Theory and Implementation of BGP/MPLS VPN

W. Zhongmin,Chen Junhua

Abstract:The technology of VPN provides a secure reliable manageable Internet service for scattered departments.This paper illustrates the application field and network structure of BGP/MPLS VPN,discusses the producing course of routing information and the transmitting course of data information in BGP/MPLS VPN.

Computer Science,Engineering

What problem does this paper attempt to address?

Experimental Design and Teaching Research of a MPLS VPN Network Based on BGP

Jun Tao,Huan-pin Chen,Huamin Liu,Xingxing She

DOI: https://doi.org/10.1109/ICEIT57125.2023.10107884

2023-03-16

Abstract:after expounding the concepts of MPLS VPN and BGP, the advantage of MPLS VPN is described, subsequently a computer network experiment based on MPLS VPN and BGP is designed. The experiment includes three parts: network topology design, IP address planning and configuration implementation. First, the experiment is simulated through the simulator, and then the network is constructed with real physical equipment. After the experiment, the corresponding evaluation can be obtained immediately, and all network parameters are tested normally. Through the completion of this experiment, the teaching has achieved good results.

Computer Science,Engineering
Solution to VPN and Authentication System

LI Jian-jun,XU Duan-qing,GUO Wei-qing

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.09.068

2005-01-01

Abstract:Combining with living examples and based on IPSEC,the realization of the VPN system was approached in many internet circumstances of remote access(such as gateway,broadband,xDSL etc.),and in view of the deficiency and the hidden troubles of the traditional static password,introduces a working mechanism was introduced which took into consideration both the tokencard two factor authentication and Windows AD,and proveds to be flexible and liable for the single-sign on clients.
Implementation of Provider Edge Router in MPLS VPN

朱斌,陈文正,张朝阳

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.11.049

2003-01-01

Abstract:This article introduces the architecture and working theory of MPLS VPN. Specially, it emphasizes the implementation of provider edge router in MPLS VPN.
Research on Key Technology of VPN Centralized Management Based on SNMP

黄勇,陈小平,潘雪增,陈红洲,蒋晓宁

DOI: https://doi.org/10.16208/j.issn1000-7024.2008.09.057

2008-01-01

Abstract:Under the WAN environment,large-scale VPN networks is effectively and safely managed by long-distance centralized mana-gement system based on SNMP.To solve the flaw of topology discovery,a method in which agent initiates registry to the server is pro-posed.After analysis of the SNMPv3 security features,the public key authentication mechanism is introduced and the procedure of key negotiation is discussed in detail.For poor reliability and real-time data transmission of UDP-based SNMP,a strategy of configuration based on XML is given,which is proved to be feasible and efficient by the result of experiment at last.
Design and Implementation of Enterprise Information Network Based on MPLS VPN

Duan Quan

Abstract:The advantages and disadvantages of MPLS VPN over traditional VPN are compared. The methods using MPLSVPN technology interconnecting all branch offices and factories across regions through an enterprises network are described. With reduced networking complexity and cost, MPLS VPS provides the capability to deliver private network services over a shared infrastructure.

Computer Science,Engineering
A Novel Approach to Improve the Performance of MPLS-based VPN

YH Geng,Q Sun,YZ Chen,NH Yu

DOI: https://doi.org/10.1109/korus.2004.1555266

2005-01-01

Abstract:The IP-based virtual private network (VPN) technology is now becoming a good solution for the delivery of future Internet services, and multiprotocol label switching (MPLS) technology is being adopted to offer VPNs and some value-added applications on top of VPN transport networks. In this paper, we proposed a novel approach based on using label stack properly to reduce the label size efficiently. In this way, the performance of MPLS-based VPN can be improved. Our simulation results validated our approach, demonstrating that MPLS-based VPN established by our approach has a better performance.
Study of BGP Secure Scheme Based on Divide and Conquer Strategy

WANG Bin,AN Jin-liang,WU Chun-ming,LAN Ju-long

DOI: https://doi.org/10.3969/j.issn.1000-436x.2012.05.012

2012-01-01

Journal of Communications

Abstract:A new approach was studied for BGP security:SE-BGP.By analyzing the security of SE-BGP,was found it had some secure leaks which couldnt resist active attack.To solve these secure problems of SE-BGP,an AS-alliance-based secure BGP scheme :SA-BGP was proposed,which used the aggregate signatures algorithm based on RSA.The SA-BGP has strong ability of security that can effectively verify the propriety of IP prefix origination and verifies the validity of an AS to announce network layer reachability information (NLRI).SA-BGP can large-scale reduced the number of the used certificates.Performance evaluation results that SA-BGP can be implemented efficiently and the incurred overhead,in terms of time and space,ptable in practice.
Solution of VPN on MPLS Backbone Networks

赵鹏,罗平,刘蓓洁

DOI: https://doi.org/10.3321/j.issn:0372-2112.2002.z1.027

2002-01-01

Abstract:Currently, most VPNs are based on Internet Protocol which has disadvantages in speed, expansibility and quality of service etc. Accordingly, we bring forward a solution of VPN on Multiprotocol Label Switching (MPLS) backbone network. We introduce Certificate Authority (CA) in this solution because both MPLS and IPSec haven't made a clear definition of authorizing identity. Taking advantages of MPLS in transporting efficiency, authorizing identity by CA, exchanging keys by Internet Key Exchange Protocol (IKE) and encrypting data by IPSec protocol, we construct a secure and efficient VPN on MPLS backbone network. Furthermore, we describe the realization of every component of MPLS VPN in detail.
A VPN Solution Based on IPSec and MPLS

郑刚,周源远,张福炎

DOI: https://doi.org/10.3969/j.issn.1001-3695.2003.10.030

2003-01-01

Abstract:This paper explores the advantages and disadvantages of IPSec VPN and MPLS VPN according to VPN requirements, and puts forward a VPN solution integrated with IPSec and MPLS, which is aimed to get the advantages of the two techniques.
Virtual Private Networks Constructed by the Combination of IPSec & L2TP

朱昌盛,余冬梅,王庆梅,谢鹏寿,包仲贤

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.11.041

2002-01-01

Abstract:The advent of VPN makes it possible for enterprises to transform private confidential massage securely and economically through the Internet. Security tunneling technology is the core technology of VPN, while L2TP IPSec are two tunneling technologies most widely used at present. As the two main accesses to IP network, the combination of L2TP IPSec can share the advantage of L2TP's low cost, initiative, mutual-communication and IPSec's high security, reliability，learn from others' strong points to offset one's weakness, to a great extent, to construct a secure, reliable and low-cost VPN.
Application Research of MPLS VPN and VR Panoramic Technology in Virtual Network of Party School System

Su Wang

DOI: https://doi.org/10.1145/3419635.3419726

2020-09-18

Abstract:In the context of rapid social progress, information and network technology are also in rapid development, and the current integrated routing/switching solution is the best application of MPLS technology, the reason is that it has its own unique advantages, that is, according to its own flexibility and simplicity of the characteristics of the IP path seamless link. Let the advantages of the switch and router perfectly merge. In general, IP technology has the characteristics of flexibility and scalability. When these characteristics are matched with the flow control and high-performance functions of ATM technology, the combination of the two is enough to be a hot topic in the current industry. The basic idea is to Label a data stream with a short Label. According to the label, the network node will know the characteristics such as the destination of the data stream and can complete the datagram forwarding after a series of processing. In this article through the thought of, in-depth studies are based on MPLS VPN technology in the construction of engineering efforts to complete the whole project, set out to solve the related technical problems of VPN based on MPLS technology platform, the platform based on MPLS technology of VPN technology ASIC project completion, the current society has put the chip into production. It lays a solid foundation for network operators in the construction of virtual private network. Nowadays, the main direction of VPN development is IP virtual private network (IP/VPN) based on MPLS. In this paper, the working principle and technical characteristics of MPLS VPN are briefly introduced, and three specific access methods of using MPLSVPN technology to build virtual private network of party school systems are introduced in detail.
A MPLS and VPN Based Egovernment System

Yongming Wei,Zhiyi Fang,Zhiming Dai,Xiao Han,Fengyuan Xu

DOI: https://doi.org/10.1109/cic.2006.12

2006-01-01

Abstract:This paper analyses the technology of Virtual Private Network (VPN) and Multi Protocol Label Switch (MPLS), introduce the principles and characteristic of MPLS, especially network hierarchy framework theories of MPLS VPN, and implementation in an eGovernment System.
Study on BGP Security

LI Song,ZHUGE Jian-Wei,LI Xing

DOI: https://doi.org/10.3724/sp.j.1001.2013.04346

2013-01-01

Journal of Software

Abstract:BGP is a core Internet routing protocol.The Internet inter-domain routing relies on the exchange of BGP routing information.BGP has significant vulnerabilities,which have been found to cause problems such as prefix hijacking,route leak and Internet-targeted denial of service attack.First,by analyzing BGP route propagation and BGP routing policies,the fundamental flaw in the design of the protocol is revealed.The paper then discusses possible threats to BGP and presents a route leak model,which contributes to the description of its characteristics.Second,the existing defense mechanisms for BGP security are generalized,and their shortcomings are exposed.The paper then classifies various BGP security-enhancing technologies and studies them in detail to explore their advantages and disadvantages.Finally,the research trends of BGP security are discussed in this paper.
Security Architecture Design of VLAN and VPN Technology-based Enterprise Network

Chen Yan-dong

Abstract:With the expanding scale of the enterprise network,VLAN and VPN technology is applied to the construction of the enterprise network.VLAN is a logical network established in accordance with the management functions on the basis of the physical network through technical means.VPN technology is to rely on the ISP to establish a dedicated data communication network technology in public online.Article a brief description of the VLAN and VPN technology,combined with a coal company VLAN and VPN technology in the enterprise network.

Computer Science,Engineering
Technology of MPLS Routing

潘胜发,刘广义,林孝康

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.10.061

2002-01-01

Abstract:简述了IP网络面临的问题，介绍了一种解决IP问题的新技术－多协议标签交换(MPLS)的基本原理及其路由技术。着重研究用基于约束条件的显式路由实现流量工程的方法，提出了对传统路由的改进措施。
Implement MPLS in VxWorks

Wenwu Zhu,Pla Uni

2003-01-01

Abstract:MPLS(Multiprotocol Label Switching)is a popular network technology, which combines the advantage of lay 3 routing and lay 2 switching. And it is regarded as one of the core technologies of broadband IP network in the future. In this article the key technology of MPLS is discussed firstly. Then MPLS in VxWorks, which is a real time operating system is implemented. The key technolgoy that is implemented includes label forwarding, label distribution protocol and label management module etc.
BGP Convergence in Virtual Private Networks

Dan Pei,Jacobus E. van der Merwe

DOI: https://doi.org/10.1145/1177080.1177117

2006-01-01

Abstract:Multi-protocol label switching (MPLS) virtual private networks (VPNs) have had significant and growing commercial deployments. In this paper we present the first systematic study of BGP convergence in MPLS VPNs using data collected from a large tier-1 ISP. We combine several data sources to produce a methodology to accurately estimate routing convergence delays. We discovered an iBGP version of BGP path exploration, and show that the route invisibility problem occurs frequently and is one of the most significant contributing factors to BGP convergence delay in the VPNs we studied. We therefore propose and evaluate several configuration changes that can be employed to greatly improve the routing convergence time and minimize the connectivity disruption in the face of network changes.
P2P-VPN Virtual Network Model Analysis

XIAO Zhensha,LIN Chuang,YANG Ran,PANG Ling

2009-01-01

Abstract:With the popularity of the P2P technology,the security problem on P2P network has attracted more and more attention.To address the issue,a model called P2P-VPN virtual network framework is proposed,which sets up a virtual network group according to the specific application.The framework is not only to achieve the secure P2P transmission,but also to apply P2P technology to the local area network applications.The completeness of security mechanism of P2P-VPN is proved by Petri Nets and some other formal methods.The simulation results from the prototype system show that although the framework introduces a series of security processing procedure,it will not cause significant decline in data transfer rate.
BGP-LS with Multi-topology for Segment Routing Based Virtual Transport Networks

Jie Dong,Cong Li,Chongfeng Xie,Zhenbin Li

2020-01-01

Abstract:Enhanced VPN (VPN+) as defined in I-D.ietf-teas-enhanced-vpn aims to provide enhanced VPN service to support applications's needs of enhanced isolation and stringent performance requirements. VPN+ requries integration between the overlay VPN and the underlay network. A Virtual Transport Network (VTN) is a virtual network which consists of a subset of the network toplogy and network resources allocated from the underlay network. A VTN could be used as the underlay for one or a group of VPN+ services. I-D.dong-idr-bgpls-sr-enhanced-vpn defines the BGP-LS extensions to distribute the information of Segment Routing (SR) based VTNs to external entities, such as the network controllers. This document describes a simplified mechanism to distribute the information of SR based VTNs using BGP-LS with Multi- Topology.
BGP Route Analysis and Management Systems

Alex A. Stewart,Marta F. Antoszkiewicz

DOI: https://doi.org/10.48550/arXiv.0908.0175

2009-08-03

Networking and Internet Architecture

Abstract:The Border Gateway Protocol (BGP) is an important component in today's IP network infrastructure. As the main routing protocol of the Internet, clear understanding of its dynamics is crucial for configuring, diagnosing and debugging Internet routing problems. Despite the increase in the services that BGP provide such as MPLS VPNs, there is no much progress achieved in automating the BGP management tasks. In this paper we discuss some of the problems encountered by network engineers when managing BGP networks. We also describe some of the open source tools and methods that attempt to resolve these issues. Then we present some of the features that, if implemented, will ease BGP management related tasks.

Theory and Implementation of BGP/MPLS VPN

Experimental Design and Teaching Research of a MPLS VPN Network Based on BGP

Solution to VPN and Authentication System

Implementation of Provider Edge Router in MPLS VPN

Research on Key Technology of VPN Centralized Management Based on SNMP

Design and Implementation of Enterprise Information Network Based on MPLS VPN

A Novel Approach to Improve the Performance of MPLS-based VPN

Study of BGP Secure Scheme Based on Divide and Conquer Strategy

Solution of VPN on MPLS Backbone Networks

A VPN Solution Based on IPSec and MPLS

Virtual Private Networks Constructed by the Combination of IPSec & L2TP

Application Research of MPLS VPN and VR Panoramic Technology in Virtual Network of Party School System

A MPLS and VPN Based Egovernment System

Study on BGP Security

Security Architecture Design of VLAN and VPN Technology-based Enterprise Network

Technology of MPLS Routing

Implement MPLS in VxWorks

BGP Convergence in Virtual Private Networks

P2P-VPN Virtual Network Model Analysis

BGP-LS with Multi-topology for Segment Routing Based Virtual Transport Networks

BGP Route Analysis and Management Systems