QinQ VLAN模式下校园网IPv6升级方案

CAMPUS NETWORK IPv6 UPDATING RESOLUTION BASED ON QinQ VLAN MODE

绝大多数校园网的VLAN规划都采用给用户数据包打单层vlan标签的模式。而上海财经大学校园网采用QinQ的VLAN模式,对用户数据包打两层vlan标签,大大增加可用vlan数目,可以给每个用户划分一个vlan。该模式可以有效防范ARP病毒,但是在增强网络安全性的同时造成用户vlan过多,IPv6升级改造的难度相应加大。介绍在QinQ VLAN模式下校园网由IPv4网络升级到IPv6网络的方案,对升级过程中遇到的问题进行分析,给出了校园网升级后的网络拓扑、交换机上的关键配置、IPv6路由设计、IPv6 SAVI的部署以及升级完成后IPv6网络使用情况。

The VLAN solutions in most of the campus networks adopt the mode that users＇ data packet i：~ inserted one layer VLAN tag. But the campus network at Shanghai University of Finance and Economics uses QinQ VLAN mode, which inserts two layers VLAN tag into user data packet and the VLAN number is significantly increased, each user can be plotted a VLAN. This mode can prevent ARP virus effectively. However, though the network security has been enhanced, the VLAN number is also greatly increased, this makes the network＇ s IPv6 update more difficult. The paper introduces an updating resolution for campus network from IPv4 to IPv6 in QinQ VLAN mode. In it the difficulties encountered in the updating process are analysed. It also presents the topology of the network, the key configurations of the switches, the design of IPv6 route and the deployment of IPv6 SAVI, etc. , after the update is completed. Finally, the operation of IPv6 network after the update is given as well.