Service carrying method and router

Abstract

The invention provides a service carrying method and a router. The method comprises the following steps that: at the second stage of IPSec (Internet Protocol Security) tunnel negotiation, a first router sends a first ISAKMP (Internet Security Association and Key Management Protocol) message to a second router, wherein the first ISAKMP message carries an identification of the capability of the first router carrying L2VPN (layer 2 virtual private networks) services through an IPSec tunnel; the first router receives a response message returned by the second router according to the first ISAKMP message; and if the response message carries the identification of the capability of the second router carrying L2VPN services through the IPSec tunnel, the first router carries the L2VPN services through the IPSec tunnel. The method is used for solving the problem that the IPSec tunnel is incapable of carrying the L2VPN services in the prior art.

Description

technical field [0001] The embodiments of the present invention relate to the communication field, and in particular, to a service bearing method and a router. Background technique [0002] Layer 2 Virtual Private Networks (L2VPN for short) and Layer 3 Virtual Private Networks (L3VPN for short) based on Layer 2 protocols are more commonly used Virtual Private Networks (Virtue Private Network, VPN for short) technology enables users to establish a private network across regions by establishing a suitable tunnel on the public network. The main difference between the L2VPN and L3VPN technologies is that the L2VPN technology retains the Layer 2 header of the user packet, while the L3VPN technology strips the link layer header of the user packet and only retains the IP header of the user packet. [0003] Internet Protocol Security (IPSec for short) is an open IP layer security framework protocol formulated by the Internet Engineering Task Force (IETF). End-to-end encryption and...

AI Technical Summary

Problems solved by technology

[0007] In view of this, the embodiment of the present invention provides a service bearing method and a router to solve the problem that the IPSec tunnel cannot bear the L2VPN service in the prior art

Images