安徽电网数据通信网双网互备与隧道传输技术探讨与应用
|
摘要
当前国家电网有限公司安徽电力数据通信网承载于省骨干OTN传输网上,由于OTN传输网设备在每个站点为单台部署,因此面临着设备单点故障时业务中断的危险,且国家电网有限公司安徽省电力有限公司重要数据异地备份需在数据通信网开通二层传输隧道以满足快速备份和局域网内异地互访的要求。文章结合安徽电网数据通信网网络拓扑和业务承载现状,在双网冗余互备、二层隧道传输、边界网关协议邻居安全认证3个方面进行研究并提出相应的解决策略。通过选路策略,使用多出口鉴别和Local-Prefence属性设置路由优先级,解决业务通道迂回问题,实现业务端对路由通道的自主可控切换;设计基于MPLS网络的2层隧道开通方案,满足了透明传输数据的需求;设计Keychain认证策略有效地保护边界网关协议免受非法用户的攻击。研究结果对数据通信网IP业务的安全可靠承载具有参考价值。
The current Anhui power data communication network is carried on the backbone OTN transmission network. Since there is only one OTN equipment deployed at each site, business interruption happens when the OTN equipment is out of work. And to meet the requirements of fast backup and remote access in the LAN, a two-layer transmission tunnel is needed for the remote backup of important data. Combining the current situation of network topology and business of data communication network of Anhui Power Grid, dual network redundancy mutual backup, two-layer tunnel transmission and BGP neighbor security authentication are studies in this paper and corresponding solutions are presented. The routing strategy using the MED and Local-Prefence attributes to set the routing priority, solve the service channel bypass problem and achieve the autonomous controllable switching of the routing channel. A two-layer tunnel scheme based on the MPLS network is designed to meet the need of transparent transmission and the Keychain authentication policy is designed to effectively protect the BGP protocol from unauthorized users. The work presented in this paper provides a reference for the security and reliability of IP services carried by data communication network.
The current Anhui power data communication network is carried on the backbone OTN transmission network. Since there is only one OTN equipment deployed at each site, business interruption happens when the OTN equipment is out of work. And to meet the requirements of fast backup and remote access in the LAN, a two-layer transmission tunnel is needed for the remote backup of important data. Combining the current situation of network topology and business of data communication network of Anhui Power Grid, dual network redundancy mutual backup, two-layer tunnel transmission and BGP neighbor security authentication are studies in this paper and corresponding solutions are presented. The routing strategy using the MED and Local-Prefence attributes to set the routing priority, solve the service channel bypass problem and achieve the autonomous controllable switching of the routing channel. A two-layer tunnel scheme based on the MPLS network is designed to meet the need of transparent transmission and the Keychain authentication policy is designed to effectively protect the BGP protocol from unauthorized users. The work presented in this paper provides a reference for the security and reliability of IP services carried by data communication network.
引文
[1]许丹莉,文继锋,付艳兰,等.基于无缝冗余协议的智能变电站通信组网方式[J].广东电力,2017,30(12):75-80.XU Danli,WEN Jifeng,FU Yanlan,et al.Communication networking mode of smart substation based on seamless redundancy protocol[J].Guangdong Electric Power,2017,30(12):75-80.
[2]马睿,何海洋,李长水.国网数据通信网跨域VPN的设计与兼容性实现[J].电力信息与通信技术,2016,14(12):80-84.MA Rui,HE Haiyang,LI Changshui.Design and compatibility implementation of state grid data communication network crossdomain VPN[J].Electric Power Information and Communication Technology,2016,13(12):80-84.
[3]郝悍勇,王一蓉,樊秀娟.基于CDN的电力数据通信网加速技术研究及实现[J].电力信息与通信技术,2016,14(4):79-83.HAO Hanyong,WANG Yirong,FAN Xiujuan.Research and implementation of power data communication network acceleration technology based on CDN[J].Electric Power Information and Communication Technology,2016,14(4):79-83.
[4]张京伦,马永红,王申.基于IEC 61850和MAS的ADN信息通信技术研究[J].广东电力,2017,30(11):72-78.ZHANG Jinglun,MA Yonghong,WANG Shen.Research on information communication technology based on IEC 61850 and MAS[J].Guangdong Electric Power,2017,30(11):72-78.
[5]胡荣,李力,付艳兰,等.基于OPNET的智能变电站通信建模与组网研究[J].广东电力,2017,30(10):75-80.HU Rong,LI Li,FU Yanlan,et al.Intelligent substation communication modeling and networking based on OPNET[J].Guangdong Electric Power,2017,30(10):75-80.
[6]叶晓君,单政博,林冠强,等.基于图论算法的电网核心骨干网架构建设[J].广东电力,2017,30(10):81-85.Y E X i a o j u n,S H A N Z h e n g b o,L I N G u a n q i a n g,e t a l.Construction of core backbone grid based on graph theory algorithm[J].Guangdong Electric Power,2017,30(10):81-85.
[7]朱正甲,尤新雨,郑陈熹,等.基于位置加权的电力通信网站点带宽估算方法[J].电信科学,2018,34(10):150-156.ZHU Zhengjia,YOU Xinyu,ZHENG Chenxi,et al.Power communication website bandwidth estimation method based on position weighting[J].Telecommunications Science,2018,34(10):150-156.
[8]曲振华.国家电网IMS承载网网络架构设计方案及带宽测算方法[J].电信科学,2017,33(7):167-175.QU Zhenhua.Design of network architecture and method of bandwidth measure for IMS bearer network of State Grid[J].Telecommunications Science,2017,33(7):167-175.
[9]赵子岩,樊剑辉,金鑫,等.电力骨干通信网信息流模型与流量测算[J].电信科学,2017,33(5):153-163.ZHAO Ziyan,FAN Jianhui,JIN Xin,et al.Information flow model and service flow calculation of electric power backbone communication network[J].Telecommunications Science,2017,33(5):153-163.
[10]郝成斌,王连鹏.电力行业数据通信网网络结构研究[J].数字技术与应用,2016,34(12):32,34.
[11]熊铖.VPN技术在企业网中的研究与应用[J].贵州电力技术,2016,19(1):34-36.XIONG Cheng.Research and application of VPN technology in the enterprise network[J].Guizhou Electric Power Technology,2016,19(1):34-36.
[12]崔力民,何清素,王俊生,等.基于二分图模型的通信信息网络故障联合定位[J].电信科学,2017,33(3):76-82.CUI Limin,HE Qingsu,WANG Junsheng,et al.Network fault location based on bipartite graphs for communication and information networks[J].Telecommunications Science,2017,33(3):76-82.
[13]高正,田嘉,李晨曦.基于优化组网的间隔层五防系统的通信网络研究[J].智慧电力,2017,45(12):97-101.GAO Zheng,TIAN Jia,LI Chenxi.Research on communication network for five-prevention system in bay level based on optimized network[J].Smart Power,2017,45(12):97-101.
[14]刘耀辉,罗建勇,时昌剑.基于宽带OFDM电力线通信的载波资源分配算法[J].电网与清洁能源,2018,34(1):96-100.LIU Yaohui,LUO Jianyong,SHI Changjian.Algorithm of carrier resource allocation based on broadband OFDM power line communication[J].Power System and Clean Energy,2018,34(1):96-100.
[15]王均.电力通信综合网系统的优化设计与实现[J].电子设计工程,2018,26(24):121-125.WANG Jun.Optimal design and implementation of power communication integrated network system[J].Electronic Design Engineering,2018,26(24):121-125.
[16]孙国善,徐飞,田锁太,等.内蒙古电力通信业务数据网的设计[J].电力信息与通信技术,2015,13(6):36-39.SUN Guoshan,XU Fei,TIAN Suotai,et al.Design of Inner Mongolia power communication service data network[J].Electric Power Information and Communication Technology,2015,13(6):36-39.
[17]梁泽海.基于IPSec的VPN在校园网中的研究与设计[J].信息与电脑(理论版),2018(4):122-125.LIANG Zehai.Research and design of VPN based on IPSec in campus Network[J].China Computer&Communication,2018(4):122-125.
[18]吴作文.浅析电力信息通信传输中OTN技术的应用[J].通讯世界,2018,25(12):197-198.
[2]马睿,何海洋,李长水.国网数据通信网跨域VPN的设计与兼容性实现[J].电力信息与通信技术,2016,14(12):80-84.MA Rui,HE Haiyang,LI Changshui.Design and compatibility implementation of state grid data communication network crossdomain VPN[J].Electric Power Information and Communication Technology,2016,13(12):80-84.
[3]郝悍勇,王一蓉,樊秀娟.基于CDN的电力数据通信网加速技术研究及实现[J].电力信息与通信技术,2016,14(4):79-83.HAO Hanyong,WANG Yirong,FAN Xiujuan.Research and implementation of power data communication network acceleration technology based on CDN[J].Electric Power Information and Communication Technology,2016,14(4):79-83.
[4]张京伦,马永红,王申.基于IEC 61850和MAS的ADN信息通信技术研究[J].广东电力,2017,30(11):72-78.ZHANG Jinglun,MA Yonghong,WANG Shen.Research on information communication technology based on IEC 61850 and MAS[J].Guangdong Electric Power,2017,30(11):72-78.
[5]胡荣,李力,付艳兰,等.基于OPNET的智能变电站通信建模与组网研究[J].广东电力,2017,30(10):75-80.HU Rong,LI Li,FU Yanlan,et al.Intelligent substation communication modeling and networking based on OPNET[J].Guangdong Electric Power,2017,30(10):75-80.
[6]叶晓君,单政博,林冠强,等.基于图论算法的电网核心骨干网架构建设[J].广东电力,2017,30(10):81-85.Y E X i a o j u n,S H A N Z h e n g b o,L I N G u a n q i a n g,e t a l.Construction of core backbone grid based on graph theory algorithm[J].Guangdong Electric Power,2017,30(10):81-85.
[7]朱正甲,尤新雨,郑陈熹,等.基于位置加权的电力通信网站点带宽估算方法[J].电信科学,2018,34(10):150-156.ZHU Zhengjia,YOU Xinyu,ZHENG Chenxi,et al.Power communication website bandwidth estimation method based on position weighting[J].Telecommunications Science,2018,34(10):150-156.
[8]曲振华.国家电网IMS承载网网络架构设计方案及带宽测算方法[J].电信科学,2017,33(7):167-175.QU Zhenhua.Design of network architecture and method of bandwidth measure for IMS bearer network of State Grid[J].Telecommunications Science,2017,33(7):167-175.
[9]赵子岩,樊剑辉,金鑫,等.电力骨干通信网信息流模型与流量测算[J].电信科学,2017,33(5):153-163.ZHAO Ziyan,FAN Jianhui,JIN Xin,et al.Information flow model and service flow calculation of electric power backbone communication network[J].Telecommunications Science,2017,33(5):153-163.
[10]郝成斌,王连鹏.电力行业数据通信网网络结构研究[J].数字技术与应用,2016,34(12):32,34.
[11]熊铖.VPN技术在企业网中的研究与应用[J].贵州电力技术,2016,19(1):34-36.XIONG Cheng.Research and application of VPN technology in the enterprise network[J].Guizhou Electric Power Technology,2016,19(1):34-36.
[12]崔力民,何清素,王俊生,等.基于二分图模型的通信信息网络故障联合定位[J].电信科学,2017,33(3):76-82.CUI Limin,HE Qingsu,WANG Junsheng,et al.Network fault location based on bipartite graphs for communication and information networks[J].Telecommunications Science,2017,33(3):76-82.
[13]高正,田嘉,李晨曦.基于优化组网的间隔层五防系统的通信网络研究[J].智慧电力,2017,45(12):97-101.GAO Zheng,TIAN Jia,LI Chenxi.Research on communication network for five-prevention system in bay level based on optimized network[J].Smart Power,2017,45(12):97-101.
[14]刘耀辉,罗建勇,时昌剑.基于宽带OFDM电力线通信的载波资源分配算法[J].电网与清洁能源,2018,34(1):96-100.LIU Yaohui,LUO Jianyong,SHI Changjian.Algorithm of carrier resource allocation based on broadband OFDM power line communication[J].Power System and Clean Energy,2018,34(1):96-100.
[15]王均.电力通信综合网系统的优化设计与实现[J].电子设计工程,2018,26(24):121-125.WANG Jun.Optimal design and implementation of power communication integrated network system[J].Electronic Design Engineering,2018,26(24):121-125.
[16]孙国善,徐飞,田锁太,等.内蒙古电力通信业务数据网的设计[J].电力信息与通信技术,2015,13(6):36-39.SUN Guoshan,XU Fei,TIAN Suotai,et al.Design of Inner Mongolia power communication service data network[J].Electric Power Information and Communication Technology,2015,13(6):36-39.
[17]梁泽海.基于IPSec的VPN在校园网中的研究与设计[J].信息与电脑(理论版),2018(4):122-125.LIANG Zehai.Research and design of VPN based on IPSec in campus Network[J].China Computer&Communication,2018(4):122-125.
[18]吴作文.浅析电力信息通信传输中OTN技术的应用[J].通讯世界,2018,25(12):197-198.