虚虚虚虚虚 VPN 虚 Juniper Networks, Inc Copyright © 2001 - Proprietary & Conf dential 虚虚虚虚 虚虚虚虚虚 VPN 虚虚虚 虚虚虚虚虚 BGP/MPLS VPN 虚 RFC 2547bis 虚 虚虚虚虚虚虚虚 MPLS VPN 虚虚 虚虚虚虚 VPN 虚虚 Juniper Networks, Inc Copyright © 2001 - Proprietary & Conf dential 虚虚虚 VPN 虚虚 VPN 虚虚 虚虚 CPE 虚 VPN 虚虚虚虚虚虚虚 VPN IETF 虚虚虚虚 虚虚虚 VPN 虚虚 VPN 虚虚 虚虚 CPE 虚 VPN 虚虚虚虚虚虚虚 VPN IETF 虚虚虚虚 虚虚虚 VPN 虚 虚虚虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚 虚虚 虚虚虚虚 虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚 – 虚虚虚虚虚虚虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚 90 虚虚虚虚虚 VPN 虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚 DLCI DLCI 虚虚虚虚虚虚 DLCI CE CE 虚虚虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚 PVC 虚虚虚虚虚虚虚虚虚虚 ATM/ 虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚“虚虚” 虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚 IP 虚虚虚虚 Juniper Networks, Inc Copyright © 20 CE CE 21 虚虚虚虚虚 VPN 虚虚虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚 Internet 虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚 虚虚 IP 虚虚虚虚 虚虚虚 Internet 虚虚虚虚 IP/MPLS 虚虚虚虚 ATM/FR 虚虚虚虚虚虚虚虚虚 虚虚虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚虚虚 虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚 虚虚 虚虚 VPN 虚虚不不虚虚虚虚虚虚虚 虚虚虚虚 虚虚虚 虚虚虚 虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚 100 100 100 100 100 100 0 0 0 虚虚虚虚虚虚虚虚虚 VPN 虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚 VPN 虚虚虚虚 Juniper Networks, Inc Copyright © 20 VPN 虚虚虚虚 PP-VPN CPE-VPN CPE CPE PE 虚虚 PE 虚虚 虚虚 VPN CPE VPN 虚虚 虚虚 虚虚 CPE 虚虚虚虚虚 VPN 虚虚虚虚虚 CPE-VPN 虚 V P N PE L2TP 虚 PPTP IPsec 虚虚虚虚 虚虚虚虚虚虚 VPN 虚虚虚虚虚 PP-VPN 虚 CPE 虚虚 BGP/MPLS 虚 VPN 虚 RFC 2547bis 虚 虚虚虚虚虚 虚虚 MPLS VPN Juniper Networks, Inc Copyright © 20 虚虚 虚虚 VPN 虚虚 PE PE 虚虚 虚虚 虚虚 VPN 虚虚 VPN 虚虚 虚虚 虚虚 PE 虚虚 虚虚 CPE Draft-Martini: 虚虚虚 FEC 虚虚 VC TLV C VC 虚虚 虚 ID VC ID 虚虚虚虚 “ “ 虚 LDP 虚虚虚虚虚虚虚虚虚虚虚虚虚虚 VC 虚虚 虚虚 VC 虚虚虚虚 VC ID 32 虚虚虚 ID 虚 VC 虚虚虚虚虚虚虚虚虚 VC Juniper Networks, Inc Copyright © 20 VC 虚虚虚虚 Draft-Martini: 虚虚虚 FEC 虚虚 虚虚虚虚 虚虚 CE 虚虚虚虚虚虚虚虚虚虚虚 虚虚 LSR 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚 虚虚 MTU 虚虚 ATM 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚 CEM 虚虚虚虚虚虚 CEM 虚虚 Juniper Networks, Inc Copyright © 20 Draft-Martini: 虚虚 L2 VPN PE-1 PE-2 VC 虚虚 DLCI VC ID 虚虚虚 414 25 500 1001 虚虚 PE-2 虚虚虚 虚虚 CE-2 虚虚虚 虚虚 CE-1 虚虚 LDP 虚虚虚 虚虚虚 VC 虚虚 PE-1 VC 虚虚 DLCI VC ID 虚虚虚 82 25 501 1002 虚虚 PE-1 虚虚虚 虚虚 CE-4 虚虚虚 CE-2 PE-2 虚虚 501 CE-2 CE-4 500 虚虚 DLCI 82 DLCI 414 10.1.1.2 10.1.1.1 PE-2 LDP 虚虚 PE-1 LDP 虚虚 VC 虚虚 VC ID VC 虚虚 虚虚虚虚 虚虚虚 25 1001 VC 虚虚 虚虚虚 VC ID VC 虚虚 虚虚虚虚 25 1002 MTU = 4482 MTU = 4482 虚虚VC虚虚虚虚虚虚虚draft -Kompella虚虚 PE虚虚LSP虚虚虚虚RSVP-TE虚LDP虚RSVP-TE虚虚LDP虚虚虚虚 (虚draft -kompella虚虚) Juniper Networks, Inc Copyright © 20 虚虚 Draft-Martini 虚 虚虚虚 PE-1 VC 虚虚 DLCI VC ID 虚虚 PE-2 虚虚虚虚虚 PE-2 虚虚虚 414 25 500 1002 虚虚 CE-4 虚 VC 虚虚 VC 虚虚 DLCI VC ID 虚虚 PE-1 虚虚虚虚虚 虚虚 CE-2 虚 VC 虚虚 PE-1 PE-1 1) 1) 虚虚 虚虚 VC VC 虚虚 虚虚 (1002) (1002) 2) 2) 虚虚虚虚虚虚 虚虚虚虚虚虚 (500) (500) 虚虚 CE-1 虚虚虚 82 25 501 1001 虚虚虚虚虚 虚虚虚虚虚虚 PE-1 PE-2 CE-2 虚虚 501 CE-2 500 虚虚 DLCI 82 DLCI 414 10.1.1.1 虚虚虚 虚虚虚虚 500 DLCI 414 CE-4 VC 虚虚 1002 10.1.1.2 VC 虚虚 1002 虚虚虚 虚虚虚 虚虚虚 虚虚虚虚draft-Kompella虚虚 Juniper Networks, Inc Copyright © 20 DLCI 82 虚虚 Draft-Martini: 虚虚虚虚虚 虚虚虚虚 虚 32 虚虚 VC 虚虚 虚 32 虚虚 虚虚虚 虚 32 虚虚 虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 L2 虚虚虚虚 虚虚虚虚虚 虚虚 虚虚虚虚 虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚 虚虚虚 FECN 虚 BECN 虚 DE 虚 C/R ATM 虚虚虚虚虚 EFCI 虚 CLP 虚 C/R Juniper Networks, Inc Copyright © 20 虚虚 MPLS VPN 虚 CoS 虚 2547bis CoS 虚虚虚虚虚 虚虚虚虚虚虚虚虚虚 L2 虚虚虚虚虚虚 虚虚虚虚 虚虚虚虚 虚虚 CoS Martini ID 虚虚虚虚 FECN 虚 BECN 虚 DE/CLP 虚 虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚虚 虚虚 Juniper Networks, Inc Copyright © 2001 - Proprietary & Conf dential IP VPN 虚虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 IP 虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚虚 VPN 虚虚虚虚 虚虚虚虚虚虚虚虚虚 虚虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚 虚虚虚 虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚虚 VPN 虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚 / 虚虚 虚虚虚虚 VPN 虚虚虚虚虚虚 IPSec IPSec VPN 虚虚虚虚 虚虚 L2 VPN 虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 OSPF 虚虚虚虚虚 VPN 虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚 虚虚 VPN 虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚 VPN 虚虚虚虚 虚虚虚虚虚虚虚虚虚 IP 虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚 RFC2547bis VPN 虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚 PPTP / L2TP 虚虚虚虚虚虚虚 虚虚虚虚虚虚 Internet 虚虚虚虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚虚 VPN 虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚… 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 IGP 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 IGP 虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚 OSPF 虚虚虚虚虚虚虚 VPN 虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚 VR 虚虚虚虚 VPN 虚虚虚虚 Juniper Networks, Inc Copyright © 20 JUNOS v4.4 RFC 2547 虚虚 JUNOS 4.4 虚虚 RFC 2547bis 虚虚虚虚虚 虚虚虚 虚虚虚虚虚虚虚 CE 虚 PE 虚 P 虚虚虚虚虚 虚虚虚虚 RFC 2547bis 虚虚虚虚虚虚虚…虚 虚虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚 虚虚虚虚 虚虚 虚虚虚虚虚 VPN 虚 CPE-VPN 虚 虚虚虚虚虚虚 VPN 虚 PP-VPN 虚 L2TP 虚 PPTP IPsec MPLS/BGP VPN 虚 RFC 2547bis 虚虚虚虚虚 虚虚 MPLS 虚虚虚 VPN VPN 虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 Juniper Networks, Inc Copyright © 20 虚虚虚 http://www.juniper.net Juniper Networks, Inc Copyright © 2001 - Proprietary & Conf dential ... 虚虚虚虚虚虚 VPN 虚虚虚虚虚 PP -VPN 虚 CPE 虚虚 BGP /MPLS 虚 VPN 虚 RFC 2547bis 虚 虚虚虚虚虚 虚虚 MPLS VPN Juniper Networks, Inc Copyright © 20 虚虚 虚虚 VPN 虚虚 PE PE 虚虚 虚虚 虚虚 VPN 虚虚 VPN 虚虚 虚虚 虚虚 PE 虚虚 虚虚 CPE 虚虚虚 VPN. .. 虚虚虚虚虚 VPN 虚虚虚 虚虚虚虚虚 BGP /MPLS VPN 虚 RFC 2547bis 虚 虚虚虚虚虚虚虚 MPLS VPN 虚虚 虚虚虚虚 VPN 虚虚 Juniper Networks, Inc Copyright © 2001 - Proprietary & Conf dential 虚虚虚 VPN 虚虚 VPN 虚虚 虚虚 CPE 虚 VPN ... 虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚虚虚虚虚虚虚虚虚虚 虚虚虚虚 VPN 虚虚虚虚 Juniper Networks, Inc Copyright © 20 VPN 虚虚虚虚 PP -VPN CPE -VPN CPE CPE PE 虚虚 PE 虚虚 虚虚 VPN CPE VPN 虚虚 虚虚 虚虚 CPE 虚虚虚虚虚 VPN 虚虚虚虚虚 CPE -VPN 虚 V P N PE L2TP