基于CDMA1X的VPDN在企业接入技术的应用
|
摘要
VPDN(Virtual Private Dialup Networks)是基于拨号用户的虚拟专用拨号网业务,利用IP网络的承载功能,结合相应的认证和授权机制,可以建立安全的虚拟专用网络。
凭借CDMA1X高速分组数据网络为承载网,建立起的VPDN企业级接入专网,将为公司、银行、公安、医疗等企业用户,提供随时随地的快速、安全、方便的企业专网访问,这不仅为企业用户带来运营成本的缩减,也为运营商带来了新的利润增长点。
本文作者根据湖南联通CDMA1X网络现状,收集了众多企业单位组建VPDN的需求,进行了分析归类后,最终确立提出了适合于湖南联通CDMA1X VPDN企业接入的四类安全、可靠、合理、可行的接入技术,即无线公网接入技术、长途专线接入技术、专线接入联通互联网165技术、无线MPLS VPN接入技术,并利用提出的四类接入技术建立了湖南联通CDMA1X的VPDN接入平台。在论文中对四类基于CDMA1X的VPDN企业级接入技术从协议方式、安全性、企业网关地址、企业用户地址分配、接入技术条什、移动漫游性几方面进行了全面的比较,同时将搭建湖南联通CDMA1X VPDN接入平台中所进行的关键性配置编写入了论文中。为了更好地对实际VPDN企业级接入起到指导作用,在论文中还编写了平台接入时经常会遇到的配置错误问题和问题定位办法。同时通过几个应用实例,详细介绍了VPDN接入实施方案和接入实施过程及关键性配置,并以界面形式将实际用户接入访问过程演示出来了。
目前,湖南联通基于CDMA1X的VPDN企业级接入业务正转入业务实验阶段。在实验中也发现了一些的问题,本文对可能出现和存在的VPDN接入的安全性问题,提出了一些相应的解决方案。
The VPDN (Virtual Private Dialup Networks) technology, which is based on the dialup customers, provides a specialized, secure solution to consolidate virtual networks and services. The technology exploits the IP networks' supporting function and takes advantage of the corresponding authentication and authorization.Rely on CDMA1X fast packet data network, we sets up a virtual private network of VPDN for enterprise to access Internat at a high speed, such as enterprise like bank ,government, public security, medical treatment and so on.This network is able to offer fast, safe , convenient special network for enterprise whenever and wherever possibly to visit. Not only it brings the reduction of the operation cost for enterprise's users .but also it brings the new point of growth of profit to the operator.According to Hunan UNICOM 's CDMA1X network current situation, the author has collected a great deal of demands for setting up enterprise's VPDN. After analysing and summing up those demans, the author finally has set up and put forward four kinds of safe , reliable , rational , feasible access technologies which is suitable for CDMA1X VPDN of enterprises of Hunan UNICOM .These access technologies are namely included about wireless common network access technology , long-distance private line access technology , private line connect to Internet for 165 access technology and wireless MPLS VPN access technology,and utilize these four kinds of access technologies for setting up access platform for enterprise using VPDN access to CDMA1X network of Hunan UNICOM. In this thesis,the author roundly compares four kinds of VPDN access technologies from six aspects such as protocol , security , enterprise gateway address , address assignment, access technology terms , roaming etc . At the same time the author writes some key configure into the text. In order to perfectly play a role in guiding to actual application for VPDN enterprise access , the author lists familiar wrong question and gives means how to solve the question . Simultaneity in Through some examples , the author tells how to realize VPDN access and
some configure in detail,and at the same time the author demonstrates the access process through visit interphase.At present, VPDN access application for hunan UNICOM has being changed to business experiment stage. In practical applications ,the author has found some security questions, so in this thesis the author has brought forword some corresponding solutions to solve security questions.
凭借CDMA1X高速分组数据网络为承载网,建立起的VPDN企业级接入专网,将为公司、银行、公安、医疗等企业用户,提供随时随地的快速、安全、方便的企业专网访问,这不仅为企业用户带来运营成本的缩减,也为运营商带来了新的利润增长点。
本文作者根据湖南联通CDMA1X网络现状,收集了众多企业单位组建VPDN的需求,进行了分析归类后,最终确立提出了适合于湖南联通CDMA1X VPDN企业接入的四类安全、可靠、合理、可行的接入技术,即无线公网接入技术、长途专线接入技术、专线接入联通互联网165技术、无线MPLS VPN接入技术,并利用提出的四类接入技术建立了湖南联通CDMA1X的VPDN接入平台。在论文中对四类基于CDMA1X的VPDN企业级接入技术从协议方式、安全性、企业网关地址、企业用户地址分配、接入技术条什、移动漫游性几方面进行了全面的比较,同时将搭建湖南联通CDMA1X VPDN接入平台中所进行的关键性配置编写入了论文中。为了更好地对实际VPDN企业级接入起到指导作用,在论文中还编写了平台接入时经常会遇到的配置错误问题和问题定位办法。同时通过几个应用实例,详细介绍了VPDN接入实施方案和接入实施过程及关键性配置,并以界面形式将实际用户接入访问过程演示出来了。
目前,湖南联通基于CDMA1X的VPDN企业级接入业务正转入业务实验阶段。在实验中也发现了一些的问题,本文对可能出现和存在的VPDN接入的安全性问题,提出了一些相应的解决方案。
The VPDN (Virtual Private Dialup Networks) technology, which is based on the dialup customers, provides a specialized, secure solution to consolidate virtual networks and services. The technology exploits the IP networks' supporting function and takes advantage of the corresponding authentication and authorization.Rely on CDMA1X fast packet data network, we sets up a virtual private network of VPDN for enterprise to access Internat at a high speed, such as enterprise like bank ,government, public security, medical treatment and so on.This network is able to offer fast, safe , convenient special network for enterprise whenever and wherever possibly to visit. Not only it brings the reduction of the operation cost for enterprise's users .but also it brings the new point of growth of profit to the operator.According to Hunan UNICOM 's CDMA1X network current situation, the author has collected a great deal of demands for setting up enterprise's VPDN. After analysing and summing up those demans, the author finally has set up and put forward four kinds of safe , reliable , rational , feasible access technologies which is suitable for CDMA1X VPDN of enterprises of Hunan UNICOM .These access technologies are namely included about wireless common network access technology , long-distance private line access technology , private line connect to Internet for 165 access technology and wireless MPLS VPN access technology,and utilize these four kinds of access technologies for setting up access platform for enterprise using VPDN access to CDMA1X network of Hunan UNICOM. In this thesis,the author roundly compares four kinds of VPDN access technologies from six aspects such as protocol , security , enterprise gateway address , address assignment, access technology terms , roaming etc . At the same time the author writes some key configure into the text. In order to perfectly play a role in guiding to actual application for VPDN enterprise access , the author lists familiar wrong question and gives means how to solve the question . Simultaneity in Through some examples , the author tells how to realize VPDN access and
some configure in detail,and at the same time the author demonstrates the access process through visit interphase.At present, VPDN access application for hunan UNICOM has being changed to business experiment stage. In practical applications ,the author has found some security questions, so in this thesis the author has brought forword some corresponding solutions to solve security questions.
引文
[1] 孟玉安,白峰,刘晓静.IP VPDN—组建企业信息专网新方案.电信技术,2004(10):34～37
[2] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.CDMA2000 1X分组数据业务手册(第一册).北京:中国标准出版社,2003—2
[3] 苏华英.IP技术及其应用.北京:人民邮电出版社,1999
[4] 王勇.VPDN技术及其在中国的应用和未来.中国电子报,2004(11):12～14
[5] 刑小良.宽带因特网时代电信运营商的业务重心.电信技术,2004(7):11～15
[6] 冯锡生,朱荣.无线数据通信.北京:中国铁道出版社,1997
[7] 娄绍明,纪红,李安涛.无线局域网标准及应用.移动通信,1999(4):22～23
[8] 候志强.IP路由技术演化及发展趋势.北京:海洋出版社,1998
[9] 范平志,赵其刚.无线局域网及其关键技术.计算机应用,1998(9):17～19
[10] 祁玉生,邵世祥.现代移动通信系统.北京:人民邮电出版社,2000
[11] 曾玲.CDMA在中国的发展现状分析.邮电商情.1999(20):3～4
[12] 樊昌信.通信原理.北京:国防工业出版社,1995
[13] 张丽娟,谈振辉.第三代移动通信系统概述及向其演进的趋势.邮电商情,1999(10):26～27
[14] 谢五胜,白铃.中国第三代移动通信系统的发展.广西通信技术,2000(1):11～13
[15] 3GPP2 C. R1000-0 Version 1.0 Capabilities Requirements Mapping for cdma2000 Standards. Virginia: Third Generation Partnership Project 2, 2001
[16] 3GPP2 C. S1000-A Version 1.0 Introduction to cdma2000 Standards for Spread Spectrum. Virginia: Third Generation Partnership Project 2, 2001
[17] 3GPP2 S. R0032 IP Network Architecture Model for cdma2000 Spread Spectrum Systems. Virginia: Third Generation Partnership Project 2, 2002
[18] 3GPP-C50-20010611-010 A MIMO Channel Model for 1X EV-DV EVALUATION. Nokia Research Center, 2000
[20] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.联 通新时空CDMA 工程技术手册(第一册).北京:中国标准出版社,2002—4
[21] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.联通新时空CDMA工程技术手册(第二册).北京:中国标准出版社,2002—4
[22] BALCK U D. ATM Foundation for Broadband Networks. Prenticae_hall, 1995
[23] Manchester J. IP over SONET. IEEE Communications Magazine. 1998: 36(5): 136
[24] P. W. Baier and T. Weber. CDMA for UMTS and IMT-2000. ICPMSC, 1998
[25] James D. Solomon. Mobile IP: The Internet Unplugged, 1999
[26] Theodore S. Rappaport. Wireless Communications Principles and Practice. New Jersey: Prentice-Hail, Inc., 1996
[27] ITU. IMT-2000 Radio Interface Specifications Approved in ITU Meeting in Helsinki. ITU/99-22, 1999
[28] STEVENS W. R. TCP/IP Illustrated. Computer Commun, VOL 1, 1994
[29] 陈运清,毛拥华,赵慧玲.适合NGN的VPN承载平台的构建和推进.电信技术,2004(10):3～7
[30] 樊自甫,万晓榆,常大为.MPLS在支持微移动技术中的应用研究.电信技术,2004(12):44～47
[31] 毛成勇.城域网中MPLS VPN的实现.邮电商情,2002(14):29～32
[32] STALLINGS W. Networks and Internetwork Security. New York: MacmillaN, 1994
[33] DEERING S. E. SIP: Simple Internet Protocol. IEEE Networks Mgazine, 1999(7): 16～28
[34] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.CDMA2000 1X分组数据业务手册(第二册).北京:中国标准出版社,2003—2
[35] 刑宁霞.移动通信核心网的演进.电信科学,2000(5):31～33
[36] 3GPP2 A. S007-0 v2.0 Inter-operability Specification(IOS) for High Rate Packet Data(HRPD) Access Network Interfaces. Virginia: Third Generation Partnership Project 2, 2001
[37] MINOLI. Video Dialtone Technology. New York: MxGraw, 1995
[38] 李明铎.VPDN的安全性分析.电信技术,2004(12):44～47
[39] 朗讯科技中国有限公司.多业务企业网解决方案.移动通信,2004(11)
[40] 李向华.IP城域网现状及优化.电信技术,2005(3):26～27
[2] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.CDMA2000 1X分组数据业务手册(第一册).北京:中国标准出版社,2003—2
[3] 苏华英.IP技术及其应用.北京:人民邮电出版社,1999
[4] 王勇.VPDN技术及其在中国的应用和未来.中国电子报,2004(11):12～14
[5] 刑小良.宽带因特网时代电信运营商的业务重心.电信技术,2004(7):11～15
[6] 冯锡生,朱荣.无线数据通信.北京:中国铁道出版社,1997
[7] 娄绍明,纪红,李安涛.无线局域网标准及应用.移动通信,1999(4):22～23
[8] 候志强.IP路由技术演化及发展趋势.北京:海洋出版社,1998
[9] 范平志,赵其刚.无线局域网及其关键技术.计算机应用,1998(9):17～19
[10] 祁玉生,邵世祥.现代移动通信系统.北京:人民邮电出版社,2000
[11] 曾玲.CDMA在中国的发展现状分析.邮电商情.1999(20):3～4
[12] 樊昌信.通信原理.北京:国防工业出版社,1995
[13] 张丽娟,谈振辉.第三代移动通信系统概述及向其演进的趋势.邮电商情,1999(10):26～27
[14] 谢五胜,白铃.中国第三代移动通信系统的发展.广西通信技术,2000(1):11～13
[15] 3GPP2 C. R1000-0 Version 1.0 Capabilities Requirements Mapping for cdma2000 Standards. Virginia: Third Generation Partnership Project 2, 2001
[16] 3GPP2 C. S1000-A Version 1.0 Introduction to cdma2000 Standards for Spread Spectrum. Virginia: Third Generation Partnership Project 2, 2001
[17] 3GPP2 S. R0032 IP Network Architecture Model for cdma2000 Spread Spectrum Systems. Virginia: Third Generation Partnership Project 2, 2002
[18] 3GPP-C50-20010611-010 A MIMO Channel Model for 1X EV-DV EVALUATION. Nokia Research Center, 2000
[20] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.联 通新时空CDMA 工程技术手册(第一册).北京:中国标准出版社,2002—4
[21] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.联通新时空CDMA工程技术手册(第二册).北京:中国标准出版社,2002—4
[22] BALCK U D. ATM Foundation for Broadband Networks. Prenticae_hall, 1995
[23] Manchester J. IP over SONET. IEEE Communications Magazine. 1998: 36(5): 136
[24] P. W. Baier and T. Weber. CDMA for UMTS and IMT-2000. ICPMSC, 1998
[25] James D. Solomon. Mobile IP: The Internet Unplugged, 1999
[26] Theodore S. Rappaport. Wireless Communications Principles and Practice. New Jersey: Prentice-Hail, Inc., 1996
[27] ITU. IMT-2000 Radio Interface Specifications Approved in ITU Meeting in Helsinki. ITU/99-22, 1999
[28] STEVENS W. R. TCP/IP Illustrated. Computer Commun, VOL 1, 1994
[29] 陈运清,毛拥华,赵慧玲.适合NGN的VPN承载平台的构建和推进.电信技术,2004(10):3～7
[30] 樊自甫,万晓榆,常大为.MPLS在支持微移动技术中的应用研究.电信技术,2004(12):44～47
[31] 毛成勇.城域网中MPLS VPN的实现.邮电商情,2002(14):29～32
[32] STALLINGS W. Networks and Internetwork Security. New York: MacmillaN, 1994
[33] DEERING S. E. SIP: Simple Internet Protocol. IEEE Networks Mgazine, 1999(7): 16～28
[34] 联通新时空移动通信有限公司,高通无线通讯技术(中国)有限公司.CDMA2000 1X分组数据业务手册(第二册).北京:中国标准出版社,2003—2
[35] 刑宁霞.移动通信核心网的演进.电信科学,2000(5):31～33
[36] 3GPP2 A. S007-0 v2.0 Inter-operability Specification(IOS) for High Rate Packet Data(HRPD) Access Network Interfaces. Virginia: Third Generation Partnership Project 2, 2001
[37] MINOLI. Video Dialtone Technology. New York: MxGraw, 1995
[38] 李明铎.VPDN的安全性分析.电信技术,2004(12):44～47
[39] 朗讯科技中国有限公司.多业务企业网解决方案.移动通信,2004(11)
[40] 李向华.IP城域网现状及优化.电信技术,2005(3):26～27