虚虚虚虚虚 VPN 虚
Juniper Networks, Inc. Copyright © 2001 - Proprietary & Conf
dential
虚虚虚虚
虚虚虚虚虚 VPN 虚虚虚
虚虚虚虚虚 BGP/MPLS VPN 虚 RFC
2547bis 虚
虚虚虚虚虚虚虚 MPLS VPN
虚虚
虚虚虚虚
VPN 虚虚
Juniper Networks, Inc. Copyright © 2001 - Proprietary & Conf
dential
虚虚虚
VPN 虚虚
VPN 虚虚
虚虚 CPE 虚 VPN
虚虚虚虚虚虚虚 VPN
IETF 虚虚虚虚
虚虚虚
VPN 虚虚
VPN 虚虚
虚虚 CPE 虚 VPN
虚虚虚虚虚虚虚 VPN
IETF 虚虚虚虚
虚虚虚 VPN 虚
虚虚虚虚
虚虚虚虚虚虚虚
虚虚虚虚虚虚虚
虚虚虚虚虚
虚虚
虚虚虚虚
虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚 – 虚虚虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚
90 虚虚虚虚虚 VPN
虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚
DLCI
DLCI
虚虚虚虚虚虚
DLCI
CE
CE
虚虚虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚虚虚
PVC 虚虚虚虚虚虚虚虚虚虚 ATM/ 虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚“虚虚”
虚虚
虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚 IP 虚虚虚虚
Juniper Networks, Inc. Copyright © 20
CE
CE
21 虚虚虚虚虚 VPN
虚虚虚虚
虚虚虚虚虚虚虚
虚虚虚虚虚虚虚
Internet
虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚虚虚
虚虚 IP 虚虚虚虚
虚虚虚 Internet 虚虚虚虚
IP/MPLS 虚虚虚虚 ATM/FR 虚虚虚虚虚虚虚虚虚
虚虚虚虚
虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚虚虚虚
虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚
虚虚
虚虚 VPN 虚虚不不虚虚虚虚虚虚虚
虚虚虚虚
虚虚虚
虚虚虚
虚虚虚
虚虚虚虚虚虚
虚虚虚虚虚虚
100
100
100
100
100
100
0
0
0
0
0
0
虚虚虚虚虚虚虚虚虚 VPN 虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚 VPN 虚虚虚虚
Juniper Networks, Inc. Copyright © 20
VPN 虚虚虚虚
PP-VPN
CPE-VPN
CPE
CPE
PE
虚虚
PE
虚虚
虚虚 3
VPN
CPE
VPN 虚虚
虚虚
虚虚 3
CPE
虚虚虚虚虚 VPN 虚虚虚虚虚 CPE-VPN 虚
V
P
N
PE
L2TP 虚 PPTP
IPsec 虚虚虚虚
虚虚虚虚虚虚 VPN 虚虚虚虚虚 PP-VPN 虚
CPE
虚虚 BGP/MPLS 虚 VPN 虚 RFC 2547bis 虚
虚虚虚虚虚
虚虚 MPLS VPN
Juniper Networks, Inc. Copyright © 20
虚虚
虚虚 1
VPN 虚虚
PE
PE
虚虚
虚虚 2
虚虚
VPN 虚虚
VPN
虚虚
虚虚
虚虚 1
PE
虚虚
虚虚 2
CPE
虚虚虚
VPN 虚虚
VPN 虚虚
虚虚 CPE 虚 VPN
虚虚虚虚虚虚虚 VPN
IETF 虚虚虚虚
CPE-VPN 虚 L2TP 虚 PPTP
V.x 虚虚虚虚虚
虚虚虚虚
虚虚虚
虚虚虚虚虚虚虚
PPP 虚虚
L2TP
虚虚虚虚虚
L2TP 虚虚
虚虚虚虚
虚虚虚
虚虚虚虚虚虚 VPN
PPTP 虚虚
虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚 L2TP 虚
RFC 2661
L2F 虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚 PPTP 虚
虚 Windows 虚 Windows NT 虚虚
虚虚虚 IPsec 虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
PPTP
虚虚虚虚虚
CPE-VPN 虚 IPsec 虚虚虚虚
IPsec 虚虚虚 IETF 虚虚虚虚虚虚虚虚虚
虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚
虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚
虚虚虚虚虚
虚虚虚虚虚虚虚虚虚
虚虚虚虚
Juniper Networks, Inc. Copyright © 20
CPE-VPN 虚 IPsec – 虚虚
虚虚 Internet
虚虚虚虚
虚虚虚虚虚
CPE
CPE
IPsec ESP 虚虚虚虚
虚虚虚虚虚 CPE 虚虚虚
虚虚虚虚虚虚虚虚
虚虚 CPE 虚虚虚虚虚虚 IPsec
虚虚虚虚虚虚 / 虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚 ESP 虚虚虚虚虚
虚虚虚虚虚虚虚 CPE 虚 CPE 虚
虚虚虚虚虚虚虚 / 虚虚虚虚虚虚 Internet
虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
IPsec 虚虚
虚虚 Internet
虚虚虚虚
虚虚虚虚虚
CPE
CPE
IPsec ESP 虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚 IP 虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚 QoS/SLA
虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚虚
VPN 虚虚
VPN 虚虚
虚虚 CPE 虚 VPN
虚虚虚虚虚虚虚 VPN
IETF 虚虚虚虚
虚虚虚虚虚虚虚 VPN 虚
虚虚虚虚虚虚虚
虚虚
虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚 VPN 虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚
虚虚虚虚虚虚虚虚虚虚
CPE 虚虚虚虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚 PP-VPN 虚
RFC 2547bis
虚虚 1
虚虚虚虚虚虚虚
CE
PE
PE
P
VRF
CE
VRF
虚虚 3
VRF
虚虚 2
CE
CE
P
P
P
CE
虚虚 3
VRF
VRF
虚虚 2
CE
PE
P
VRF
PE
虚虚虚虚虚 VPN
PE 虚虚虚虚虚虚 VPN 虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚 IP 虚虚
虚虚 BGP 虚虚 VPN 虚虚
虚虚 MPLS 虚虚虚虚虚虚虚虚虚 VPN 虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚 1
虚虚 PP-VPN 虚
RFC 2547bis
虚虚 LDP 虚 RSVP 虚虚 PE 虚 PE 虚虚虚虚虚虚虚虚 LSP 虚
BGP 虚虚虚虚
VPN 虚虚虚虚虚虚虚虚
VPN 虚虚虚虚虚虚虚
虚虚 VPN LSP 虚虚虚虚虚虚虚 PE-PE LSP 虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚 PP-VPN 虚
虚虚虚虚虚
PE 虚虚虚虚虚虚虚虚虚虚虚 IP 虚虚虚
虚 VPN 虚虚虚虚虚虚
PE 虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
PE 虚虚 VR 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚 MPLS 虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚虚虚虚虚虚虚
VPN 虚虚虚虚
虚虚虚虚虚虚
虚虚虚虚虚 BGP 虚虚虚虚 LDAP 虚虚虚虚
虚虚虚虚虚虚虚虚不不虚虚虚虚
虚虚虚
虚虚 VR 虚虚虚虚
虚虚虚虚虚虚虚虚“虚虚虚虚”
虚虚虚虚
虚虚 2547bis 虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚 PP-VPN 虚虚
虚虚
虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚 VPN 虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
3 虚 PP-VPN 虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚
Juniper Networks, Inc. Copyright © 20
虚虚 MPLS 虚虚虚 PP-VPN
虚虚虚虚虚虚 (CCC)
Draft-Martini 虚虚 VPN
Draft-Kompella 虚虚 VPN
Juniper Networks, Inc. Copyright © 20
虚虚虚虚虚虚虚 CCC 虚
CCC = 虚虚虚虚虚虚
CCC 虚
虚虚
“ 虚虚虚虚虚虚”
( 虚虚虚虚 )
LSP1 DLCI 605
CE
虚
DLCI
600
虚虚虚
虚虚
10.0.0.0
LSP 1
PE
PE
虚虚
IP/MPLS 虚虚
DLCI
610
虚虚
“ 虚虚虚虚虚虚”
( 虚虚虚虚 )
虚虚
PE
PE
CCC 虚
虚虚
LSP 2
虚虚
10/8 DLCI 600
DLCI 600 LSP 1
20/8 DLCI 610
DLCI 610 LSP 2
DLCI CE
605
DLCI
608
CE
CCC 虚
虚虚
虚虚
LSP2 DLCI 608
虚虚虚 MPLS 虚虚虚 VPN 虚虚虚虚
CPE 虚 PE 虚虚虚 FR/ATM 虚虚
虚虚虚虚虚虚虚 PE 虚虚 LSP 虚虚虚虚虚
CPE 虚虚虚虚 /PVC 虚虚虚 VPN 虚虚虚虚虚虚
虚虚 PE 虚虚虚虚虚 PVC 虚虚虚虚虚虚虚 LSP
虚虚 PE 虚虚虚虚 LSP 虚虚虚虚虚 PVC
Juniper Networks, Inc. Copyright © 20
20.0.0.0
“ 虚虚虚虚虚虚”
( 虚虚虚虚 )