论文部分内容阅读
概述在现有的IP VPN组网方案中,一般采用GRE隧道、L2TP、IPSec等方式。但是这些方案都存在一个弊端,就是必须按照事先的配置进行组网,并且要完成一个全联通的网络时(如图1)结构和配置就变得复杂起来。由于要建立一对一的连接,所以当有n个网络设备进行互联时,网络就必须建立n×(n-1)/2个连接,这样不仅造成了组网和配置的复杂,而且配置时必须知道对端设备的基本信息。试想,如果其中有一个节点的设备修改了配置,那么其他所有节点都必须针对这台设备修改本地配置,这给维护增加了很多成本。
Overview In existing IP VPN networking solutions, GRE tunnels, L2TP, and IPSec are commonly used. However, there are drawbacks to these solutions. That is, the network must be configured according to the prior configuration, and the structure and configuration of the network when the whole network is completed (as shown in FIG. 1) becomes complicated. Because there is a one-to-one connection, when n network devices are interconnected, the network must establish n × (n-1) / 2 connections, which not only complicates networking and configuration, but also configures You must know the basic information about the peer device. Imagine if one of the node’s devices modifies the configuration, all other nodes must modify the local configuration for that device, which adds a lot of cost to maintenance.