Method for realizing secure communication of any two ends of the internet in DMVPN

Abstract

The invention discloses a method for realizing secure communication of any two ends of the internet in DMVPN by applying a flow segmentation technique. The method utilizes the DMVPN to construct a topThe invention discloses a method for realizing secure communication of any two ends of the internet in DMVPN by applying a flow segmentation technique. The method utilizes the DMVPN to construct a topological network which adopts mGRE technology communication equipment at the center and parts and takes star-shaped structure as primary and network-shaped structure as supplement; the network ensuresological network which adopts mGRE technology communication equipment at the center and parts and takes star-shaped structure as primary and network-shaped structure as supplement; the network ensures the communication security by setting IPSEC; an NHRP protocol is utilized to lead the parts to communicate mutually and directly; and the NHRP protocol is extended and the extension header in the NHRthe communication security by setting IPSEC; an NHRP protocol is utilized to lead the parts to communicate mutually and directly; and the NHRP protocol is extended and the extension header in the NHRP protocol is used for completing flow segmentation. In the practical application, the invention can provide that enterprises can realize secure communication of all end points in the internet with loP protocol is used for completing flow segmentation. In the practical application, the invention can provide that enterprises can realize secure communication of all end points in the internet with low price, thus replacing the original two-layer access with expensive cost (such as ISDN and the like), and solving the high rentals or complex network configuration maintenance in the original applicaw price, thus replacing the original two-layer access with expensive cost (such as ISDN and the like), and solving the high rentals or complex network configuration maintenance in the original application.tion.

Description

Technical field: [0001] The invention relates to the technical fields of network security and data communication, in particular to a method for implementing secure communication at any two ends of the Internet by applying traffic segmentation technology in DMVPN (Dynamic Multipoint VPN, Dynamic Multipoint Virtual Private Network). Background technique: [0002] At present, for some companies whose headquarters, branches, and offices are scattered in various places, they need a secure network to interconnect them so that any two points can communicate. The initial solution is to rent some expensive two-layer access methods (such as ISDN, etc.). But in comparison, a cheaper and more flexible way of communication is to use Internet access and use IPSEC encryption to ensure security. [0003] IPSEC (Security Architecture for IP network) is a point-to-point encrypted tunnel. The network composed of arbitrary point-to-point encrypted tunnels between the headquarters and branches...

AI Technical Summary

Problems solved by technology

So as to replace the original costly Layer 2 access (such as ISDN, etc.), and solve the high rental fee or complicated network configuration and maintenance in the original application

Images