【作者】 黄葳；

【导师】 何怡刚；

【作者基本信息】 湖南大学 ， 电工理论与新技术， 2007， 硕士

【摘要】 IP VPN(虚拟专用网络)就是指利用IP设施(包括共用的Internet或专用的IP骨干网等)实现专用广域网设备专线业务(远程拨号、DDN等)的业务仿真。IP VPN构建在开放的IP网(Internet)上,通过IP网建立私有数据传输通道。VPN业务为企业提供二层或三层虚拟专用网互连。如果企业采用专用线路构建企业专网,往往需要租用昂贵的专线。虚拟专用网(VPN)技术是一个很好的解决方案。在北美和欧洲,VPN已经是一项相当普遍的业务。在亚太地区,该项服务也迅速开展起来。在国内,各大电信运营商为了在新的竞争中抢占先机,都开始对用户提供IP VPN业务。自90年代开始,VPN网络的研究在世界范围内已经取得卓有成效的研究成果,并逐渐形成了比较系统的理论,确立了它在网络理论中应有的地位。经过近20年的发展,VPN技术已日渐成熟,但这种技术存在不足,即运营商和客户的网络都比较脆弱,发生故障后不容易恢复,从而带来了维护和应用的困难。传统的专线业务由于价格昂贵、对用户接入要求高等因素不能很好适应业务的发展。本文主要研究了IP VPN理论和设计的方法以及利用IP VPN技术在湖南电信宽带IP网上实现VPN的可行性和实际意义。特别是对VPLS网络环路故障产生的各种原因进行了详细的探讨,提出了一种快速方法处理VPLS环路故障,实践结果表明此方法诊断故障准确、快速,减少了局部故障对整个网络的影响,是切实可行的。本文对湖南VPLS网络的维护、环路故障的避免、广播风暴的抑制提出了一些有效的方法。本文对VPDN技术原理进行了分析,重点研究了湖南体彩VPDN的实现:LNS的组网、业务实现流程,并对VPDN业务维护中的问题进行了分析。本文对基于IPSec技术的E通VPN进行了研究,重点研究了E通VPN的组网应用,并对E通VPN与其他VPN技术进行了比较,结果表明E通VPN提供业务方式便利,并且组网模式更加灵活。本文最后对IP VPN网络的指标进行了研究,通过对指标的统计,得出了IP VPN的技术在湖南电信网络的应用是成功的结论。更多还原

【Abstract】 IP VPN(Virtual Private Network) make use of IP facility (including INTERNET or IP backbone network ) to realize private service simulation in(Wide Area Network) WAN(including Long-distance Dial-up or Digital Data Network). IP VPN establish private data-transmission tunnel through INTERNET. VPN technology provide the second-layer and the third-layer interconnections for enterprises. Physical private network is secure, but it is expensive.VPN is a very good solution. In North America and Europe, VPN already was a quite common service. In the Asian and Pacific area, this service also grow rapidly .In domestic markets , telecommunication business start to provide VPN service in order to keep ahead in the new competition .VPN begin in the 90’s, have obtained fruitful progeny all over the world, and gradually formed systemic theory, established it’s status in the network theory, and come to maturity after 20 years development. But the technology has an inadequacy to deal with fault because service provider and enterprises network is very frangible, especially network breaks down not easy to restore.It has brought destruction to the maintenance. Traditional private line service don’t fit in with the development because of expensive rent and consumer intricacy .This paper research mainly design method of IP VPN technology and explore the feasibility and practical meaning of implementing VPN in Hunan telecommunication broadband IP network by utilizing IP VPN technology.This paper study the cause of VPLS(Virtual Private LAN Service) loop fault in detail ,and then introduces a method of solving VPLS loop fault . the paper make some feasible suggestion of VPLS network maintenance、VPLS loop fault avoider and broadcast storm restrainability. Fault diagnosis is very accurate by practice result. The method was practical and feasible reduced the partial failure to the entire network influence.This paper research the VPDN(Virtual Private Dialup Network) technology principle particularly and expatiate on Hunan VPDN realization including the LNS、the service realization and the VPDN service maintenance.This paper research E-VPN based on IPSec(IPSecurity) technology deeply and expatiate on Hunan E-VPN realization. The paper draw a comparison between E-VPN to the other VPN technology, finally indicate that E-VPN is more flexible and convenient. In the end, this paper research the performance index of IP VPN.The whole performance test for IP VPN prove the realization of implementing VPN in Hunan telecommunicatio broadband IP network by utilizing IP VPN technology.更多还原