½ÆôµÏ¡£×¨Ó÷ÓÉÆ÷·½Ê½·Ö¹¤Ã÷È·
£¬Ã¿¸öPEÖ»±£Áô×Ô¼ºVPNµÄ·ÓÉ¡£PÖ»±£Áô¹«Íø·ÓÉ¡£¶ø´Ë¿ÌµÄ˼·ÊÇ£º½«ÕâЩËùÓÐÉ豸µÄÖ°ÄÜ
£¬ºÍÔÚһ̨PEÉÏʵÏÖ¡£
 

 

                                     Í¼3-1

 

    ÿһ¸öVRFÄܹ»¿´×÷Ðé¹¹µÄ·ÓÉÆ÷
£¬ÈçͬÊÇһ̨רÓõÄPEÉ豸¡£¸ÃÐ鹹·ÓÉÆ÷Ô̺¬ÈçÏÂÔªËØ£º

    Ò»ÕŶÀÁ¢µÄ·Óɱí
£¬µ±È»Ò²Ô̺¬Á˶ÀÁ¢µÄµØÖ·¿Õ¼ä¡£

 

    Ò»×é¹éÊôÓÚÕâ¸öVRFµÄ½Ó¿ÚµÄ¼¯ÖС£

 

    Ò»×éÖ»ÓÃÓÚ±¾VRFµÄ·ÓɺÍ̸¡£

 

    ¶ÔÓÚÿ¸öPE
£¬Äܹ»ÊØ»¤Ò»¸ö»ò¶à¸öVRF
£¬Í¬Ê±ÊØ»¤Ò»¸ö¹«ÍøµÄ·ÓÉ±í£¨Ò²½ÐÈ«¾Ö·ÓÉ±í£©
£¬¶à¸öVRFÊ·ýÏ໥·ÖÀë¶ÀÁ¢¡£

 

    ÆäʵʵÏÖVRF²¢²»ÄÑÌâ
£¬¹Ø¼üÔÚÓÚÈôºÎÔÚPEÉÏʹÓÃÌض¨µÄÕ½Êõ¹æ¶¨À´Ð­µ÷¸÷VRFºÍÈ«¾Ö·ÓɱíÖ®¼äµÄ¹Øϵ¡£

 

3.2 VRFµÄ·ÓÉ·Ö·¢

 

 

                                   ͼ3-2

 

    ÈçͼÖÐËùʾ
£¬ÊôÓÚÒ»¸öVPNµÄsite¿ÉÄܱðÀëÏνӵ½·ÖÆçµÄPEÉÏ¡£ ΪÁ˱£ÕÏVPNµÄÁ¬Í¨ÐÔ
£¬ÎÒÃDZØÐëÔÚPEÖ®¼ä»¥»»VPN·ÓÉÐÅÏ¢¡£ VPN·ÓÉÕ¼ÓÐ×Ô¼º¶ÀÁ¢µÄµØÖ·¿Õ¼ä
£¬ÕâÖÖ·ÓÉÔÚ·þÎñÌṩÉ̵Ĺ«¹²ÍøÂçÖд«µÝ²»ÄÜѡȡͨ³£µØÖ·½á¹¹
£¬²»È»»áÓÉÓÚµØÖ·¿Õ¼äµÄ³Áµþµ¼Ö·ÓɱíµÄ»ìÂÒ
£¬¶øÊÇͨ¹ýRDÓëIPµØַһ·×é³ÉΨһµÄVPN-IPV4µØÖ·½á¹¹À´´«µÝ¡£Í¬Ê±ÔÚPEÖ®¼äÒ²²»ÄÜѡȡͨ³£µÄ·ÓɺÍ̸
£¬¶øÊÇͨ¹ý¶ÔBGP×÷¿Ï¶¨µÄÀ©´ó
£¬Ê¹ÓöàºÍ̸BGP£¨MultiProtocol BGP£©À´»¥»»VPNÐÅÏ¢¡£ÕâЩ±ÉÈËÒ»²¿·Ý½«»á½²µ½¡£

 

3.3 RD--·Óɱêʶ£¨Route Distinguisher£©ÓëVPN-IPv4µØÖ·

 

    ÔÚÇ°ÃæÌáµ½¹ý
£¬PEÖ®¼äͨ¹ý¹«¹²ÍøÂ绥»»VPN·ÓÉ
£¬²»ÄÜѡȡͨ³£µÄµØÖ·½á¹¹ºÍ·ÓɺÍ̸¡£Òò¶ø
£¬Ê×ÏÈÒýÈëRD£¨Route Distinguisher£©µÄ¸ÅÏë¡£

 

    RDÀ´±êʾÿ¸öVRF¡£ RDÓëVRFÊÇÖðÒ»¶ÔÓ¦µÄ
£¬Ã¿Ò»¸öVRF¶¼ÓÐ×Ô¼ºµÄRD
£¬RDÔڹǸÉÍøÖÐά³ÖΨһÐÔ
£¬ÊÇSiteµÄ±êʶ¡£

 

    PE·ÓÉÆ÷Ö®¼äʹÓÃBGPÀ´°ä²¼VPN·ÓÉ¡£³ß¶ÈBGP¶Ôÿ¸öIPǰ׺ֻÄÜ×°ÖúͰ䲼һ¸ö·ÓÉ¡£ÓÉÓÚÿ¸öVPNÓÐ×Ô¼ºµÄµØÖ·¿Õ¼ä
£¬Òâζ×ÅͬÑùµÄIPµØÖ·»á±»ËÁÒâÊýÖ÷ÕÅVPNËùʹÓÃ
£¬ÔÚÿ¸öVPNÖÐÕâ¸öµØÖ·°µÊ¾Ò»¸ö·ÖÆçµÄϵͳ¡£ ÕâÑù¾Í±ØÒªÔÊÐíBGP¶Ôÿ¸öVPNµÄÒ»ÑùµÄIPǰ׺Äܹ»×°ÖúͰ䲼¶à¸ö·ÓÉ
£¬Í¬Ê±
£¬ÒªÊ¹ÓÃÌض¨µÄÕ½ÊõÀ´¾ö¶¨ÄÄÒ»Ìõ·Óɱ»ÄĸösiteËùʹÓá£Îª´Ë
£¬¶àºÍ̸BGP ʹÓÃÁËеĵØÖ·×å--VPN-v4µØÖ·¡£

 

                              ͼ3-3

 

    Ò»¸öVPN-v4µØÖ·ÓÐ12¸ö×Ö½Ú
£¬ÆðÍ·ÊÇ8×Ö½ÚµÄRD
£¬½ÓÏÂÈ¥ÊÇ4×Ö½ÚµÄIPµØÖ·¡£ÈôÊÇÁ½¸öVPNʹÓÃÒ»ÑùµÄIPµØÖ·
£¬PE·ÓÉÆ÷ΪËüÃÇÔö³¤·ÖÆçµÄRD
£¬×ª»»³ÉΨһµÄVPN-v4µØÖ·
£¬²»»áÔì³ÉµØÖ·¿Õ¼äµÄì¶Ü¡£

 

    ʹÓÃVPN-v4µØÖ·½â¾öÁËVPN·ÓÉÔÚ¹«¹²ÍøÂçÖд«µÝʱµÄµØÖ·¿Õ¼äì¶ÜÎÊÌâ
£¬µ«ÓÉÓÚÕâÒѾ­²»ÔÙÊÇÔ­ÓеÄIPµØÖ·×åµÄµØÖ·½á¹¹
£¬²»Äܱ»Í¨³£µÄ·ÓɺÍ̸Ëù³ÐÔØ
£¬Í¬Ê±
£¬Ã¿Ò»¸öÓû§ÍøÂ綼ÊǶÀÁ¢µÄϵͳ
£¬ËüÃÇÖ®¼ä¾­¹ý·þÎñÌṩÉ̵Ä·ÓÉÐÅÏ¢´«µÝʹÓÃIGPºÍ̸ÏÔÈ»ÊDz»ÊʺϵÄ
£¬Òò¶øÎÒÃDZØÒª½«BGPºÍ̸×÷¿Ï¶¨µÄÀ©´ó
£¬ÓÃËüÀ´³ÐÔØеÄVPN-v4µØÖ·×å·ÓÉ
£¬Í¬Ê±´«µÝ¸½¼ÓÔÚ·ÓÉÉϵÄRoute TargetÊôÐÔ¡£

 

    ͨ¹ýRDÓëVPN-IPv4µØÖ·
£¬½â¾öÁË·ÓÉÔÚÍøÂçÖеĴ«²¼
£¬Á½ÌõÒ»ÑùµÄ·ÓÉ
£¬¶¼ÔÚÍøÂçÖд«²¼
£¬¶ÔÓÚ½Ó¹ÜÕßÈôºÎ·Ö±æ±Ë´ËÎÊÌâ¡£

 

3.4 BGPÀ©´óÓëRoute TargetÊôÐÔ

 

    PEÖ®¼ä»¥»»VPNÐÅÏ¢
£¬ÔÚBGPµÄUPDATE±¨ÎÄÖгÐÔØVPN-v4µØÖ·×å·ÓÉ
£¬Õâ¾ÍÊǶÔBGP½øÐÐÁËÀ©´óµÄMBGP£¨¶àºÍ̸BGP£©¡£MBGP²»½öÄܳÐÔØIPv4·ÓÉ
£¬²¢ÇÒÄܳÐÔØVPN
£¬IPv6
£¬¶à²¥µÈ·ÓÉ¡£ MBGPÓÐÁ½¸öÖØÒªµÄ¹¤×÷
£¬ÎªÂ·ÓÉÖ¸¶¨Ìض¨ÍøÂç²ãºÍ̸µÄÏÂÒ»ÌøºÍNLRI£¨ÍøÂç²ã¿É´ïÐÅÏ¢£©¡£

 

                                  ͼ3-4

 

    BGPÀ©´ó¼¯ÌåÊôÐÔÊǶԼ¯ÌåÊôÐÔ×öÁËÀ©´ó
£¬Ôö´óÁËÖµÓò
£¬²¢»®¶¨ÁËÄÚ²¿½á¹¹¡£À©´ó¼¯ÌåÊôÐÔÊÇÒ»¸ö¹ý¶É¿ÉÑ¡ÊôÐÔ
£¬ËüÓÉÒ»¸öÀ©´ó¼¯ÌåµÄ¼¯ÖÐ×é³É
£¬Ã¿¸öÀ©´ó¼¯ÌåÊÇ8×Ö½ÚµÄÊý¡£Route TargetÊôÐÔÊÇÓÉBGPµÄÀ©´ó¼¯ÌåÊôÐÔÀ´°µÊ¾µÄ¡£

 

Route Target ÊôÐÔ

 

    VPNµÄ³ÉÔ±¹ØϵÊÇͨ¹ý·ÓÉËùЯ´øµÄroute targetÊôÐÔÀ´»ñµÃµÄ¡£ PEÖÐÿ¸öSiteµÄ·ÓɱíÖеÄ·ÓÉÏîÄܹ»ÓÐÒ»»ò¶à¸öRoute TargetÊôÐÔ¡£ Ëü°µÊ¾Á˸÷ÓÉÄܹ»±»ÄÄЩsiteËù½Ó¹Ü
£¬½Ó¹ÜÄÄЩsiteµÄ´«ËÍÀ´µÄ·ÓÉ¡£

 

    Ò»¸öÓµÓÐÕâÖÖÊôÐԵķÓɱØÐë·¢Ë͸øËùÓÐÔÚRoute TargetÖÐÖ¸Ã÷µÄsiteËùÏνӵÄPE·ÓÉÆ÷
£¬PE½Ó¹Üµ½Ô̺¬´ËÊôÐԵķÓɺó
£¬Èô´ËÊôÐÔÖ¸Ã÷µÄsiteͬ¼ºÒ»ÖÂ
£¬Ôò²ÎÓëµ½ÏàÓ¦µÄ·ÓɱíÖС£

 

    RTµÄÐÔÖÊÊÇÿ¸öVRF±í°××Ô¼ºµÄ·ÓÉÆúÈ¡¼°°®ºÃµÄ·½Ê½¡£Äܹ»·ÖΪÁ½²¿ÃÅ£ºExport TargetÓëimport Target£»Ç°Õß°µÊ¾ÁËÎÒ·¢³öµÄ·ÓɵÄÊôÐÔ
£¬¶øºóÕß°µÊ¾ÁËÎÒ¶ÔÄÇЩ·ÓɸÐÐËÖ¡£ÀýÈ磺

 

    SITE-A£ºÎÒ·¢µÄ·ÓÉÊǺìÉ«µÄ
£¬ÎÒÒ²Ö»½Ó¹ÜºìÉ«µÄ·ÓÉ¡£

 

    SITE-B£ºÎÒ·¢µÄ·ÓÉÊǺìÉ«µÄ
£¬ÎÒÒ²Ö»½Ó¹ÜºìÉ«µÄ·ÓÉ¡£

 

    SITE-C£ºÎÒ·¢µÄ·ÓÉÊÇÐþÉ«µÄ
£¬ÎÒÒ²Ö»½Ó¹ÜÐþÉ«µÄ·ÓÉ¡£

 

    SITE-D£ºÎÒ·¢µÄ·ÓÉÊÇÐþÉ«µÄ
£¬ÎÒÒ²Ö»½Ó¹ÜÐþÉ«µÄ·ÓÉ¡£

 

    ÕâÑù
£¬SITE£­AÓëSITE-BÖоÍÖ»ÓÐ×Ô¼ººÍ¶Ô·½µÄ·ÓÉ
£¬Á½ÕßʵÏÖÁË»¥·Ã¡£Í¬ÀíSITE£­CÓëSITE-DÒ²Ò»Ñù¡£ÕâʱÎÒÃǾÍÄܹ»°ÑSITE-AÓëSITE£­B³ÆΪVPN-A
£¬¶ø°ÑSITE-CÓëSITE-D³ÆΪVPN-B
£¬ÈçÏÂͼ£º
 

 

 

                                   Í¼3-5

 

    ¶ÔÒ»¸öPE
£¬ÓÐÒ»¸öRoute TargetÊôÐԵļ¯ÖÐÓÃÓÚ¸½¼Óµ½´Óij¸ösite½Ó¹ÜµÄ·ÓÉÉÏ
£¬³ÆΪExport Route Target
£¬ÁíÒ»¸öRoute TargetÊôÐԵļ¯ÖÐÓÃÓÚ¾ö¶¨ÄÄЩ·ÓÉÄܹ»ÒýÈëµ½´ËsiteµÄ·ÓɱíÖÐ
£¬³ÆΪImport Route Target¡£ËüÃÇÊÇ·ÖÆçµÄ¼¯ÖС£ÕâÁ½¸ö¼¯ÖеÄ×éºÏÄܹ»»ú¹ØÈκÎÍØÆËÀàÐ͵ÄVPN¡£

 

    ÔÚPEÉÏ
£¬Ã¿¸öVRF¶¼ÓÐÒ»¸öImport Route TargetÁбí
£¬Ö»Óе±Â·ÓɵÄExport¡¡Route TargetÓëVRFµÄImport Route TargetÁбíÏàÆ¥Åä
£¬Â·ÓɲŻᱻÒýÈëµ½¸ÃVRFµÄ·ÓɱíÖС£

 

RTµÄ½Ã½ÝÀûÓÃ

 

    ÓÉÓÚÿ¸öRT Export TargetÓëimport Target¶¼Äܹ»ÅäÖöà¸öÊôÐÔ
£¬ÀýÈ磺ÎÒ¶ÔºìÉ«»òÕßÀ¶É«µÄ·Óɶ¼¸ÐÐËÖ¡£½Ó¹ÜʱÊÇ“»ò”²Ù×÷
£¬ºìÉ«µÄ¡¢À¶É«µÄÒÔ¼°Í¬Ê±¾ß±¸Á½ÖÖÉ«²ÊµÄ·ÓɳÇÊб»½ÓÊÜ¡£ËùÒÔ¾ÍÄܹ»ÊµÏÖ¼«¶È½Ã½ÝµÄVPN½Ó¼û½ÚÔì¡£

 

 

 

                                  ͼ3-6

 

3.5 ˽Íø±êÇ©

 

    ÖÁ´Ë
£¬Ç°Á½¸öÎÊÌ⣺ÔÚPE±¾µØµÄ·ÓÉì¶ÜºÍÍøÂç´«²¼¹ý³ÌµÄì¶Ü¶¼Òѽâ¾ö¡£µ«ÊÇÈôÊÇÒ»¸öPEµÄÁ½¸ö±¾µØVRFͬʱ´æÔÚ10.0.0.0/24µÄ·ÓÉ
£¬µ±Ëû½Ó¹Üµ½Ò»¸öÖ÷ÕŵØַΪ10.0.0.1µÄ±¨ÎÄʱ
£¬ËûÈôºÎ֪·¸Ã°ÑÕâ¸ö±¨ÎÄ·¢¸øÓëÄĸöVRFÏàÁ¬µÄCE£¿×¢¶¨»¹±ØÒªÔÚ±»×ª·¢µÄ±¨ÎÄÖÐÔö³¤Ò»Ð©ÐÅÏ¢¡£

 

    ·Óɰ䲼ʱÒѾ­Ð¯´øÁËRD
£¬ÀíÂÛÉÏÄܹ»Ê¹ÓÃRD×÷Ϊ±êʶÄØ
£¬µ«ÊÇRDÒ»¹²ÓÐ64¸öbit
£¬Ì«´óÁË¡£Õâ»áµ¼ÖÂת·¢Ð§ÄܵĽµµÍ¡£ËùÒÔÖ»±ØÒªÒ»¸ö¶ÌÓס¢¶¨³¤µÄÏóÕ÷¼´¿É¡£ÓÉÓÚ¹«ÍøµÄËí·ÒѾ­ÓÉMPLSÀ´Ìṩ
£¬²¢ÇÒMPLSÖ§³Ö¶à²ã±êÇ©µÄǶÌ×
£¬Õâ¸öÏóÕ÷½ç˵³ÉMPLS±êÇ©µÄÌåʽ¡£Õâ¸ö˽ÍøµÄ±êÇ©¾ÍÓÉMP-BGPÀ´·ÖÅä
£¬Óë˽ÍøµÄ·ÓÉÒ»Æð°ä²¼³öÈ¥¡£

 

3.6 BGP°ä²¼Â·ÓÉʱ±ØҪЯ´øµÄÐÅÏ¢

 

    Ò»¸öÀ©´óÖ®ºóµÄNLRI£¨Network Layer Reachability Information£©
£¬Ôö³¤Á˵ØÖ·×åµÄÃèÊö
£¬ÒÔ¼°Ë½ÍølabelºÍRD¡£
 

 

    ×·ËæÖ®ºóµÄÊÇRTµÄÁбí

 

    ¶ÔÓÚʹÓÃÁËÀ©´óÊôÐÔMP_REACH_NLRIµÄBGP
£¬ÎÒÃdzÆ֮ΪMP-BGP¡£

 

4 BGP MPLS/VPN·ÓÉ·Ö·¢¡¢±¨ÎÄת·¢»úÔì

 

    ÔÚMPLS VPNÖÐ
£¬ÓÉÓÚÑ¡È¡ÁËÁ½²ã±êÇ©Õ»½á¹¹
£¬ËùÒÔP²¢²»²Î¼ÓVPN·ÓÉÐÅÏ¢µÄ½»»¥
£¬VPNÕ¾µãÄÚ²¿ÊÇͨ¹ýCEÓëPE¡¢PEÓëPEÖ®¼äµÄ·Óɽ»»¥ÖªÂ·ÊôÓÚij¸öVPNµÄÍøÂçÍØÆËÐÅÏ¢¡£
 

¾ßÌåÄܹ»×ÛºÏΪÈçÏÂ3¸ö²½Ö裺
 

    1. CEÓëPEÖ®¼äµÄ·ÓÉ»¥»»
 

    2. PEÓëPEÖ®¼äµÄ·ÓÉ»¥»»
 

    3. PEÓëCEÖ®¼äµÄ·ÓÉ»¥»»

 

4.1 CEÓëPEÖ®¼äµÄ·ÓÉ»¥»»

 

    ÔÚPEÉÏΪ·ÖÆçµÄVPNÕ¾µãÅäÖÃVRF¡£PEÉÏÊØ»¤¶à¸ö¶ÀÁ¢µÄ·Óɱí
£¬Ô̺¬¹«ÍøºÍ˽Íø·ÓÉ±í£¨VRF£©
£¬ÆäÖУº
 

    1. ¹«Íø·ÓÉ±í£ºÔ̺¬´ïµ½ÆäËûPEºÍPµÄ·ÓÉ
£¬ÓɹǸÉÍøµÄIGP²úÉú¡£
 

    2. ˽Íø·ÓÉ±í£ºÔ̺¬±¾VPN¿É´ïµ½µÄ·ÓÉ£¨¼´ÊôÓÚ¸ÃVPNµÄ·ÖÆçÕ¾µãÖ®¼äµÄ·ÓÉ£©¡£

 

                              ͼ4-1

 

    CEÓëPEÖ®¼äͨ¹ýÑ¡È¡¾²Ì¬Â·ÓÉ¡¢¶¯Ì¬Â·ÓɺÍ̸£¨ÈçOSPF,RIP…£©½øÐзÓÉÐÅÏ¢µÄ½»»¥¡£ µ±Ingress PE´Óij¸ö½Ó¿Ú½Ó¹Üµ½À´×ÔCEµÄ·ÓÉÐÅϢʱ
£¬½«¸Ã·Óɵ¼Èë¶ÔÓ¦µÄVRF¡£

 

4.2 PEÓëPEÖ®¼äµÄ·ÓÉ»¥»»

 

    PEÓëPEÖ®¼äµÄ·ÓÉ»¥»»ÐÔÖÊÉϾÍÊǽ«PEÉϵÃVRF·ÓÉ×¢Èëµ½MP-IBGP²¢Í¨¹ýMP-IBGPÔÚPE¼ä»¥»»µÄ¹ý³Ì¡£

 

 

                              ͼ4-2

 

    PEͨ¹ýά³ÖIBGPÈ·±£Â·ÓÉÐÅÏ¢±»·Ö·¢¸øËùÓÐÆäËüµÄPE¡£µ±Ingress PE·Ö·¢Â·ÓÉÐÅϢʱ
£¬½«Í¬Ê±Ð¯Òý·ÓɵصãVRFµÄRD
£¬¼´½«Â·ÓɵÄIPv4µØַǰ׺ת»¯ÎªVPN-IPv4µØÖ·¡£

 

    ·Ö·¢µÄ¾ßÌå·ÓÉÐÅÏ¢£¨VPN-IPv4·ÓÉÐÅÏ¢£©Ô̺¬£º
 

    ¸Ã·ÓɵÄVPN-IPv4µØַǰ׺
 

    ÏÂÒ»ÌøµØÖ·¼´Ingress PEµÄVPN-IPv4µØÖ·£¨Í¨³£ÊÇPEÉϵÄLoopback½Ó¿ÚµØÖ·
£¬ÆäRD=0£©
 

    ·ÖÅä¸ø¸Ã·ÓɵÄVPN±êÇ©£¨ÓÃÀ´±êʶÊôÓÚÄĸöVPN»òÕß˵ÊÇÄĸöVRF£©
 

    ¸Ã·ÓɵصãVRFµÄExport RT
 

 

4.3 PEÓëCEÖ®¼äµÄ·ÓÉ»¥»»

 

    PEÓëCEÖ®¼äµÄ·ÓÉ»¥»»¼´ÎªMP-IBGP°Ñ·ÓÉ×¢Èëµ½PEÉϵÄVRF¶øºóͨ¹ýPEÓëCEÉÏÔËÐеÄ·ÓɺÍ̸ÔÙ·Ö·¢¸øCEµÄ¹ý³Ì¡£

 

 

                                 ͼ4-3

 

    µ±Egress PEÊÕµ½Â·ÓÉÐÅϢʱ
£¬½«²é¿´¸Ã·ÓɵÄRT
£¬ÈôÊÇRTºÍÆäËÁÒâVRFÖÐËÁÒâÒ»¸öImport RTÏà·ûʱ
£¬¾Í½«¸Ã·ÓÉ´æÈëVPN-IPv4µÄ·Óɱí¡£

 

    ÔÚ½øÐзÓÉÑ¡ÔñÖ®ºó
£¬½«×îÓÅ·ÓÉÖеÄVPN-IPv4µØַת»¯³ÉIPv4µØÖ·£¨¼´È¥µôµØÖ·ÖеÄRD£©µ¼Èëµ½ÏàÓ¦µÄVRF
£¬Ë½Íø±êÇ©±£Áô
£¬¼Í¼µ½×ª°ä·¢ÖÐ
£¬Áô×öת·¢Ê±Ê¹Óá£
ÔÙÓɱ¾VRFµÄ·ÓɺÍ̸ÒýÈë²¢´«µÝ¸øÏàÓ¦µÄCE¡£·¢¸øCEʱÏÂÒ»ÌøΪ½Ó¹Ü¶ËPE×Ô¼ºµÄ½Ó¿ÚµØÖ·¡£ÕâÑù¾ÍʵÏÖÁË´ÓMP-IBGP·ÓÉ×¢Èëµ½VRFµÄ¹ý³Ì¡£

 

4.4 MPLS/VPN ±¨ÎÄת·¢

 

 

                                    Í¼4-4

    ÔÚMPLS VPNÖÐ
£¬ÊôÓÚͳһµÄVPNµÄÁ½¸öSite Ö®¼äת·¢±¨ÎÄʹÓÃÁ½²ã±êÇ©À´½â¾ö
£¬ÔÚÈë¿ÚPEÉÏΪ±¨ÎÄ´òÉÏÁ½²ã±êÇ©
£¬µÚÒ»²ã£¨±í²ã£©±êÇ©ÔڹǸÉÍøÄÚ²¿½øÐл¥»»
£¬´ú±íÁË´ÓPEµ½¶Ô¶ËPEµÄÒ»ÌõËí·
£¬VPN±¨ÎÄ´òÉÏÕâ²ã±êÇ©
£¬¾ÍÄܹ»ÑØ×ÅLSP´ïµ½¶Ô¶ËPE
£¬Õâʱ³½¾Í±ØҪʹÓõڶþ²ã£¨Äڲ㣩±êÇ©
£¬Õâ²ã±êÇ©ÅúʾÁ˱¨ÎÄÓ¦¸Ã´ïµ½Äĸösite
£¬»òÕ߸ü¾ßÌåһЩ
£¬´ïµ½ÄÄÒ»¸öCE
£¬ÕâÑù
£¬Æ¾¾ÝÄÚ²ã±êÇ©
£¬¾ÍÄܹ»ÕÒµ½×ª·¢µÄ½Ó¿Ú¡£Äܹ»ÒÔΪ
£¬ÄÚ²ã±êÇ©´ú±íÁËͨ¹ý¹Ç¸ÉÍøÏàÁ¬µÄÁ½¸öCEÖ®¼äµÄÒ»¸öËí·¡£

 

5 GA»Æ½ð¼×ÍøÂçBGP MPLS VPNʵÏÖ

 

5.1 ×éÍøÐèÒª

 

    ÒªÇó£ºÓÐÁ½¸öVPNÓû§
£¬VPNAºÍVPNB¡£VPNAÔÚ¸£ÖݺÍÉϺ£ÓÐ×Ô¼ºµÄÕ¾µã
£¬VPNB ÔÚ±±¾©ºÍÉϺ£ÓÐ×Ô¼ºµÄÕ¾µã
£¬´Ë¿ÌÒªVPNA ÄÚµÄÓû§Äܹ»½Ó¼û×Ô¼º¸£ÖݺÍÉϺ£µÄ×ÊÔ´
£¬VPNB ÄÚµÄÓû§Äܹ»½Ó¼û×Ô¼º±±¾©ºÍÉϺ£µÄ×ÊÔ´
£¬Á½¸öVPN Ö®¼ä²»ÄÜÏ໥½Ó¼û¡£

 

5.2 ×éÍøÍØÆË

 

 

                                    ͼ5-1

 

5.3 ÅäÖò½Öè

 

1. ÅäÖÃPE

 

    ÒÔPE_SH ΪÀý£º
 

    ÅäÖÃVRF
 

    ÔÚPE_SHÉϽç˵Á½¸öVRF
£¬VRFA_SHºÍVRFB_SH
£¬±ðÀëΪÕâÁ½¸öVRF½ç˵RÖµºÍRTÖµ
£¬²¢°ÑVRFºÍ¶ÔÓ¦µÄ½Ó¿Ú¹ØÁªÆðÀ´¡£
 

ÅäÖÃBGP ºÍ̸

 

ÔÚPE_FZºÍPE_BJÅäÖùý³ÌºÍÉÏÃæÀàËÆ¡£

 

2. ÅäÖÃCE

 

    ÒÔVPNB_SH ΪÀý:
 

    ÅäÖÃBGP
 

VPNA_SH¡¢VPNA_FZºÍVPNB_BJµÄÉÏCEµÄÅäÖúÍVPNB_SHÀàËÆ¡£

 

3. ÅäÖÃP

 

ÒÔP1ΪÀý£º
 

P2ÉϵÄÅäÖúÍP1ÀàËÆ¡£

6 BGP/MPLS IP VPN³ß¶Èϵͳ·¢Õ¹

 

    IETFÒѾ­ÔÚ2004Äê³ÉÁ¢ÁËL3VPNµÄ¹¤×÷×éרÃÅ×êÑÐL3VPNµÄ¼¼ÊõºÍÀûÓÃ
£¬ÕâÀïÖØÒª½²ÓëBGP/MPLS VPN×îÖ±½ÓÓйصÄRFC
£¬ BGP/MPLS IP VPNµÄ¼¼Êõ×îÔçÓÉIETFÔÚ1999ÄêÔÚRFC 2547Ìá³ö
£¬ºóÀ´³öÁËÒ»¸ö¶©Õý°æ½ÐRFC2547bis
£¬ÏÖÓеÄÍøÂçÉ豸ÌṩÉÌʵÏÖµÄBGP/MPLS VPN¶¼ÊÇƾ¾ÝRFC2547bisʵÏֵġ£Ëæןü¼Êõ±»¸÷¸öÍøÂçÉ豸³§ÉÌÖ§³Ö²¢ÀûÓÃ
£¬¸Ã¼¼ÊõÒѾ­±»Êµ¼ÊÖ¤Ã÷±ÈÁ¦³ÉÊì¡£2006ÄêIETFƾ¾ÝÕâЩÄêÔÚÀûÓùý³ÌÖеÄʵ¼Ê×ܽá½øÒ»²½ÃÀÂúÁ˸ü¼Êõ
£¬³Áа䲼ÁËRFC4364²¢ÉêÃ÷°Î³ýÁËRFC2547¡£RFC4364ÀïÃæ¾ßÌåÂÛÊöÁËBGP/MPLS IP VPNsµÄ¼Ü¹¹¡¢¼¼ÊõʵÏֺͲ¿Êð¡£Áí±íÓÉÓÚBGP/MPLS IP VPNsµÄ¼¼ÊõʵÏÖÐèÒª
£¬¶ÔBGPºÍ̸µÄ¸öÐÔ½øÐÐÁË´óÁ¿µÄÀ©´ó
£¬ÖØÒªÔ̺¬£º
 

    RFC2858 Multiprotocol Extensions for BGP-4 Ö§³Ö¶àºÍ̸À©´óµÄBGP
 

    draft-ietf-idr-as4bytes ASºÅÓÉÔ­À´µÄ2×Ö½Ú±äΪ4×ֽڵĴ¦ÖÃ
 

    RFC1997 BGP Communities Attribute BGPµÄ¼¯ÌåÊôÐÔ
 

    RFC2918 Route Refresh Capability for BGP-4 BGPµÄˢлúÔì
 

    draft-ietf-idr-route-filter Cooperative Route Filtering Capability for BGP-4 BGPµÄORF»úÔì
 

    RFC2796 BGP Route Reflection BGPµÄ·ÓÉ·´ÉäÆ÷ʵÏÖ
 

    RFC3107 Carrying Label Information in BGP-4 ÈôºÎÔÚBGPÖÐЯ´øMPLS±êÇ©
 

    RFC4360 BGP Extended Communities Attribute BGPµÄÀ©´ó¼¯ÌåÊôÐÔ

 

ʹÓÃBGP/MPLSʵÏÖµÄLayer3 VPNÖØÒªÓÐÈçÏÂÌص㣺

 

    VPNµÄËí·ÊÇÔÚÍøÂç·þÎñÌṩÉ̵ÄPEÉϳÉÁ¢µÄ
£¬¶ø²»ÊÇÔÚÓû§µÄCEÖ®¼ä³ÉÁ¢µÄ¡£VPNµÄ·ÓÉÒ²ÊÇÔÚPEºÍPEÖ®¼ä´«µÝ
£¬¶ø²»ÔÚCEÖ®¼ä´«µÝ¡£ÕâÑùÓû§¾Í²»±ØÒª·¢Ê²Ã´¾«Á¦ÊØ»¤×Ô¼ºµÄVPN¡£BGP/MPLS IP VPNÒ²ÊôÓÚ·þ ÎñÉÌÌṩµÄVPN¼¼Êõ
£¬¶ÔÓÚ·þÎñÉÌÌṩµÄVPN
£¬IETF¸øÆäÁËÒ»¸öÊõÓï½ÐProvider Provisioned VPN
£¬¼ò³ÆΪPPVPN

 

    °ÑVPNËí·µÄ²¿Êð¼°Â·ÓÉ°ä²¼±äΪ¶¯Ì¬ÊµÏÖ
£¬ÕâÑùÓÐÀûÓÚVPNµÄ¹æÄ£À©´ó
£¬Äܹ»ºÜÈÝÒ×ʵÏÖÔö³¤Ò»¸öеÄVPN»òÕßÊÇеÄÕ¾µã²ÎÓëµ½Ò»¸öÏÖÓеÄVPNÖС£

 

    Ö§³ÖµØÖ·³Áµþ£¨·ÖÆçVPNÄܹ»Ê¹ÓÃÒ»ÑùµÄµØÖ·¿Õ¼ä£©¡£

 

    ÔÚ·þÎñÌṩÉ̵ÄÍøÂçÖÐ
£¬VPNµÄÒµÎñÁ÷ʹÓñêÇ©»¥»»×ª·¢¶ø²»ÊÇ´«Í³µÄ·ÓÉת·¢¡£

 

    ¿ÉÄÜΪÆóÒµÌṩ¾ß±¸×¨Ïß¼¶°²È«±£ÏյĻ¥Áª¹æ»®¡£

 

    Äܹ»ÀûÓÃMPLS¼¼ÊõʵÏÖÁ÷Á¿¹¤³Ì
£¬Ö§³ÖÓû§µÄ¸÷ÀàQosÐèÒª¡£

 

    Ïà½ÏÓÚ´«Í³·½Ê½
£¬»ùÓÚMPLSµÄVPNÔÚ¿ÉÀ©´óÐÔ¡¢·þÎñÖÊÁ¿ºÍ°²È«ÐԵȷ½Ãæչʾ³öÏÔÖøÌصã¡£Òò¶øMPLS VPN¼¼ÊõÊǽ«À´¹¹½¨VPNµÄ·¢Õ¹·½Ïò
£¬»áÔ½À´Ô½Êܵ½¿Í»§ºÍÔËÓªÉ̵ĹØ×¢¡£