本文已被:浏览 1761次 下载 3168次
Received:August 19, 2013 Revised:September 25, 2013
Received:August 19, 2013 Revised:September 25, 2013
中文摘要: 针对传统VPN(Virtual Private Network)技术构建的企业网络存在扩展、地址冲突、互访控制难于实现等问题. 本文提出一种面向集成的VPN构建思路. 在分析这些问题产生原因的基础上,集成思路的基本思想是将有效的解决方案进行集成,以解决VPN构建中出现的不同问题. 该思路采用MPLS解决隧道扩展性问题,采用BGP解决站点间地址冲突及访问控制的问题. 为了评估该设计方法的性能,本文在企业网络中应用该思想构建了实际的企业VPN. 实际运行结果表明,采用该方法构建的VPN在扩展性、站点间地址冲突、访问控制等方面要优于传统技术.
Abstract:Enterprise network constructed through VPN technology has many problems including scalability, device address confliction, difficulty in realizing mutual access control. As to the problems, the paper proposes the idea of constructing an integrated VPN which integrate the effective solutions in order to solve different problems on the basis of making analysis on the reasons for these problems. The idea also solves the problem of tunnel scalability by MPLS and gets the solution to address confliction and access control by BGP. In addition, In order to evaluate the performance of this design method, it applies the idea to construct actual VPN in enterprise network. Practice result has proved this method is superior to VPN technology in scalability, device address conflict, access control, and VPN technology.
文章编号: 中图分类号: 文献标志码:
基金项目:国家863计划项目(2009AA010314);国家科技支撑计划项目(2012BAF12B20);湖南省教育厅资助项目(13C1051)
引用文本:
陶志勇,王如龙,张锦.面向集成的VPN构建策略.计算机系统应用,2014,23(4):23-28
TAO Zhi-Yong,WANG Ru-Long,ZHANG Jin.Construction Strategies Aimed at Integrated VPN.COMPUTER SYSTEMS APPLICATIONS,2014,23(4):23-28
陶志勇,王如龙,张锦.面向集成的VPN构建策略.计算机系统应用,2014,23(4):23-28
TAO Zhi-Yong,WANG Ru-Long,ZHANG Jin.Construction Strategies Aimed at Integrated VPN.COMPUTER SYSTEMS APPLICATIONS,2014,23(4):23-28