framework fig 3.2 +----------+ +----------+ - - PowerPoint PPT Presentation

▶
framework fig 3 2
SMART_READER_LITE
LIVE PREVIEW

framework fig 3.2 +----------+ +----------+ - - PowerPoint PPT Presentation

Apr 19, 2023 210 likes •292 views

framework fig 3.2 +----------+ +----------+ +-----+ |PE router | |PE router | +-----+ | CE | | | | | | CE | | dev | Access | +------+ |

slide-1
SLIDE 1

framework fig 3.2

+----------+ +----------+ +-----+ |PE router | |PE router | +-----+ | CE | | | | | | CE | | dev | Access | +------+ | | +------+ | Access | dev | | of | conn. | |VFI of| | VPN tunnel | |VFI of| | conn. | of | |VPN A|----------|VPN A |======================|VPN A |----------|VPN A| +-----+ | +------+ | | +------+ | +-----+ | | | | +-----+ Access | +------+ | | +------+ | Access +-----+ | CE | conn. | |VFI of| | VPN tunnel | |VFI of| | conn. | CE | | dev |----------|VPN B |======================|VPN B |----------| dev | | of | | +------+ | | +------+ | | of | |VPN B| | | | | |VPN B| +-----+ +----------+ +----------+ +-----+ Figure 3.2: Relationship between entities in reference model (1).

slide-2
SLIDE 2

+----------+ +----------+ +-----+ |PE router | |PE router | +-----+ | CE | | | | | | CE | | dev | Access | +------+ | | +------+ | Access | dev | | of | conn. | |VFI of| | | |VFI of| | conn. | of | |VPN A|----------|VPN A | | | |VPN A |----------|VPN A| +-----+ | +------+\| VPN tunnel |/+------+ | +-----+ | >==================< | +-----+ Access | +------+/| |\+------+ | Access +-----+ | CE | conn. | |VFI of| | | |VFI of| | conn. | CE | | dev |----------|VPN B | | | |VPN B |----------| dev | | of | | +------+ | | +------+ | | of | |VPN B| | | | | |VPN B| +-----+ +----------+ +----------+ +-----+ Figure 3.3: Relationship between entities in reference model (2).

fig 3.3

this vpn tunnel is a different thing

slide-3
SLIDE 3

vpn tunnels defined

they keep packets destined to different vfis separate the vpn tunnel header gets a packet to:

! vfi on the remote pe ! perhaps also next hop

slide-4
SLIDE 4

proposed layering

+--------------------+ +--------------------+ | PE Node | | PE Node | | | VPN | | | +--------+ | Control | +--------+ | | | VPN | | Protocol | | VPN | | | | Client |<-------------------------->| Client | | | | Appl. | | | | Appl. | | | +---+----+ | | +---+----+ | | | | | | | | +-+-+-+----------+| |+-----+-+-+------+ | | | |SAP| || || |SAP| | | | | +---+ || || +---+ | | | | Core || Core || Core | | | | Connectivity || Protocols || Connectivity | | | | Services ||<============>|| Services | | | | || || | | | +----------------+| |+----------------+ | +--------------------+ +--------------------+

slide-5
SLIDE 5

for example

+ - - +---------------------------+--------+-------------+ | Private | VPN | Core | | CPT | User | Tunnel | Protocol | | Payload | Header | Headers | + - - +---------------------------+--------+-------------+ | Examples of | Exmpls.| Examples | Private User | of VPN | of Core CPT | Payload Protocols | Tunnels| Protocols

  • -----+---------------------------+--------+--------------
  • AAL5 | -Priv. addr. IPv4 | -MPLS | -MPLS LSE(s)

Trlr | -Pub. addr. IPv6 | LSP | -1483 | -IPSec | -? | -IPv4 | -IPX | | -GRE | -NetBEUI | | -IPSec | -Appletalk | | -L2TP

slide-6
SLIDE 6

benefit

ppvpn solutions must support

! without layering

  • n-by-m matrix of protocol interactions

! with the proposed layering

  • encapsulation into the vpn tunnel and of the

vpn tunnel

control protocols only refer to vpn tunnels vpn app. uses core connectivity

slide-7
SLIDE 7

ascii art rules!

+---------+ +------------------------------------+ +---------+ | | | | | | | | | +------+ +------+ : +------+ +------+ : | | | | | | : | CE | | CE | : | | | P | | PE | : |device| |device| : +------+ VPN tunnel : |router| |router| : | of | | of |-:--| |================:===============| |--:-|VPN A| |VPN A| : | | : +------+ +------+ : +------+ +------+ : | PE | : | | : | +------+ : |router| Network interface | | : | | CE | : | | : +------+ : +------+ |device|-:--| |================:===============| |--:-| CE | | of | : +------+ : VPN tunnel | PE | : |device| |VPN B| : | | |router| : | of | +------+ : | | +------------+ +------------+ | | : |VPN B| | : | | | Customer | | Network | +------+ : +------+ |Customer | | | management | | management | | | : | |interface| | | function | | function | | |Customer | | | | +------------+ +------------+ | |interface| | | | | | | +---------+ +------------------------------------+ +---------+ | Access | |<---------- SP network(s) --------->| | Access | | network | | Somebody set up us the bombs | | network |