基于分层DMVPN的双核心架构企业网方案分析

Analysis of Enterprise Network with Dual Core Architecture Based on Layered DMVPN

针对超大规模企业的网络环境,总公司与分公司以及分公司之间需要安全可靠的局域网间通信,采用具有高扩展性的DMVPN技术,并通过区域层次化管理来分散总公司出口站点的配置和维护压力。使用双核心架构实现了总公司出口站点间相互备份,两核心站点正常工作时各站点局域网传输流量可负载均衡,当有任何一个站点出现故障,另一个站点负责承载所有流量,不影响正常的网络通信,避免单点故障。基于第三阶段DMVPN的特性分别使用单个隧道云和分层隧道云的mGRE规划方法,分析并验证局域网连通情况,得到更优的局域网安全互联方法。

In view of the network environment of super-large enterprises,safe and reliable LAN communication between headquarters and branches as well as between branches is needed.DMVPN technology with high expansibility is adopted,and the configuration and maintenance pressure of exit site of headquarters is dispersed through regional hierarchical management.The dual core architecture is used to realize the mutual backup between the exit sites of the parent company.When the two core sites work normally,the traffic transmitted on the LAN of each site can be load balanced.When one site fails,the other site is responsible for carrying all the traffic,which does not affect the normal network communication and avoids single point of failure.Based on the characteristics of the third stage DMVPN,the mGRE planning method of single tunnel cloud and layered tunnel cloud is used to analyze and verify the LAN connectivity,and a better LAN security interconnection method is obtained.