Dynamic virtual private network (DVPN)-based route generation method and equipment

Abstract

The invention discloses a dynamic virtual private network (DVPN)-based route generation method and DVPN-based route generation equipment. The method comprises the following steps that Hub and Spokes send login request messages to a virtual private network (VPN) address management (VAM) server, wherein a public network address, a private network address and a sub-network network segment which correspond to the Hub are carried in the login request message sent by the Hub, and public network addresses, private network addresses and sub-network network segments which correspond to the Spokes are carried in the login request messages sent by the Spokes; the Spokes and the Hub receive login success response messages from the VAM server respectively; after receiving the login success response messages, the Spokes send tunnel establishing request messages to the Hub, wherein the sub-network network segments corresponding to the Spokes are carried in the tunnel establishing request messages; Hub generates a route by utilizing the sub-network network segments corresponding to the Spokes; the Spokes receive a tunnel establishing success response message of the Hub, wherein the sub-network network segment corresponding to the Hub is carried in the tunnel establishing success response message; and the Spokes generate routes by utilizing the sub-network network segment corresponding to the Hub. By the embodiment of the invention, the consumption of system resources for routing computation on the Hub and the Spokes can be reduced.

Description

technical field [0001] The present invention relates to the field of communication technologies, in particular to a DVPN (Dynamic Virtual Private Network, Dynamic Virtual Private Network)-based route generation method and device. Background technique [0002] More and more enterprises hope to use the public network to set up a VPN (Virtual Private Network, virtual private network) to connect multiple branches in different geographical locations; Know the public network address of the peer in advance. For this reason, DVPN collects, maintains and distributes dynamically changing public network address information through the VAM (VPN Address Management, VPN Address Management) protocol, which solves the problem of not being able to obtain the peer public network address in advance. [0003] Such as figure 1 As shown, it is a schematic diagram of a DVPN network, including: VAM Server (server), Hub (central point, which can be used as a routing information exchange center in ...

AI Technical Summary

Problems solved by technology

However, when there are a large number of branches in a network, the operation and status maintenance of OSPF or BGP will consume a lot of system resources of Hub and Spoke.

For example, when the link between a Spoke and Hub fails, OSPF or BGP will trigger all Spokes and Hubs in the network to recalculate routes, which will consume a lot of system resources of Hubs and Spokes (the system resources are used for route calculation )

Images