Deployment method and system for MPLS/BGP three-layer virtual private network

Abstract

The invention discloses a method for allocating a multi-protocol label switching (MPLS) / border gateway protocol (BGP) three-layer virtual private network (VPN) and a system thereof. The method comprises the following steps: step 1, dividing command nodes on transmission equipment; step 2, setting different privilege levels for four divided command nodes, and dividing users into four privilege levels corresponding to the command nodes, wherein, only a user with the privilege level thereof higher than the privilege level of a certain command node can log in the transmission equipment to operatethe command node; step 3, evenly distributing and managing user names and passwords; and step 4, judging the common node operated by the user is corresponding to the privilege level of the user. The system comprises a command node dividing module, a privilege level distribution module, a password management module and a judgment module. The method and the system can effectively reduce the number of equipment in the three-layer VPN, simplify the organizational framework of the three-layer VPN and improve the networking flexibility during the network extension process.

Description

technical field [0001] The present invention relates to MPLS (Multiprotocol Label Switching, multi-protocol label switching) / BGP (Border Gateway Protocol, Border Gateway Protocol) VPN (Virtual Private Network, virtual private network) field, particularly relate to a kind of MPLS / BGP three-layer virtual private network Deployment method and system. Background technique [0002] With the development of the network economy, enterprises put forward higher and higher requirements for the construction of their own networks, mainly in terms of network flexibility, economy, and scalability. In this context, VPN has won the favor of more and more enterprises with its unique advantages. A private private network built using a public network is called a virtual private network (VPN). The VPN established on the public network provides security and manageability like the existing private network of the enterprise. Among all VPN technologies, MPLS VPN has good scalability and flexibili...

AI Technical Summary

Problems solved by technology

With the increase of VPN user sites connected to the Layer 3 virtual private network, it is necessary to continuously add CE devices, such as figure 2 As shown, an additional CE device needs to be added on the P device side to communicate with other CE devices in the second VPN user site VPN2. To add a PE device, this will cause the virtual private network to be too large and complicated

Images