Message forwarding method and provider edge (PE) equipment for multi-protocol label switching virtual private network (MPLS VPN)

Abstract

The invention provides a message forwarding method and service provider edge (PE) equipment for a multi-protocol label switching virtual private network (MPLS VPN). Corresponding relationships between IPsec strategies and VPN instances are configured in advance in the PE equipment in the MPLS VPN, so that data messages can be decapsulated by MPLS, encrypted by directly using corresponding IPsec strategies and forwarded by a customer edge (CE) equipment side physical interface; or after being received from the CE equipment side physical interface, the data messages are decrypted by the IPsec strategies, correspondingly decapsulated by the MPLS and forwarded by a P router side interface. The method and the PE equipment are realized more simply and conveniently without performing complex tunnel interface configuration and occupying an additional Internet protocol (IP) address.

Description

technical field [0001] The invention relates to network communication technology, in particular to a message forwarding method and service provider edge (PE) equipment in a multi-protocol label switching virtual private network (MPLS VPN). Background technique [0002] Multiprotocol Label Switching (MPLS)-based Virtual Private Network (VPN) is a Layer 3 VPN technology based on Provider Edge (PE) equipment, which uses Border Gateway Protocol (BGP) to advertise VPN routes on the service provider backbone network. Use MPLS to forward VPN packets on the service provider's backbone network. In view of the flexible networking mode of MPLS VPN, good scalability, and convenient support of MPLS QoS and MPLS traffic engineering (TE), it has been widely used. [0003] Such as figure 1 As shown, there are mainly three types of equipment in the MPLS VPN network: customer network edge (CE) equipment, PE equipment and backbone (P) routers. Wherein, the CE device may be a router, a switc...

AI Technical Summary

Problems solved by technology

This method is obviously not suitable for MPLS VPN networking with a large number of CE devices, because it will cause too many IPsec tunnels and the performance pressure of CE devices will be too great

[0006] The second method is to establish an IPsec tunnel between the PE device and the CE device based on the virtual tunnel interface, establish a tunnel interface for each connected CE device on the PE device, and configure VPN routes for each tunnel interface. Obviously, this method Complex tunnel interface configuration is required, and the configured tunnel interface needs to occupy more IP addresses

Images