Multiprotocol Label Switching And Its Application In Telecom

High-speed, muti-services and economy have become the major issues of the futUreIP backbone technology As far as thes poiflt is concerned, thes paPer explores layer 3switdrig technology Which seParates control comPonent and fOrward comPontal in thetraditional roulers. TWo forwarding al gori thms -- - -d ata-driven mo d el and top olo gy drivenmodel are also comPared, a next generation IP backbone echno l o gy-- - - Multiproto co lLabel Switching is developed, with its operation and its dePloyInent in traffic engineering,c1ass-ofservce and virtual private network.As a new techLnology VPN enormously decrease the cost and comPlexity ofconstrUcting netWork and make network maintenance simPle. hi this thesis the IPthasedVPN is analyZed in-dePth, inc1uding the tecboques and tenns of imPlemoting IPbasedVPN, and two VPN imPlernentation mode1f Overay-model and Integration-model.Protocols that suPport overaymodel VPN---- L2TP, PPTh and IPSec are explained, andmethod of implementing integration-model VPN and areLS VPN are also explained. Inaddition, compallng of Anplementaton, security flexibility scalability and suPport ofQoS betWeen these tWo models is provided.At the saxne time, meLS VPN----a solution for integrated model is discussed indetail, including network comPonents of MPLS VPN and its operation mode. There arealso some problems that must be solved to build a MPLS VPN, such as customer addressspace overaPping, netWork accessibility constraini, VPN route uPdating, saving ofbackbone bandwidth, reducing of complexity of PE rooters and accessing Internet fromVPN, etc. MPLS VPN can solve all the problems, as well as bring us some values inscalability, imPlemotation and maintenance.Security, too, is a key issue for switching the traditional Private Nforork to VPN.Security of MPLS WN architeCtUr is analyZed thorouguy in this thesis, includingseptheion of address space and route, hiding of the MPLS core smictUre, resistance ofattacks, impossibi1ity of 1abe1 spoofing. As a concIusion, MPLS VPN architect'Ure canprovide the same level of security as a comParable ATM or Frame Relay servces. Inaddition, some enhancemenis in secwity are introduced, such as securing MPLS core,interconneCtions between VPNs and Intemct access, using firewall, combinjng of MPLSand if Sec and remote access to an MPLS VPN. Wth these enhancementS, MPLS VPNII2can rePlace traditional private networks undoubtedlyFinally, by the experience in consmicting Telecom network, the author tel1s us thefeasibility and great sitwficance of the MPLS VPN.