Research On Application Of MPLS VPN In IP Carrying Network And Security Policy

With the development of society and human being, the demand on telecommunication services is gradually increasing. The traditional carrying network failed to keep up with the requirement of new services. The IP carrying network is leading the development of next carrying network. It can carry multi services such as voice, video, data, web, email and so on. Meanwhile, the IP carrying network offers QoS and traffic engineering. It has good scalability and compatibility. The research on techniques of IP carrying network is becoming hot spots in telecom industry.The MPLS VPN technology is the key technology in the IP carrying network. The IP carrying network based on MPLS VPN technology can support multi-protocol encapsulations, and it is compatible with the existing telecommunications network. The MPLS VPN can separate different services and transmit data form different VPN through public backbone network. But it is’t flawless, there is a debate on the security of MPLS VPN when transmitting data. Based on the technology of MPLS VPN, servel ideas were put forward as follow.(1) The principle of MPLS was researched in this paper. The feasibility of building IP carrying network with the technology of MPLS VPN was analized, and the examples were given to explain the method.(2) Aiming at IP carrying network based on MPLS VPN, the guarantee measures of link redundancy and backup that took use of state-machine was proposed. With master-to-slave shift policy, when the network fault happens, the failed links will be substituted by the normal links, and it is seamless handoff.(3) Aiming at IP carrying network based on MPLS VPN, the function of interworking is proposed. Different packets were handled by LSMN(link service manage) module. When the users take different method to access network, various kinds of datagrams such as FR, ATM and PPP will be turned into MPLS datagram, so that the users can communicate with each other.(4) Verifying the availability and efficiency of the two functions mentioned above by the network simulation software.(5) It points out the hidden danger of data layer after analizing the existing security measures of MPLS VPN, and then puts forward MPLSSec security framework. The MPLSSec security framework provides encryption and authentication for data layer by taking use of AH, ESP and IKE, and it is suitable for both MPLS L2VPN and MPLS L3VPN.