The Design And Implementation Of Next Hop Resolution Client Base On NHRP Protocol

The VPN(Virtual Private Network) technology has been more and more applied to enterprise networking solutions, VPN technology can provide virtual network through the public network, The company can build their own private network through VPN while reducing business costs also meet the business needs of information security. With the size of the network increases, The traditional VPN technology has faced more and more problems. Such as the maintainability and scalability of the network is relatively poor, It can not support dynamic IP and other issues. In particular, if there are many branches in the enterprise networking scenarios, the network configuration workload is huge, whenever the brance changes we have to modify the related configurations. For large networks, it is intolerable.We proposed DVPN(Dynamic Virtual Private Network) solution to overcome the shortcomings of traditional VPN. The program consists of NHRP(Next Hop Resolution Protocol) protocol, GRE protocol and IPsec protocol three protocols. There are two roles NHS(Next Hop Server) and NHC(Next Hop Resolution Protocol client) in DVPN networking solutions, NHS corresponds to the central node, NHC corresponds to the branch node. This paper discusses the design and implementation of the NHC. NHRP protocol support for dynamic IP by the mapping between NBMA address and protocol address. It provides virtual tunnel through multipoint GRE technology, The IPsec security framework for encrypted data can complete a full DVPN networking solutions. The DVPN can solve the problems in the scenarios of many branch, The DVPN solution can support for dynamic IP addresses and easy expansion, if we increase branches, we do not need to change the configuration of the central node, it supports virtual mesh connectivity between branch node and other advantages. On the basis of describes basic concepts of common VPN, and IPsec VPN technology GRE technology and NHRP protocol technology we analyze tnetworking system and the demand of NHC. After we the complete of the division of NHC module and introduces the design and implementation of each module. The last part introduces the system test, the system lists the test items, and gives the system test the key features of the system.After completion of system development, we set up the test in the local network environment, simulated users are using scenario testing. Test results show that the system meets achieve the desired results. NHC branch node supports dynamic IP access networks. NHC can establish a permanent tunnels between the NHS, if there is data to send to the peer NHC, it will create a temporary tunnel between the NHC, it can reduce transmission delay. Branch network to meet the needs of many enterprise networking scene. You can achieve large-scale network deployment.