Research Of Supanet Tunnel Technology

There are too many layers in User-data platform (U-platform) for the current Internet Architecture, and the efficiency of transmission is low and difficult to guarantee Quality of Service (QoS). With the increasing of multimedia data in Internet and the merging trend for cable TV networks, telephone networks, and the computer networks, the traditional "best effort" Internet service is no longer satisfactory. Single physical layer User-data switching Platform Architecture (SUPA) is proposed by SiChuan Network Communication Technology Key Laboratory to solve those problems, and SUPANET means the network applies SUPA architecture.Like other network technologies, SUPANET is facing various threats in security. In the U-Platform SUPA finishes the task of forwarding data in the high speed, but it does not consider too much about the security of data transmission. Then, tunnel technology can effectively improve the security of data transmission and ensure data transmitting safely in SUPANET.SUPANET tunneling technology is researched in this thesis , and Ethernet-oriented Physical Frame Security (EPFSec) structure is proposed to protect the security of data in SUPANET. EPFSec is made up of 4 modules: configuration interface, key exchange protocol, Security Policy Database (SPD), Security Association Databases (SAD). EPFSec provide end-to-end authentication services and encryption services between tunnel source-end and tunnel destination-end in SUPANET. While the authentication service can be used in Singal&Management-platform(S&M-platform) and U-platform, encryption services can only implement in U-platform. Based on Ethernet-oriented Physical Frame Timeslot Switching (EPFTS), a simple analysis and design of SPD and SAD are carried out, encapsulation and decapsulation of authentication and encryption are mainly discussed and carefully designed, and subsequently the application of EPFSec authentication service to set up and remove the VPN tunnel has been studied. Finally, SUPANET tunnel is simulated in OPNET. With a simplified SUPANET topology, using QoSNP combining with EPFSec authentication services, the paper presents a simulation on the protocol control message, tunnel resources reservation and release. The simulation results are basically in accord with EPFSec authentication services and QoSNP protocol flow, which has validated the feasibility and correctness of this solution.