Enhanced VPN network optimization method and apparatus

Abstract

The enhanced VPN optimization method comprises: (1) on network device access port, mapping the VLAN label of user data frame into VPN ID according to physical port; (2) transferring former data frame in network; (3) on output port, mapping the data frame with VPN ID into the one with user VLAN label for transmission according to the output physical port. This invention can be used for 4K*4K VPNs and uses two layer of VLAN label for user business type mark in one VPN.

Description

technical field [0001] The present invention relates to the technical field of network communication, in particular to an enhanced VPN (Virtual Private Network, virtual leased line) network optimization method and equipment. Background technique [0002] A local area network in the same physical form can be divided into multiple VLANs (Virtual Local Area Network, Virtual Local Area Network), and each VLAN cannot be directly accessed, but can only be accessed through a routing device, which can improve the security and reliability of the network. VPN (Virtual Private Networks, Virtual Private Network) technology is a technology that transmits a private network through a public network. Through this technology, private networks in different locations can be connected, which is a cheap and efficient method. Currently commonly used Layer 2 VPN technologies include V-switch technology (VLAN switching technology, a technology that uses VLAN label switching for forwarding), QinQ te...

AI Technical Summary

Problems solved by technology

[0004] However, the use of V-switch to implement VPN has the following disadvantages: (1) it can only realize point-to-point VPN; (2) it needs to rely on manual If it is a device, it needs to be configured on each device, and it cannot be self-routing and forwarding after configuration at the entrance of the operator's network; (3) The final exchange of VPN user services is not performed, that is to say, no VPN user services are performed. MAC address learning and MAC address forwarding

[0013] However, MPLS-based VPN technology requires devices to support MPLS labels, which puts forward higher requirements for devices; in addition, it requires users to mark the same service within the same VPN must be globally unified, which cannot be achieved in different The location (meaning the different exits of the equipment) and the VLAN values ​​in the form of business signs are different, which brings difficulties to the realization of the VPN network; finally, because the VPN signs and the service signs inside the VPN are configured by the operator and the enterprise customer respectively, the same Cannot be done centrally by one party

Images