MPLS VPN and its control and forwarding method

Abstract

The present invention discloses a Virtual Private Network (VPN), which includes: a Sub-Provider Edge (SUB_PE), configured in a customer's network and connected with a PE in a provider's network; at least one SUB_VPN belonging to a same customer is configured under the SUB_PE and accesses the provider's network through the SUB_PE. The present invention also discloses a method for controlling and forwarding route of the VPN, including: an SUB_PE or a PE adds an export target attribute of the VPN where it is located to the route before transmitting; after receiving the route, the SUB_PE or the PE compares the export target attribute in the route with the import target attribute saved by itself, if they match, accept the route and forward it to a lower layer VPN; otherwise, reject the route.

Description

technical field [0001] The invention relates to the communication field, in particular to the multi-protocol label switching virtual private network networking technology. Background technique [0002] Virtual Private Networking (Virtual Private Networking, referred to as "VPN") refers to the establishment of a private network in a public network, and data is transmitted in the public network through a secure "encrypted channel". Enterprises only need to rent a local data dedicated line to connect to the local Internet (Internet), and institutions in various places can transfer information to each other; Can be connected to enter the enterprise network. The use of VPN has the advantages of saving costs, providing remote access, strong scalability, easy management and full control. [0003] Multi-protocol Label Switching (MPLS for short) is an Internet Engineering Task Force (IETF for short) evolved from Tag Switching of Cisco (CISCO). standard protocol. MPLS is a label-b...

AI Technical Summary

Problems solved by technology

[0034] In practical applications, the above solution has the following problems: non-independence and security issues - that is, the customer does not exist as an independent VPN, but exists as a small VPN within multiple users on the operator's PE equipment; and the user does not have The independent right to adjust the relationship between several internal VPNs must be operated by the operator; in addition, it is precisely because the several internal VPNs of the user are operated and managed by the operator, which will cause security problems in the user's internal network. Said that the operator's misconfiguration of the user's VPN will cause the traffic between several internal networks of the user to be forwarded incorrectly

[0035] Heavy burden, high cost, and high expense--the number of VPNs on the operator's PE equipment increases correspondingly with the division of the user's internal VPN, resulting in an increase in the burden on the operator's PE equipment, resulting in an increase in the operator's operating costs; On the one hand, for each internal VPN that the customer divides on the operator's PE equipment, an independent access link or sub-link is required, which leads to an increase in the cost of the user's use of the operator's VPN network

Images