Method and equipment for obtaining dynamic route

Abstract

The invention provides a dynamic route obtaining method and equipment thereof, wherein the method is applied to local terminal equipment and opposite terminal equipment which are connected by using an IPSec channel of the three-layer tunneling encryption protocol; the method comprises the following steps: after the IPSec tunnel is successfully created, the local terminal equipment generates a routing message according to the routing information of the local terminal equipment; the local terminal equipment sends the routing message to the opposite terminal equipment by the IPSec tunnel; the routing message carries the routing information of the local terminal equipment; and the local terminal equipment receives a routing message carrying the routing information of the opposite terminal equipment sent by the opposite terminal equipment through the IPSec tunnel and obtains the routing information of the opposite terminal equipment. In the invention, the routing message is used for transmitting the routing information of two ends of the IPSec tunnel, thus realizing the dynamic route alternation of the two ends of the IPSec tunnel.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method and equipment for obtaining dynamic routes. Background technique [0002] VPN (Virtual Private Network, Virtual Private Network) is a new technology developed rapidly with the wide application of Internet (Internet) in recent years, which is used to realize the construction of private private network on public network. The specific realization of VPN is to adopt the so-called tunnel technology, and the tunnel encapsulates the original data packet inside the new data packet. New data packets can contain new addressing and routing information, which enables new data packets to be transmitted on the network. When the tunnel is combined with confidentiality, people who eavesdrop on the communication on the network will not be able to obtain the original packet data, ensuring the security of data flowing on the public network. [0003] In the actual application of VPN, IPS...

AI Technical Summary

Problems solved by technology

[0013] However, the Tunnel interface method used in the prior art has relatively large changes to the data transmission method of the IPSec tunnel, and it is necessary to specify the public network IP addresses of the local end and the peer end of the IPSec tunnel. When the public network IP address of one end of the IPSec tunnel is dynamic Obtaining, or when there is NAT (Network Address Translation) in the carrier network, the public IP address of the peer cannot be accurately obtained, and this method cannot be used

Images