Mpls Vpn Security And Its Applied Research In Guizhou Power Dispatch Data Network

Nowadays computer network has been an important part of the modern life. With the development of the technology of network, people want more requirements to the computer network: quick,security,cheap,quality and service. MPLS (Multi-Protocol Label Switching ) ,as a important technology of NGN, is the best method of combine of the ATM and IP, which can meet these requirements very well. The important application of MPLS: VPN (Virtual Private Network) is becoming as the preferred scheme of building a computer network to more and more the providers of network service,large-scale enterprises and government, it becomes. However, comparing with the traditional private network, the deficiency of acknowledges to the security of MPLS VPN baffles its development and application, and actually, there exists some problems in the security of MPLS VPN. Now, it becomes a hotspot that how to settle these problems.This paper begins from the technologies of MPLS and VPN, then studies on the MPLS VPN in detail, and makes analysis on the security of it. Through these works, this paper gives the aspects of the security of MPLS VPN: address space and routing separation,hiding of the core infrastructure,resistance to attacks and resistance to label spoofing; and then gives some schemes and methods to deal with the security problems such as: set the static route to the PE-CE,control the routes which ingress the VRF,set ACL(access control list),neighbor router authentication and combine with IPSec. It turns out enhancing the security of the MPLS VPN and having some meanings in theory and reality.From above studies of MPLS VPN to an actual application of a computer network, it makes this paper more enrich and actual meaning. This paper makes the acknowledge to the GuiZhou power dispatch data network which is building now in detail, and makes the study to settle the problems of applying MPLS VPN in the network according to the actual requirements and circumstances. This paper gives some corresponding schemes to deal with such problems: division of VPN. application of the function of Multi-VRF. how all kinds of nodes connect to MPLS network, the choice of route for PE-CE. set route reflector and spanning MPLS VPN between different AS.