Research On Technology Of SUPANET VPN Based On EPFTS

With increase of multimedia application traffic in Internet, the "best effort" service provided by Internet has been entrenched in satisfying users' QoS(Quality of Service) requirements, Moreover, network nodes (routers and switches) have faced with challenges both in QoS provisioning and switching capability when bit-rates in a single fiber has been raised to a few orders of magnitude higher. The existing IP network can not meet the requirement of high-speed integrated services, because IP network has too many layers in User-data Plane to be efficient and is difficult to guarantee QoS. This has spurred the activity of developing the Single physical layer User Platform Architecture Network (SUPANET) at Sichuan Network Communication Technologies key Laboratory (SC-Netcom Lab). The SUPANET simplifies the user-data transfer and switching platform into a single physical layer, which can greatly improve efficiency as well as QoS provisioning for user-data in the U-platform while remains interoperable with existing Internet.One of the main goals for SUPANET is to improve QoS in networks. However, the security and reliability are both important in QoS negotiation. VPN (Virtual Private Network) could provides a secure and reliable connection in SUPANET .It is not only an implement to setup connection and access in wide area, but also an implement to intensify the security and management of network. It is quite important in application for the enterprises and other special department.In this dissertation, a research on the VPN in SUPANET has been carried out. this dissertation analyses the existing VPN technologies. After that, the network topology of the SUPANET VPN has been studied, and the QoSNP(QoS Negotiation Protocol) of the SUPANET Signaling & Management platform is extended to VPN_QoSNP. Discussion in this dissertation is also focused o.n the format of the VPN_QoSNP and the encapsulation process of the EPT.By VPN_QoSNP, SUPANET VPN can establish a SUPANET VPN tunnel based on QoS provisioning, and map the VLI inside and outside of the tunnel by EPT encapsulation to ensure the security of the EPF transfer in the tunnel. In the VPN_QoSNP, two modes of tunnel establishment has been defined, Single Data-Stream Transfers (SDST) and Multi-Data-Stream Transfers (MDST). In this dissertation, both the two modes have been designed in Twice Single-Direction Negotiation (TSDN) flow, and the maintenance and breakout of the SUPANET VPN tunnel were analyzed.VPN_QoSNP is simulated with the network simulation software OPNET as well as theoretically researched in this paper. With a simplified SUPANET VPN topology, the paper presents a simulation on the tunnel resources reservation and protocol control message, and the simulation results are basically in accord with VPN_QoSNP protocol flow, which validate the availability and efficiency of the protocol.