CRNET与城域网建设技术交流汇.ppt

杭州CNC网络状况 用户情况 有线电视用户150万。市区46万 目前上网人数：6万多户 3000多企业虚拟网接入节点 内容服务， IDC数据中心服务 IP电话超市盈利 10万/天 绑定销售/销售电脑赠宽带 目前1000万/月的盈利 全业务提供－铁通城域网 Classical Internet Access Addressing The Customer can use private address space. The firewall provides Network Address Translation (NAT) between the private address space and the small portion of public address space assigned to the customer. Internet Access from Every Site—Addressing Two addressing options: Every CE router performs NAT functionality—a small part of the public address space has to be assigned to each CE router. The customer uses only public IP addresses in the private network—not realistic for many customers. Central Firewall ServiceTraffic Flow Combining Internet Access with VPN Services Two major design models: Internet access offered through yet another VPN Internet access offered through global routing on the PE routers Internet Access in a VPN Benefits: The provider backbone is isolated from the Internet; increased security is realized. Drawbacks: All Internet routes are carried as VPN routes; full Internet routing cannot be implemented because of scalability problems. Internet Access Through Global Routing Two implementation options: Internet access is implemented via separate interfaces that are not placed in any VPN routing/forwarding instance (VRF) (traditional Internet access setup). Packet leaking between a VRF and the global table is achieved through special configuration commands. Internet Access Through Packet Leaking Benefits: This method can be implemented over any WAN or LAN media. Drawbacks: Internet and VPN traffic is mixed over the same link; security issues arise. More complex Internet connectivity options (for example, full Internet routing for customers) are hard to implement. Packet Leaking in Action Internet Access Through a Dedicated Subinterface—Traffic Flow 运营商之运营商Customer-ISP 不运行 MPLS 运营商之运营商Customer-ISP 运行 MPLS 运营商之运营商Customer-ISP 运行MPLS-VPN 网际 MPLS VPN 与广电基于Voice Over Cable的合作 城域MPLS