Method and device for implementing inter-access between virtual private networks by conversion of network addresses

Abstract

The invention discloses a method for realizing exchange of visits by transforming NAT through network address among VPNs of a virtual private network. The method comprises the steps as follows: firstly, shared VPNs and a corresponding NAT address pool are configured, and the routing information of the NAT address pool is released to all VPNs; secondly, when a data packet visit is initiated in a source VPN, NAT of both the source address and the destination address are transformed according to the NAT address pool, and destination VPN is determined according to the destination address or the transformed destination address; finally, the routing transmission of the data packet is carried out in the destination VPN. The invention also discloses an NAT device that realizes exchange of visits among VPNs. By applying the method and the device that realize exchange of visits through NAT among VPNs of the invention can conveniently realize exchange of visits among VPNs; moreover, the method and the device of the invention have simple configuration and management and high security.

Description

Method and device for mutual access between virtual private networks through network address translation technical field The present invention relates to the field of network technology, in particular to a method and a device for mutual access between VPNs (Virtual Private Network, Virtual Private Network) through NAT (Network Address Translation, Network Address Translation). Background technique With the rapid development of Internet technology, the use of MPLS (Multiple Protocol Label Switch, multi-protocol label switching) to provide users with L3VPN (Layer3VPN, Layer 3 VPN) has become increasingly common. Network isolation, but at the same time, due to the needs of practical applications, there may be a need for mutual access between different VPNs. At present, direct mutual access between multiple VPNs can be realized by ensuring that the address allocation between VPNs is globally unique, but this solution requires unified planning when the network is set up, and m...

AI Technical Summary

Problems solved by technology

The purpose of the present invention is to provide a method and device for mutual access between VPNs through NAT, so as to solve the problems in the prior art that the realization of mutual access between VPNs is complicated, and the configuration and management are difficult

Images