MPLS VPN安全性研究

Security Analysis of VPN Based on Multiprotocol Label Switching

在分析基于多协议标记虚拟专用网工作原理的基础上,从地址空间与路由分离、隐藏骨干网络结构、防标签欺骗和路由器邻居认证等四方面对多协议标记虚拟专用网的安全机制进行了研究,提出了在MPLS VPN基础上结合IPSecVPN进一步提高MPLS VPN安全性的方法。

This paper analyzes the principle of VPN based on Multiprotocol Label Switching （MPLS） , and studies the security of the MPLS VPN form address space and routing separation, hiding of the MPLS core structure, impossibility of label spoofing and authentication of neighbor router. A method of enhancing the security of MPLS VPN by combining IPSec and MPLS is propose.