面向集成的VPN构建策略

针对传统VPN（Virtual Private Network）技术构建的企业网络存在扩展、地址冲突、互访控制难于实现等问题. 本文提出一种面向集成的VPN构建思路. 在分析这些问题产生原因的基础上，集成思路的基本思想是将有效的解决方案进行集成，以解决VPN构建中出现的不同问题. 该思路采用MPLS解决隧道扩展性问题，采用BGP解决站点间地址冲突及访问控制的问题. 为了评估该设计方法的性能，本文在企业网络中应用该思想构建了实际的企业VPN. 实际运行结果表明，采用该方法构建的VPN在扩展性、站点间地址冲突、访问控制等方面要优于传统技术.

Construction Strategies Aimed at Integrated VPN

Enterprise network constructed through VPN technology has many problems including scalability, device address confliction, difficulty in realizing mutual access control. As to the problems, the paper proposes the idea of constructing an integrated VPN which integrate the effective solutions in order to solve different problems on the basis of making analysis on the reasons for these problems. The idea also solves the problem of tunnel scalability by MPLS and gets the solution to address confliction and access control by BGP. In addition, In order to evaluate the performance of this design method, it applies the idea to construct actual VPN in enterprise network. Practice result has proved this method is superior to VPN technology in scalability, device address conflict, access control, and VPN technology.