Three-layer virtual private network (VPN) access method and system

Abstract

The invention discloses a three-layer virtual private network (VPN) access method. In the method, access networks access the three-layer virtual private network (VPN) through internet protocol (IP) pseudowires. The method comprises: the mapping relationship between the IP pseudowires and virtual routing and forwarding (VRF) tables is established on the provider edge (PE) equipment connected with the three-layer VPN and the access networks; when receiving IP messages from the IP pseudowires, the PE equipment searching the mapping relationship for VRF tables corresponding to the IP pseudowires and forwards IP messages in the three-layer VPN according to the VRF tables searched out and the target IP addresses of the IP messages; and when receiving the IP messages from the three-layer VPN, the PE forwards the IP messages to the IP pseudowires corresponding to the target IP addresses of the IP messages according to the target IP addresses of the IP messages. The invention also discloses a three-layer VPN access system. The three-layer VPN access method and the three-layer VPN access can improve the expandability of the access networks and lower the complexity of the PE equipment.

Description

technical field [0001] The invention relates to a virtual private network (VPN) access technology in network communication, in particular to a three-layer VPN access method and system. Background technique [0002] Virtual Private Network (VPN, Virtual Private Network) technology has been widely used in the data communication field. Operators provide private network services for large enterprises, small and medium enterprises, governments, and education industries through VPN technology. [0003] Currently, there are mainly two types of VPN technologies commonly used, namely Layer 2 VPN technology and Layer 3 VPN technology. Layer 2 VPN technology provides users with Layer 2 connections, and Layer 3 VPN technology provides Layer 3 connections. Layer 2 VPN technology has high security and low management complexity for operators, but it also has high requirements for users to maintain their own virtual network. It is suitable for those who have sufficient ability to maintain n...

AI Technical Summary

Problems solved by technology

The second method not only saves the number of PE devices, but also saves the number of physical ports, but the problem is that the requirements for the two logical ports are very high, and the layer-2 logical port needs to support the restoration of the layer-2 message; The layer logical port needs to support the decapsulation of the layer 2 information of the message, that is, the device still needs to support the decapsulation of the layer 2 message corresponding to various media physical networks, and the processing capability of the PE device is still required

[0009] Therefore, when the existing technology implements the Layer 3 VPN connecting the access network to the aggregation / core network, there are still problems such as low scalability of the access network and high complexity of PE equipment.

Images