(Design and Implementation of Configuration Management for the MPLS VPN)

Transkript

1 MPLS VPN (Design and Implementation of Configuration Management for the MPLS VPN) O, site (VPN),,, MPLS (MPLS VPN) MPLS VPN service provider network MPLS VPN, MPLS VPN (OOP), NMS MPLS VPN CLI Auto-discovery, MPLS VPN VPN network, VPN MO 1 MPLS VPN LSP site MPLS IP IPSec, (VPN) VPN,, VPN VPN site VPN,,, MPLS VPN BGP(Border Gateway Protocol)/MPLS VPN IETF MPLS(Multiprotocol Label [1] MPLS VPN Switching protocol) VPN(Virtual Private Network) NMS(Network Management System) [1] MPLS VPN NMS VPN IP MPLS Cisco Cisco VPN solution center [2], VPN scalability QoS Cisco VPN solution center Cisco router (Quality of Srvice) MPLS, VPN VPN Overlay model, router L2VPN(Layer2 VPN) site Cisco VPN site full mesh solution center, MPLS VPN site VPN service provider network PE(Provider Edge) peer-to-peer, site NMS 1

2 VPN VPN VPN site CLI(Command Line Interface)auto- discovery, VPN name, ID VPN VPN site name, IP address VPN VPN site NMS(Network Management System) VPN MO(Managed Object) attribute, attribute VPN,, VPN VPN site,, VPN MO,, VPN network NMS, Cisco router router VPN router CLI(Command Line Interface) Cisco router MPLS VPN 2, 3 Cisco 7204CLI MPLS VPN 4 MPLS VPN, 5 2 MPLS VPN VRF interface <1> MPLS VPN Cisco MPLSRouter <2> MPLS VPN Juniper MPLSRouter <3> MPLS VPN Cisco MPLSRouter BGP PE to PE PE to CE Routing Sessions MPLS VPN,, [3] MPLS VPN Topology VPN service provider backbone VPN routing BGP, PE(service provider edge router)pe IBGP(Interior BGP) MPLS packet forwarding, PE CE(customer edge router) EBGP(External BGP) IP prefix IP prefix IPv4 address family, PE CE IP prefix 8 byte RD(route distinguisher)prefix VPN-IPv4 [4] VPN RD(Route Distinguisher), RT(Route Target) <1><2>MPLS VPN VRF(VPN Routing and Forwarding) VRF CLI command <1>Cisco VPN MPLS router[4] CLI command, < CLI (<1>, <2>) 2>Juniper MPLS router[10] CLI [4] command <3><4> Cisco router VRF Juniper router BGP PE-to-PE, PE-to- VPN CE CE routing session CLI command 2

3 <4> MPLS VPN Juniper MPLSRouter BGP PEto-PE PE-to-CE Routing Sessions 31 MPLS VPN Topology autodiscovery MPLS VPN CLI, Cisco router MPLS VPN Cisco router CLI command <5> <5> MPLS VPN Cisco Router <1>, <2> <3>, <4>, CLI command, VPN CLI, CLI 3 MPLS VPN <6> MPLS VPN Juniper Router MPLS VPN router, MPLS VPN router MPLS VPN site VPN, VPN site service point 200 [6],, MPLS VPN router site VPN,, VPN site, VPN, VPN VPN site, router <5>CLI Cisco router VPN VPN VPN site <5><6> autodiscovery, MPLS VPN Cisco router[4]juniper router[12] VPN, MPLS VPN GUI Cisco7204 CLI, router GUI Juniper router CLI MPLS VPN, MPLS VPN NMS MPLS VPN topology auto- discovery ( 1) 3

4 < 7> Auto-discovery PhyNetwork MOs attributes ( 1)MPLS VPN auto-discovery NMS router pivot router CLI access, VRF 7204_H router VRF, 7204_H router 7204_F CLI access 7204_F VRF, <5> command VRF <8> Auto-discovery VPN network MOs attributes GUI ADM ADM MPLS LSR Cisco7204CLI, router, PhyNetwork, LSP MPLS Network, VPN name VPN VPN Network PhyNetwork MO node, port Node MO attributes router, local router name, neighbor router name Router router MPLS router, IP router Local router name router name, neighbor router name router router name ( 2) NMS ADM Port MO attribute local port name, local port IP address, neighbor port name, neighbor IP address Local port name ADM(Auto Discovery Module)NMS router port name, local port IP address local (2) port IP address Neighbor port name ADM MO attribute router router port <7>, <8> name Neighbor port IP address neighbor port name IP address 4

5 Link MO attribute total capacity, available bandwidth, reserved bandwidth, delay, load Total capacity router bandwidth Available bandwidth bandwidth bandwidth Reserved bandwidth bandwidth Delay delay, load router LSP MO attribute LSP ID, Ingress router name, Explicit, destination IP address LSP ID LSP ID, Ingress router name LSP ingress router PhyNetwork (LSR) ( 3) VPN network, GUI topology VPN network MPLS Network topology VPN GUI VPN GUI, VPN Network VPN topology VPN name, VPN ID VPN VPN GUI Site Site name, Site IP address VPN Network 32 MPLS VPN VPN Network MPLS Layer Network MPLS VPN VPN VPN MO(Management Object) VPN MO Site MO VPN MPLS Layer Network VPN Network VPN MO MPLS LSR VPN Network VPN MO MPLS LSR VPN MO VPN MO attribute < 5> VPN MO VPN VPN MO attribute VPN name VPN ID, MPLS LSR attribute mapping, Cisco7204CLI Cisco7204CLI Telnet Interface Router Router VRF enable interface VRF enable Cisco7204CLI PhyRouter VPN interface Site PE router interface Site MO VPN Site Site Site MO attribute VPN site name, VPN site IP address, VPN site BGP number CISCO Router Cisco router VPN CLI auto-discovery, sh ip vrf command Cisco7204CLI VPN 321 MPLS VPN VPN network, Cisco router VPN VPN site VPN VPN name, VPN ID, VRF enable interface, VPN site VPN site name, VPN network VPN VPN site IP address, VPN site BGP number MO, VPN VPN customer site VPN VPN Cisco7204CLI MPLS VPN network PhyRouter LSR VPN VPN network MPLS LSR MPLS Network VPN ( 3) MPLS Network VPN network VPN, VPN network VPN VPN MO Site MO mapping VPN network VPN VPN GUI 5

6 , VPN GUI VPN VPN GUI Cisco7204CLI telnet router <9> ShRun() MPLS router sh run 322 Cisco 7204 Command Line Interface command, NMS parameter parsing (CLI) ShCDPEntry() MPLS router Cisco Router VPN, VPN sh cdp entry * command telnet, NMS parameter parsing Cisco7204CLI, Cisco7204CLI access PhyRouter <9> Cisco7204CLI Cisco7204CLI telnet parameter Command Line Interface telnet Cisco MPLS router, router ( 4) Vender CLI Abstract class CLI vender abstract method GetNode(), GetPort(), GetLSP() Cisco CLI, Juniper CLI CLI abstract CLI class Telnet Cisco MPLS router command, (5) 323 MPLS VPN GUI Cisco7204CLI, NMS parsing PhyNetwork MPLS VPN VPN network VPN router VPN VPN GUI CLI Java GUI, VPN CLI class Cisco 7204 CLI network CORBA(Common Object Request Broker Architecture) XML(Extensible Markup Language) VPN View GUI VPN VPN Manager GUI, VPN topology VPN Manager GUI VPN,, VPN site, VPN list, site Create VPN GUI VPN name VPN id GUI, VPN VPN Manager GUI VPN list Add Site GUI VPN site ( 5) telnet MPLS GUI, site router router Verify VPN GUI Add Site GUI 6

7 VPN GUI ( 7) ( 6)VPN VPN GUI VPN GUI VPN, site VPN View GUI VPN manager VPN Manager GUI VPN Manager GUI VPN ( 7)VPN network Create VPN Create VPN GUI 4 MPLS VPN VPN VPN name VPN id, ok MPLS VPN VPN Manager GUI VPN list auto-discovery GUI VPN Manager GUI VPN list VPN VPN, Add Site Add Site GUI network Add Site GUI MPLS VPN site IP address, 41 MPLS VPN ASN(Autonomous System Number)MPLS topology VPN site, Accept, Verify VPN GUI Cisco router CLI ( 8) MPLS VPN Add Site GUI, ok VPN Manager GUI submit GUI CORBA VPN network VPN view GUI topology, AS(Autonomous System), AS number AS MPLS router PE CE PE ( 8) MPLS VPN VRF port name VRF topology name VPN site VPN name VPN id, PE router Cisco router 7204 series 3 Service Provider port name Backbone, Cisco router

8 series 2 VPN site 7204_H P(Provider), 7204_F 7204_G PE(Provider Edge) P 7204_H VRF forwarding VPN VPN1 VPN2 VPN1 3620_C 3620_D 42 Auto-discovery MPLS VPN ( 8) topology, auto-discovery ( 9)( 10) ( 8) NMS 7204_G router NMS, 7204_G router router name 7204_G, MPLS Port, LSP, router MPLS LSP LSP ID(Tunnel ID)LSP destination IP address ( 7)topology LSP LSP1, LSP2, LSP4, LSP destination IP address ( 9), ( 8) 7204_G router router 7204_H 3620_D router, ( 9) 7204_H 3620_D ( 10) Auto-discovery consol -2 ( 8) 7204_G serial1/2 port VPN name VRF1, VPN id 100:1 VPN MPLS VPN auto-discovery VPN site 3620_D router,, ( 9), ( 10) 7204_G router 3620_D auto-discovery router port IP address _D router AS number 300 ( 9) VPN ( 8) topology 43 MPLS VPN VPN GUI VPN site, VPN site Add site GUI ( 11) VRF name(vpn name), Route distinguisher(vpn id), BGP number, VPN site IP address, VPN site AS number site ( 9) Auto-discovery consol -1 ( 11) GUI VPN site 8

9 GUI VPN site 6 Cisco7204CLI router VPN, auto-discovery [1] E Rosen, YRekhter, BGP/MPLS VPNs, RFC 2547, MPLS VPN topology VPN View GUI ( October ) [2] Cisco, Cisco VPN Solution Center User Reference, 21, sw/ps2327/products_technical_reference_book09186a html, 2002 [3], QoS BGP/MPLS VPN,, 2001 [4] Cisco IOS Release 122(13)T, MPLS Virtual Private Networks(VPNs), cts/sw/iosswrel/ps1829/products_feature_guide09186a 00800b3d25html, 2002 [5] Ivan Pepelnjak, Jim Guichard, MPLS and VPN Architecture, Cisco Press, 2001 [6] Haeryong Lee, End-To-End QoS Architecture for ( 12)VPN View GUI MPLS VPN VPNs: MPLS VPN Deployment in a Backbone topology Network, International Workshops 2000 [7] Cisco, Multiprotocol BGP Extensions for IP Multicast Commands, 5 /iosswrel/ps1835/products_command_summary_chapte r09186a008007fcadhtml, 2003 MPLS VPN MPLS [8] Cisco, MPLS VPN over ATM: with OSPF on the VPN Customer Side(with Area0), Cisco router MPLS VPN en/us/tech/tk436/tk798/technologies_configuration_ex, MPLS ample09186a f82shtml, 2002 VPN NMS [9] Dong-Jin Shin, Design and Implementation of Configuration Management for the MPLS Network, MPLS VPN KNOM Review, 5 2, pp73 ~ 84, 2002 [10] Juniper, Configuring BGP/MPLS VPNs, MPLS VPN auto-discovery Autodiscovery [11] Juniper, Configuring BGP Routing, wconfig-routing-vol2/html/bgp-config16html# MPLS network VPN network MO MPLS VPN configuration MPLS VPN wconfig-routing-vol2/html/bgp-confightml# [12] Juniper, Monitering BGP/MPLS VPNs, wconfig-routing-vol2/html/vpns-config6html# MPLS VPN MPLS VPN NMS (OOP), router Cisco router router, Cisco7204CLI CLI command MPLS VPN NMS, Juniper router CLI command Cisco router CLI command, NMS, MPLS VPN L2VPN VPN router NMS 9

10 Hyung-Woo Choi : received BS in Information & Communication Eng from Yeungnam University : under MD course in Information & Communication Eng of Yeungnam University Research Area : MPLS TE, MPLS VPN, NGI Young-Tak Kim : received BS in Electronic Eng from Yeungnam university : received MD in Electric & Electronic Eng from KAIST : received PhD in Electric & Electronic Eng from KAIST : worked as a Member of Technical Staff & Section Leader of Telecommunication Network Research Lab in Korea Telecom : Assistant professor and associate professor in the Dept of information & Communication Eng, collage of Eng, Yeungnam Univ Research Area : MPLS, GMPLS, DiffServ, IN, TINA, TMN, NGI and TE 10