CN100479457C - Implementation method for transferring data in virtual private network - Google Patents

Implementation method for transferring data in virtual private network Download PDF

Info

Publication number
CN100479457C
CN100479457C CNB200410034762XA CN200410034762A CN100479457C CN 100479457 C CN100479457 C CN 100479457C CN B200410034762X A CNB200410034762X A CN B200410034762XA CN 200410034762 A CN200410034762 A CN 200410034762A CN 100479457 C CN100479457 C CN 100479457C
Authority
CN
China
Prior art keywords
data
address
vpn
network
mbuf
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB200410034762XA
Other languages
Chinese (zh)
Other versions
CN1697445A (en
Inventor
于勇
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNB200410034762XA priority Critical patent/CN100479457C/en
Publication of CN1697445A publication Critical patent/CN1697445A/en
Application granted granted Critical
Publication of CN100479457C publication Critical patent/CN100479457C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Abstract

First, the method sets up Mbuf and SOCKET of containing RD at PE in SP backbone network, and makes relevant setting for related list items saved in PE. Then, data communication is carried out between data to be transmitted and CE in VPN based on IP address and RD taken by the said data to be transmitted. The invention solves issue of duplicate name of PE interface address. Thus, if different VPN networks based on MPLS possess superposed IP addresses on interface relevant to PE, data through the superposed IP addresses sent from CE are also receivable, and data through the IP address can be sent to CE. The invention saves resources of IP address, and raises flexibility of planning network by users so as to represent advantages of VPN network.

Description

A kind of method that realizes transfer of data in the virtual private networks
Technical field
The message that the present invention relates to the Internet (Internet) receives and transmission technology, relates to a kind of method that realizes transfer of data in the virtual private networks (VPN) or rather.
Background technology
Along with the Internet network user's expansion, the IP address is more and more in short supply as a kind of resource, and the user is also more and more higher to the requirement of the fail safe of network and manageability, and traditional Internet network can not satisfy user's needs.At this situation, the VPN based on Multi-Protocol Label Switch (MPLS) has appearred in industry, and this network begins by sizable application.
Figure 1 shows that typical case's application based on the VPN network of MPLS.Under this pattern, provide VPN service by Internet Service Provider (SP) to the user, the existence of the imperceptible public network of user just looks like to have had that independently Internet resources are the same.Equally, the P router of SP backbone network inside is not known the existence of VPN yet, only is responsible for the transfer of data of backbone network inside.The structure of all VPN, connection and management are all carried out on Internet Service Provider edge (PE).From the angle of PE, a website (Site) is the IP system of user's a connection, and Site is the elementary cell that constitutes VPN, and VPN is the set of Site.Each Site among the same VPN is connected with Internet Service Provider edge (PE) among the SP by subscriber equipment (CE), and the data among each VPN all are to propagate on public network by CE and PE.But the data among each VPN can only be transferred to this VPN, and can not be transferred to other VPN.
For for the VPN of MPLS, any two do not have the VPN of common Site can use overlapping address space, promptly in user's private network, use oneself independently address space, and need not consider self whether with the address space conflicts of other VPN or public network.This brings great convenience to operator and enterprise network networking: do not need all IP address fields reasonably to be allocated to private user through the approval of inter network information center when networking, and do not need to worry private net address section and the overlapping problem of public network address section.
In VPN, based on different types of attachment, transfer of data has two kinds of situations, and a kind of is directly to connect between the Site among the VPN, and the data among this Site are directly in the internal transmission of VPN; Another kind is that the two or more Site among the VPN connect by PE, also is that two or more CE connect by SP, then needs between these Site by PE transmission data.For latter event, comprise that the SP of PE only is used for the data of transfer Site, because each VPN in the VPN network has a unique corresponding with it structure Route Distinguisher (RD, Route-Distinguisher), and preserved the RD information of the pairing VPN of each interface among the PE, therefore, PE is when the data of sending by certain interface reception CE, even there are other interfaces identical with the IP address of this interface among the PE, PE also can determine the residing VPN of this CE according to the pairing RD of the interface of current reception data.PE is when giving CE with data forwarding, even there is the identical interface in a plurality of IP address in this PE, and current needs transmit data by certain interface wherein, if have only this PE between these two CE, then this PE can directly obtain corresponding RD according to the VPN that determines before, and, can transmit data by this interface afterwards according to the interface that the purpose IP address of data and this RD determine to transmit data; Directly be not connected if between these two CE be not with same PE, in other words, these two CE connect by two PE at least, in this case, because the equipment of SP inside can be provided with the corresponding label of RD information with the corresponding CE of these data place VPN when interim data, and according to this label interim data, therefore, the PE of receiving terminal can according to this label determine to receive data CE the RD of corresponding VPN, thereby can determine self to be used to transmit the interface of current data according to this RD.
For the situation that CE is connected with PE, also exist CE directly to send the data to PE, and PE directly send the data to the situation of CE, both of these case requires PE that data are correspondingly processed, rather than simply transmits data.Because present Internet realizes according to transmission control protocol and Internet protocol (TCP/IP), ICP/IP protocol requires each node on the Internet all must have a unique IP address corresponding with it, node among the Internet is by the visit of IP address realization to other nodes, also promptly, the basis of ICP/IP protocol stack is exactly the uniqueness of each node IP address in the network.Under the situation that interface IP address in PE repeats, if PE receives CE by certain interface and sends to the data of oneself, and repeat the IP address of this interface and the IP address of other interfaces, though then this PE can determine these data from which VPN are sent, but, since can only be according to purpose IP address process data among the PE based on the application program of ICP/IP protocol, therefore, this PE can't handle CE by application program and send to the data of oneself; If PE sends the data to CE by certain interface, and repeat the IP address of this interface and the IP address of other interfaces, though then this PE knows which VPN to send data to, but same because can only be according to purpose IP address process data based on the application program of ICP/IP protocol among the PE, so this PE can't send to specific VPN with these data by specific interface by application program.
In sum, though the IP address of interface repeats can not impact the PE interim data among the PE, but because existing ICP/IP protocol stack can only transmit and receive data by the IP address, therefore, if the situation of address overlap appears in the interface of PE, then can cause PE correctly data to be sent to CE, also can't correctly receive CE and send to the data of oneself.For present VPN network, have only PE to go up the address setting of the interface corresponding for having nothing in common with each other with different VPN with backbone network, this PE could be fully transfers data to corresponding VPN according to the IP address of its own interfaces, and receives the data that VPN sends.That is to say that present VPN network can not give no thought to the address assignment situation of other VPN when the distributing IP address.Obviously, can't embody the advantage that the VPN network can be realized the IP address overlap fully like this.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of method that realizes transfer of data in the virtual private networks, when making PE interface IP address last and that the different VPN network is corresponding identical, also can correctly send the data to CE, and reception CE sends to the data of oneself.
For reaching above purpose, technical scheme of the present invention is achieved in that a kind of method that realizes transfer of data in the virtual private networks, VPN is connected with the backbone network of SP, preserve among the PE of backbone network self each interface the RD of corresponding VPN, this method may further comprise the steps:
A. in PE, be provided with corresponding and comprise the memory buffer Mbuf and the socket SOCKET of the RD information of VPN, in the forwarding-table item of PE preservation, the combination of each purpose IP address and RD and the corresponding relation of transmit port are set with VPN;
B.PE is when sending the data to CE, the application layer of PE is obtained the destination address relevant information that comprises purpose IP address in the current data that need to send at least, this destination address relevant information is set among the pairing SOCKET of RD with this CE place VPN, SOCKET handles these data, after will handling afterwards, comprise that the data of destination address relevant information and RD send to transport layer by Mbuf;
The transport layer of c.PE is handled the current data that need to send of preserving among the Mbuf, and the data after will handling send to network layer by Mbuf;
The network layer of d.PE is obtained the transmit port that this secondary data sends according to the purpose IP address and the RD of the data that the current needs of preserving among the Mbuf send from the forwarding-table item of self preserving, and the next-hop ip address and the corresponding RD that determine the transmission of this secondary data, and this next-hop ip address and RD be arranged among the Mbuf, afterwards the current data that need to send are sent to link layer by Mbuf;
E. link layer obtains the corresponding hardware address according to next-hop ip address among the Mbuf and RD from the ARP list item, and it is encapsulated in the current data that need to send, afterwards these data are sent to next-hop ip address and the pairing equipment of RD by physical link.
Transmit data based on Transmission Control Protocol in the TCP ICP/IP protocol stack or User Datagram Protoco (UDP) UDP between the backbone network of described VPN and SP;
This method may further include: the corresponding relation of preserving purpose IP address and RD and source IP address in the routing table of PE;
Among the step b, further comprise in the destination address relevant information that the application layer of described PE is obtained: the destination slogan;
Among the step c, the transport layer of described PE is handled the current data that need send of preserving among the Mbuf and comprised: purpose IP address and RD according to these data determine corresponding source IP address from the routing table of self preserving, and select a source port number that is not used, afterwards this source IP address and source port number are arranged in these data.
Between the backbone network of described VPN and SP based on the initial IP RAWIP protocol transmission data in the ICP/IP protocol stack.
In the described steps d, the network layer of described PE further comprised before the current data that need send are sent to link layer by Mbuf: judge whether preserved source IP address in these data, if then continue to carry out subsequent treatment; Otherwise, determine source IP address according to the transmit port that is obtained, this source IP address is arranged in these data, carry out subsequent treatment afterwards again.
This method can further include: if link layer does not have the ARP list item, then PE determines dynamic mapping between purpose IP address and RD and the hardware address according to the ARP agreement, and these mapping relations are preserved as the ARP list item.
The another kind that the present invention program provides is realized the method for transfer of data in the virtual private networks, and VPN is connected with the backbone network of SP, preserves the RD of the corresponding VPN of each interface of self among the PE, and this method may further comprise the steps:
A. in PE, be provided with corresponding and comprise the Mbuf and the SOCKET of the RD information of VPN, and the RD of this VPN is set in this Mbuf and SOCKET, the pairing RD information of each interface IP address of PE is set in the IP address list of PE preservation with VPN;
When the network layer of b.PE is received the data that CE sends, obtain the purpose IP address of these data and the RD of this CE place VPN, and judge in the IP address list of self preserving whether have this purpose IP address and RD, if exist, then give transport layer with the current data upload that receives by Mbuf, otherwise, transmit this data according to this purpose IP address and RD, and finish this handling process;
The transport layer of c.PE generates Internet protocol control block InPCB according to the source destination address relevant information and the RD of the current data that receive, determine corresponding SOCKET according to this InPCB, and these data are put into the buffer memory of this SOCKET, notify the application layer reading of data afterwards;
The application layer of d.PE is obtained the data among this SOCKET.
Described PE directly is connected with CE;
Among the step b, the network layer of described PE is obtained RD and is: the network layer of PE determines to receive among the PE interface of current data, and obtains the pairing RD of this interface.
Described PE is connected by the network equipment with CE, and the described network equipment sends the data to PE based on the label corresponding with RD;
Among the step b, the network layer of described PE is obtained RD and is: the network layer of PE is determined corresponding RD according to the label that the network equipment sends.
Transmit data based on Transmission Control Protocol in the ICP/IP protocol stack or udp protocol between the backbone network of described VPN and SP;
Among the step c, described source destination address relevant information is: purpose IP address, source and source destination slogan four-tuple.
Between the backbone network of described VPN and SP based on the RAWIP protocol transmission data in the ICP/IP protocol stack;
Among the step c, described source destination address relevant information is: purpose IP address, source and protocol number tlv triple.
IP address and the RD of this interface corresponding VPN network of the present invention program by utilizing interface identifies interface on the PE, and the ICP/IP protocol stack utilizes the combination of IP address and RD to transmit and receive data, make different VPN network corresponding interface on PE can have overlapping IP address space based on MPLS, saved the IP address resource, and can improve the flexibility of user network planning, can embody the advantage of VPN network well.
Description of drawings
Fig. 1 is the schematic diagram based on a kind of typical case's application of the VPN network of MPLS;
Fig. 2 is the realization flow figure that PE sends data among the present invention program;
Fig. 3 is the realization flow figure that PE receives data among the present invention program.
Embodiment
Owing to based on each VPN in the VPN network of MPLS a unique corresponding with it RD is arranged all, and the PE in the backbone network has the IP address of each interface of self and the RD information of the corresponding VPN network of this interface.Therefore, core concept of the present invention is exactly the combination that the ICP/IP protocol stack is set to discern IP address and RD, realizes purpose of the present invention with this.
Below in conjunction with drawings and the specific embodiments the present invention program is described in further detail.
No matter be that PE sends data to CE, or PE receives the data that CE sends, and all needs by Mbuf and SOCKET transmission data, and Mbuf and SOCKET have wherein preserved the information of these data when the transmission data.Therefore, for certain specific VPN,, Mbuf and SOCKET at this VPN need be set in PE all for realizing communicating by letter between PE and this VPN.Certainly, for using SOCKET, should be provided for also representing that SOCKET uses and be used to receive and send the SO_SENDIPVPN option of private network data message in private network.For the present invention program, owing to need the combination of ICP/IP protocol stack identification IP address and RD, therefore, Mbuf and SOCKET in need PE be set to preserve the RD corresponding with VPN.
By above-mentioned setting, PE is sending the data that self generate to CE, or when receiving CE and sending to the data of oneself, can handle by the combination of IP address and RD.Respectively PE being sent the concrete processing procedure that data and PE receive the data that CE sends to CE below describes.
When PE sends data,, therefore need in the forwarding-table item that PE preserves, the combination of each purpose IP address and RD and the corresponding relation of transmit port be set owing to need obtain the corresponding sending terminal mouth by searching forwarding-table item.The process that PE sends data according to the combination of purpose IP address and RD is referring to Fig. 2, corresponding following steps:
The application layer of step 201~202, PE is when sending data, obtain the destination address relevant information of these data, and with these information setting in the pairing SOCKET of RD of the corresponding CE place VPN of this data, SOCKET handles these data, and the data after will handling send to transport layer by Mbuf.
By Mbuf transmission data the time, promptly there be the destination address relevant information and the corresponding RD of these data among the Mbuf.
In addition, based on ICP/IP protocol stack transmission data the time, receive data or transmission data no matter be, can adopt TCP, UDP or RAWIP agreement to come deal with data, the main distinction of these several protocol processes data is: TCP and udp protocol are determined relevant information according to purpose IP address, source and source destination slogan four-tuple, and the RAWIP agreement is determined relevant information according to purpose IP address, source and protocol number tlv triple.In this step, if adopt TCP or udp protocol, the destination address relevant information of then being obtained is purpose IP address and destination slogan; If adopt the RAWIP agreement, the destination address relevant information of then being obtained is purpose IP address.
The transport layer of step 203, PE is handled the current data that need to send of preserving among the Mbuf, and the data after will handling send to network layer by Mbuf again.
If adopt TCP or udp protocol transmission data, then also should comprise in this step: transport layer is searched the routing table of self preserving according to the purpose IP address and the corresponding RD of these data, with definite corresponding source IP address, and select a source port number that is not used to insert in these data.Therefore, the PE among the present invention program also should be provided with the corresponding relation of purpose IP address and RD in the routing table of self preserving.
If adopt RAWIP protocol transmission data, then uncertain source IP address and source port number in this step, but determine source IP address by the network layer of PE.
The network layer of step 204~205, PE is searched the forwarding-table item of self preserving according to the purpose IP address and the RD of the data of preserving among the Mbuf, to obtain the transmit port that this secondary data sends, and determine next-hop ip address and the corresponding RD that this secondary data sends according to purpose IP address and RD, afterwards this next-hop ip address and corresponding RD are arranged among the Mbuf, and the data after will handling send to link layer by Mbuf.
Before the data of the network layer of PE after will handling send to link layer by Mbuf, should judge and whether preserve source IP address in these data that if preserved source IP address, the data after then will handling send to link layer; If do not preserve source IP address, then should determine source IP address, and this source IP address is arranged in these data that the data after will handling again afterwards send to link layer according to the transmit port that is obtained.Wherein,, then may preserve source IP address in these data, certainly, also source IP address might be set not, so network layer need guarantee there is source IP address in the data by this deterministic process if adopt TCP or udp protocol deal with data; If adopt RAWIP protocol processes data, then necessarily there is not source IP address in these data, therefore need network layer corresponding source IP address to be set in data by this deterministic process.
The link layer of step 206, PE is searched the ARP list item of self preserving according to next-hop ip address among the Mbuf and RD, to obtain the corresponding hardware address, and this hardware address is encapsulated in the data, the data that will encapsulate hardware address afterwards send by physical link.
In step 206, if link layer does not have the ARP list item, then PE also should determine the combination of purpose IP address and RD and the dynamic mapping between the hardware address according to the ARP agreement, and preserves this mapping relations.The mapping relations of being preserved are the ARP list item.
By above-mentioned steps, can finish the transmission of PE.Here, PE may directly send to CE with the data that need to send, certainly, the data that PE sends to CE also may need the transfer by one or more network equipments, like this, next-hop ip address in the above-mentioned steps just should be this transfer network equipment, and this transfer network equipment is same as the prior art to the transmission of data, promptly sends data according to the label corresponding with RD.
Below PE being received data describes.When PE receives data,, therefore the pairing RD information of each interface IP address of this equipment need be set in the IP address list item that PE preserves owing to need judge whether self is receiving terminal by IP address list.
PE according to the process of the combined reception data of purpose IP address and RD referring to Fig. 3, corresponding following steps:
The network layer of step 301~304, PE is when receiving the data that other network equipments send by link layer, at first obtain the purpose IP address and the corresponding RD of these data, and search the IP address list of self preserving according to this purpose IP address and RD, if have this purpose IP address and RD in this IP address list, the receiving terminal of then determining these data is this equipment, and these data are uploaded to transport layer by Mbuf, otherwise, transmit according to this purpose IP address and RD, and finish current handling process.
Wherein, according to the annexation between PE and the CE, the network layer of PE is obtained RD dual mode.If PE directly is connected with CE, then the network layer of PE determines to receive the interface of these data, and obtains the pairing RD of this interface.If CE sends to the data of PE by transferring in other network equipments, promptly, CE directly is not connected with PE yet, gives PE's because the network equipment is based on the label corresponding with RD with data forwarding, therefore, the network layer of PE can be determined corresponding RD according to the label that the network equipment sends.
The transport layer of step 305~306, PE is after receiving the data that transmit on the network layer, generate the InPCB that is used to write down source destination address relevant information according to source destination address relevant information and RD, and according to the definite corresponding SOCKET of this InPCB, afterwards these data are put into the buffer memory of this SOCKET, and notice application layer reading of data.
If adopt TCP or udp protocol transmission data, then the source destination address relevant information in this step is purpose IP address, source and source destination slogan; If what adopt is the RAWIP agreement, then the source destination address relevant information in this step is purpose IP address, source and protocol number.
Step 307, application layer receive the data among this SOCKET, and these data are correspondingly processed.
By above-mentioned steps, PE can receive data according to IP address and RD.
Certainly, the SOCKET of the above-mentioned RD of being provided with also can be used for public network, and the RD in just need SOCKET is set to complete zero.
The above only is the present invention program's preferred embodiment, not in order to limit the present invention program's protection range.

Claims (10)

1, a kind of method that realizes transfer of data in the virtual private networks, virtual private network VPN is connected with the backbone network of Internet Service Provider SP, the structure route indication of preserving the corresponding VPN of each interface institute of self among the Provider Edge PE of backbone network accords with RD, it is characterized in that this method may further comprise the steps:
A. in PE, be provided with corresponding and comprise the memory buffer Mbuf and the socket SOCKET of the RD information of VPN, in the forwarding-table item of PE preservation, the combination of each purpose IP address and RD and the corresponding relation of transmit port are set with VPN;
B.PE is when sending the data to CE, the application layer of PE is obtained the destination address relevant information that comprises purpose IP address in the current data that need to send at least, this destination address relevant information is set among the pairing SOCKET of RD with this CE place VPN, SOCKET handles these data, after will handling afterwards, comprise that the data of destination address relevant information and RD send to transport layer by Mbuf;
The transport layer of c.PE is handled the current data that need to send of preserving among the Mbuf, and the data after will handling send to network layer by Mbuf;
The network layer of d.PE is obtained the transmit port that this secondary data sends according to the purpose IP address and the RD of the data that the current needs of preserving among the Mbuf send from the forwarding-table item of self preserving, and the next-hop ip address and the corresponding RD that determine the transmission of this secondary data, and this next-hop ip address and RD be arranged among the Mbuf, afterwards the current data that need to send are sent to link layer by Mbuf;
E. link layer obtains the corresponding hardware address according to next-hop ip address among the Mbuf and RD from the ARP list item, and it is encapsulated in the current data that need to send, afterwards these data are sent to next-hop ip address and the pairing equipment of RD by physical link.
2, method according to claim 1 is characterized in that, transmits data based on Transmission Control Protocol in the TCP ICP/IP protocol stack or User Datagram Protoco (UDP) UDP between the backbone network of described VPN and SP;
This method further comprises: the corresponding relation of preserving purpose IP address and RD and source IP address in the routing table of PE;
Among the step b, further comprise in the destination address relevant information that the application layer of described PE is obtained: the destination slogan;
Among the step c, the transport layer of described PE is handled the current data that need send of preserving among the Mbuf and comprised: purpose IP address and RD according to these data determine corresponding source IP address from the routing table of self preserving, and select a source port number that is not used, afterwards this source IP address and source port number are arranged in these data.
3, method according to claim 1 is characterized in that, between the backbone network of described VPN and SP based on the initial IP RAWIP protocol transmission data in the ICP/IP protocol stack.
4, according to claim 2 or 3 described methods, it is characterized in that in the described steps d, the network layer of described PE is before sending to link layer with the current data that need send by Mbuf, further comprise: judge whether preserved source IP address in these data, if then continue to carry out subsequent treatment; Otherwise, determine source IP address according to the transmit port that is obtained, this source IP address is arranged in these data, carry out subsequent treatment afterwards again.
5, according to claim 1,2 or 3 described methods, it is characterized in that, this method further comprises: if link layer does not have the ARP list item, then PE determines dynamic mapping between purpose IP address and RD and the hardware address according to the ARP agreement, and these mapping relations are preserved as the ARP list item.
6, a kind of method that realizes transfer of data in the virtual private networks, VPN is connected with the backbone network of SP, preserves the RD of the corresponding VPN of each interface of self among the PE, it is characterized in that this method may further comprise the steps:
A. in PE, be provided with corresponding and comprise the Mbuf and the SOCKET of the RD information of VPN, and the RD of this VPN is set in this Mbuf and SOCKET, the pairing RD information of each interface IP address of PE is set in the IP address list of PE preservation with VPN;
When the network layer of b.PE is received the data that CE sends, obtain the purpose IP address of these data and the RD of this CE place VPN, and judge in the IP address list of self preserving whether have this purpose IP address and RD, if exist, then give transport layer with the current data upload that receives by Mbuf, otherwise, transmit this data according to this purpose IP address and RD, and finish this handling process;
The transport layer of c.PE generates Internet protocol control block InPCB according to the source destination address relevant information and the RD of the current data that receive, determine corresponding SOCKET according to this InPCB, and these data are put into the buffer memory of this SOCKET, notify the application layer reading of data afterwards;
The application layer of d.PE is obtained the data among this SOCKET.
7, method according to claim 6 is characterized in that, described PE directly is connected with CE;
Among the step b, the network layer of described PE is obtained RD and is: the network layer of PE determines to receive among the PE interface of current data, and obtains the pairing RD of this interface.
8, method according to claim 6 is characterized in that, described PE is connected by the network equipment with CE, and the described network equipment sends the data to PE based on the label corresponding with RD;
Among the step b, the network layer of described PE is obtained RD and is: the network layer of PE is determined corresponding RD according to the label that the network equipment sends.
9, method according to claim 6 is characterized in that, transmits data based on Transmission Control Protocol in the ICP/IP protocol stack or udp protocol between the backbone network of described VPN and SP;
Among the step c, described source destination address relevant information is: purpose IP address, source and source destination slogan four-tuple.
10, method according to claim 6 is characterized in that, between the backbone network of described VPN and SP based on the RAWIP protocol transmission data in the ICP/IP protocol stack;
Among the step c, described source destination address relevant information is: purpose IP address, source and protocol number tlv triple.
CNB200410034762XA 2004-05-12 2004-05-12 Implementation method for transferring data in virtual private network Expired - Fee Related CN100479457C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB200410034762XA CN100479457C (en) 2004-05-12 2004-05-12 Implementation method for transferring data in virtual private network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB200410034762XA CN100479457C (en) 2004-05-12 2004-05-12 Implementation method for transferring data in virtual private network

Publications (2)

Publication Number Publication Date
CN1697445A CN1697445A (en) 2005-11-16
CN100479457C true CN100479457C (en) 2009-04-15

Family

ID=35349967

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB200410034762XA Expired - Fee Related CN100479457C (en) 2004-05-12 2004-05-12 Implementation method for transferring data in virtual private network

Country Status (1)

Country Link
CN (1) CN100479457C (en)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7571247B2 (en) * 2005-12-12 2009-08-04 International Business Machines Corporation Efficient send socket call handling by a transport layer
CN101052207B (en) * 2006-04-05 2011-04-20 华为技术有限公司 Realizing method and system for movable virtual special net
CN101267385B (en) * 2007-03-12 2010-10-13 中国电信股份有限公司 A service carrying network realization method based on IP and MPLS mixing technology
CN101616190B (en) * 2008-06-25 2012-07-11 英业达股份有限公司 Network equipment with address network segment recognizing function
CN101572709B (en) * 2009-06-01 2012-07-04 杭州华三通信技术有限公司 Switching method, system, server and client device of socket connection
CN101827023B (en) * 2010-03-25 2013-01-16 杭州华三通信技术有限公司 Processing method of data and device thereof
CN101977137B (en) * 2010-11-03 2014-02-26 神州数码网络(北京)有限公司 Address conflict detection and self-adaption method in VPN (Virtual Private Network)
CN103731348B (en) * 2012-10-15 2018-06-26 中国移动通信集团江苏有限公司 A kind of IMS network message distribution method and device
EP3224998B1 (en) 2014-11-26 2018-10-17 Telefonaktiebolaget LM Ericsson (publ) Method, device, carrier and computer progam for managing data frames in switched networks

Also Published As

Publication number Publication date
CN1697445A (en) 2005-11-16

Similar Documents

Publication Publication Date Title
CN110266592B (en) Communication method and device for SRV6 network and IP MPLS network
US6038233A (en) Translator for IP networks, network system using the translator, and IP network coupling method therefor
US6173334B1 (en) Network system including a plurality of lan systems and an intermediate network having independent address schemes
JP4587446B2 (en) NETWORK SYSTEM, SWITCH DEVICE, ROUTE MANAGEMENT SERVER, ITS CONTROL METHOD, COMPUTER PROGRAM, AND COMPUTER-READABLE STORAGE MEDIUM
US9219698B2 (en) Providing a layer-3 interface
WO2022062506A1 (en) Data processing method and apparatus, storage medium, and electronic apparatus
CN105187311B (en) A kind of message forwarding method and device
CN105490957A (en) Load sharing method and device
CN102273177A (en) Neighbour discovery protocol mediation
CN104852840A (en) Method and device for controlling mutual access between virtual machines
CN111556110B (en) Automatic adaptation method for different physical service networks of private cloud system
CN105227466A (en) Communication processing method and device
CN103618801A (en) Method, device and system for sharing P2P (Peer-to-Peer) resources
CN102291305B (en) Method and device for implementing 6 to 4 relay routing, and message forwarding method
CN100479457C (en) Implementation method for transferring data in virtual private network
CN105933235B (en) Data communications method and device
US20070201667A1 (en) Method for Ensuring VLAN Integrity for Voice Over Internet Protocol Telephones
CN104579973A (en) Message forwarding method and device of virtual cluster
CN102025604A (en) Carrying network and data transmission method
WO2021052381A1 (en) Message sending method and apparatus
US6823386B1 (en) Correlating data streams of different protocols
JP4670866B2 (en) Translator
JP4151699B2 (en) Conversion device and management method
JP6438313B2 (en) Packet distribution device and packet distribution method
CN104518937B (en) The method and device of the more communication between devices of virtual LAN VLAN

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090415

Termination date: 20170512