Design And Implementation Of BGP/MPLS VPN Based On AAA

Traditional VPN using the tunnul protocol of the second layer (L2TP,L2F and PPTP) or the tunnul technology of the third layer (IPSec,GRE) has achieved great success and been widely applied. However, with the extention of the application of VPN, the extensibility and the administration of the traditional VPN is becoming more and more deficient.With MPLS technology, it would realize the operation of VPN on IP easily and satisfy the requirement of the extensibility and the administration of VPN. MPLS VPN implements various kinds of VPN with a single access point. Each kind of VPN represents an operation, which enables the network transmit different operations flexibly.AAA provides a consistent frame for the three kinds of safety function, authentication, authorization and accounting. It is a kind of management for network safety. RADIUS is a kind of protocol for the implement of AAA. At present, the scheme of RADIUS defaultly configure the server address as the public address, not supporting the server with private address of VPN. If the server is placed in a private network, it cannot realize AAA.In this thesis, I firstly summarize the basic content and the elementary characteristic of RADIUS protocol, and then study the key technology of the implement of MPLS VPN and the system structure of AAA. On the basis of theory analying, I put forward a way of implementing the support of MPLS VPN on AAA, which makes use of the socket and the configurate manage module to implement the configuration and the application of the support of server with private address under the scheme of RADIUS.Currently, the system has been designed completely, and been applied for the agriculture bank of Hebei Province. It is stable, flexible and achieves the design requirement in every aspect.