Research On Virtual Private Network For Hierarchically Switched Networks

With the explosive growth of its scale and the user number of evolving to internet services, the Internet become future information infrastructure .New application requirement and the achievement of new modern communication technology are driver force for the convergence of Data, Voice and Video,we call it triple play. so the triple play's carrying layer is IP technology. But IP as carrying layer is based on the self discipline,free,lack of management, it is not a profit business model and adaptive next generation internet. So we must carry on some essential reformation for the architecture of the Internet. Therefore, Professor Qian Hualin put forward the idea of Hierarchically Switched Networks (HSNet), HSNet introduces hierarchy into network topology and the address structure, and establishes a one-to-one mapping between the network topology and the address structure. The Data, Voice and Video convergence trend require core network high speed forwarding and intelligent multi protocol service edge, this kind of network have not only traffic isolation and quality of service(QOS) for different services but also end to end IP individuation. The development of IP Virtual private network(VPN) just meet the requirement of next generation telecommunication carrying layers sa far, and provide value added application at same time. This dissertation addresses the mechanisms of HSNET IP VPN.This dissertation is divided into three parts: First part is basic concept and standard of VPN and reference model, we compare between traditional VPN and MPLS VPN and address problem of expansibility. Second part is about HSNET VPN concept design model which include network reference model design, implementation and VPN QOS and security. Third part mainly give a HSNET IPsec line card concept design and survey of security hardware acceleration design. The main contributions of this dissertation can be summarized as follows: The dissertation analysis MPLS protocol and point out the problem of expansibility when it practical implement with full mesh LSP, which is also a motivation for this dissertation.The dissertation address a HSNET VPN basic infrastructure and implementation firstly.HSnet pure tree topology benefits border node aggregation, we assign our HSNET Hierarchical access address and the VPN identity also include in the address. This facility make egde node distinguish VPN traffic easily, accelerate VPN forwarding efficiency and avoid the problem of expandability because of connect-oriented LSP.A11 VPN traffic is transparency for the end user and core P node. The dissertation also discuss end user VPN traffic auto aware mechanism, find a trade-off solution for network node central control and decentralize control.The dissertation validate HSNET VPN IPsec protocol, build the IP VPN host to host,...