................................................................................................................. 1. 1. VPN ..................................................... 1.1 .......................................................................................... 1.2 VPN.................................................................................................. 1.3 VPN................................................................. 1.4 VPN................................................................. 1.5 ................................................................................. 1.6 ........................................................................................................ 1.7 VPN............................................................................................ 1.8 VPN.............................................................................................. 1.9 VPN........................................................................................... 2. 2. VPN.......................................................... 2.1 .......................................................................................... 2.2 ..................................................................... 2.3 (Peer Model)................................................................ 2.4 ............................................................ 2.5 ............................................... 2.6 ..................................................................................... 3. 3. MPLS-VPN........................................................................ 3.1 MPLS VPN................................................................................. 3.2 MPLS VPN...................................................... 3.3 MPLS VPN.................................................................................... 3.4 ................................................................................................... 3.5 VPN MPLS.......................................... 3.6 MPLS-VPN.................................................................. ...................................................................................................... ......................................................................................1 C , , Internet, , , . , . , . Internet . Internet , , . VPN - , , , ". , , , , VPN " (, Internet- Internet-). , " "","," .. . - , VPN-. 1. VPN , , , , , . , VPN, , , . (VPN - Virtual Private Network) . , , , VPN , , . . 1.1 VPN Centrex . Centrex PBX (Private Branch Exchange). , 3PBX, . Centrex , , , . Centrex , CUG (Closed Users Group) , PBX. Centrex VPN - CUG, 1.2 VPN VPN? , Internet IP-. VPN . VPN , . 1.3 VPN VPN- . VPN, . . , . . -, , . . , VPN-. VPN- . , , X.509. , , , , . 1. VPN 1.4 VPN VPN (Virtual Private Network - ) VPN- , ( 2).5 2. VPN VPN ( 3) , . (internetwork), Internet. VPN . -, , c , , . -, . 3. VPN , . , . VPN - , . , . . Triple DES, (168 ) . , VPN. , , . MD5 SHA1. , , . , VPN . VPN . , Windows, Linux NetWare. , - .71.5 (tunneling), (encapsulation), - . ( ) . - , , , (Internet). . ( ) . . 1.6 VPN , VPN , . VPN , . VPN , , , . , , . VPN . , VPN . , , VPN. VPN . VPN Internet Protocol Security (IPSec). IPSec VPN. , , . , IP. VPN PPTP (Point-to-Point Tunneling Protocol), Ascend Communications 3Com, L2F (Layer-2 Forwarding) - Cisco Systems L2TP (Layer-2 Tunneling Protocol), . , IPSec, (, PPTP ) IPSec, IKE (Internet Key Exchange), , . , , IPSec . IKE , , . , IKE , . ; LCP - PPP LCP , 9.LCP, , , . PAP, CHAP .; . , IPCP IP. VPN PPTP, L2TP, IPsec, IP-IP. PPTP - IP-, IPX- NetBEUI IP IP-, Internet. L2TP - IP- , - . , IP, (). IPsec - IP IP IP-. IP-IP - IP- IP. IP-IP - , . VPN, , VPN, , , , . VPN , . , VPN .1.7 VPN . - , . . VPN- , , , , . , , . , , , . , VPN- , . , . , - VPN , . Forrester Research , VPN Internet ( 1000 ) (Remote Access Service).11 1 VPN Internet ( . .) 1,08 0,3 0,1 0,02 1,5 VPN( . .) 0,54 0,3 0,02 0,03 0,89 , VPN , , Internet- .. , , (International Computer Security Association, ICSA) VPN , . Gartner Group, , VPN 2002 . 90% . VPN, 11,94 2002 18,77 2004 ( Frost & Sullivan). . , , Internet. VPN- Internet, . , , , . , , , . 1.8 VPN , , . . Internet . . VPN- (). , , . , , Internet. , . , Aventail, , . VPNet Technologies , , , . 56 , DES. , . , 56- 13 . 112- . , , , . 1.9 VPN VPN , , , IP. VPN , . , VPN , . , VPN. VPN. , IpV6, . VPN, , , , IpV6- (, ). VPN. VPN. VPN . . AT&T Level 3 Communications, MCI Worldcom Sprint IP- - , . VPN , , Unisource (AT&T, Telia, PTT Suisse PTT Netherlands), Concert (BT/MCI) Global One (Deutsche Telekom, France Telekom). VPN, , , , . , . , , , . VPN . , .15 2. VPN MPLS-VPN , VPN, . , , , . 2.1 - WAN IP-. - IGP-- . , - (private network backbone). , , . - . , , (VPN). VPN , , , . . Frame Relay ATM . . , , -, , . 1--, , IPSec GRE. - ( ). , , . . -, , , , . , , . , -. , IP- , . , . . . 2.2 , , 17 (meshed network). , , , . (meshed), , , () () , . ( -), , , meshed), . (fully , . ( ), . , IP- . 2.3 (Peer Model) , VPN, . -, , . , VPN -. VPN , . 1 () 2, , ( ). , (), - (). - . - --. -- - - -. - - -. . - , . , IP , Frame Relay, -. IP-. . .192.4 : 1) , - VPN, , VPN. , VPN. 2) -, -. . - . , -, . , . 2.5 , , : 1) - . IP- (, , ), . IP , - . 2) () . --(ISP). , , ISP. , -. - , . , -. 3) -. . , , . IP- - , - . 4) . ( IPSec). , -. , , . 2.6 VPN, . 21 Check Point Software Technologies, VPN. , , Check Point 52% VPN- ( Dataquest). "Intranet VPN", , . , -. "Remote Access VPN", ( ) , ( ) notebook ( ). , , , , VPN, , , VPN. VPN , - . (, Windows 2000), (, "-"). VPN SOHO (Small Office\Home Office), . . "Client/Server VPN", ( ) . , VPN , , , , , . , . , , , . "Extranet VPN" ( 4) , " " (, , ..), , . . 4. "Extranet VPN"23 3. MPLS-VPN MPLS (MPLS VPN) . , Intranet Extranet, , MPLS VPN . , VPN ATM/FR IPSec, MPLS VPN , IP, : Internet, Web , . 3.1 MPLS VPN , MPLS VPN : IP () MPLS , (. 5). 5. MPLS VPN IP, , . . IP . , , , , . (Interior Gateway Protocol, IGP), : RIP, OSPF IS-IS. , , (Customer Edge router, CE). , CE VPN. 25 . MPLS, IP IP-, ( . - ). MPLS (Label Switch Router, LSR), (Label Switching Path, LSP) . LSR IP , IP , . LSR , IP, MPLS . LSR (Provider Edge router, PE), CE (Provider router, P). CE PE , - , PPP, FR, ATM Ethernet. CE PE TCP/ IP, MPLS PE ( P). PE () PE. PE , VPN. VPN, P CE, PE. PE , P. VPN, , . PE LSP , PE IP P. LSP : (IGP) LDP, Traffic Engineering RSVP CR-LDP. LSP PE P, LSP . VPN : , ( huband-spoke) . 3.2 MPLS VPN , MPLS VPN, , VPN. , , 1 VPN A 10.2.1.1/16 2 VPN, 10.1.0.3/16 (. 6).27 6. VPN IP CE1A, 10.1.0.0 PE1. PE1 int2, VRF1, . VRF1A 10.1.0.0 BGP, , PE2. Lvpn=7, PE, , VPN. , BGP, IGP. PE , , . PE2 L LSP, 3. PE1 PE2 , . MPLS VPN MPLS, , . , P, Lvpn=7 L=3. Lvpn , , PE1-PE2. , L. , P , L . PE2 Lvpn. PE2. VRF2, VPNA, , CE2 . , VRF2a IGP. CE2 10.1.0.3 IP. MPLS VPN, VPN , . , / , VPN, MPLS. Cisco VPN Solution Center, VPN, PE. MPLS VPN : , IPSec, . MPLS VPN IP, , c Internet VPN , . MPLS VPN , MPLS: , c MPLS Traffic Engineering. , , , , , , , PE. , MPLS VPN. , , , .293.3 MPLS VPN MPLS VPN, . , 50 MPLS. MPLS VPN MPLS, IETF , MPLS VPN. , PPVPN (Provider Provisioned Virtual Private Network) VPN , . VPN, PPVPN, MPLS BGP VPN, MPLS Virtual Routers MPLS Layer 2 VPN. PWE3 (Pseudo Wire Emulation Edge to Edge), ATM MPLS . (Layer 2 VPN) , Martini, IETF PWE3. Ethernet, Frame Relay, ATM PPP MPLS. PWE3 , - Martini. 3.4 MPLS VPN. . VPN . VPN () . . . MPLS VPN , IPsec PPTP (Point-to-Point Tunneling Protocol) VPN, . MPLS VPN . , MPLS. LSR (Label Switch Routers), . IP- MPLS . Frame Relay, . , , MPLS 3.5 VPN MPLS VPN MPLS : ; , VPN; VPN OSI. , 31 VPN PE, . VPN , , VPN , , 10.0.0.0/8. P (LSR) , LSP PE, IP , , P OSI. PE , , , CE, VRF. VPN , VPN OSI. Miercom , , MPLS/VPN Cisco Systems Frame Relay ATM. 3.6 MPLS-VPN MPLS-VPN , Frame Relay ATM. MPLS-VPN BGP IP-. BGP- . , community. VPN , VPN BGP Route Distinguisher (RD). RD , . VPN . VPN MPLS BGP FIB (Forwarding Information Base) VPN VPN, . , VPN . RD, VPN. , RD. Cisco MPLS-VPN . Interior Gateway Protocol (IGP), OSPP IS-IS. -, LDP . () LDP, BGP. Community BGP , . BGP , , PIB , VPN. , . , IP- 33 . VPN . MPLS-VPN , , VPN , (-) -. IP- (forwarding table) VPN. VPN . , . VPN, . , , . . , , , . , , , , . , . VPN, , , " ". VPN , ( ). , . , VPN (firewall). , .35 MPLS : : Cisco Systems , , 3- : ( /LAN.); ( .) http://athena.vvsu.ru/docs/tcpip/mpls/ - MPLS http://system-administrators.info/?p=1179 - MPLS VPN http://www.connect.ru/article.asp?id=5343 - Connect: VPN