Remote virtual private network gateway apparatus and realizing method

Abstract

The invention discloses a remote virtual private network gateway apparatus and a realizing method. The gateway apparatus includes one capture package network card and one forwarding network card. The capture package network card is intended for connecting a local area network and packaging the captured original data in the local area network into a UDP packaged report, and forwarding the UDP packaged report to the forwarding gateway. The forwarding network card is intended for connecting the Internet and transmitting the received UDP packaged report from the local area network to a forwarding network card of a gateway apparatus of a different local area network, and receiving the UDP packaged report which is transmitted by the gateway apparatus of a different local area network, analyzing the UDP packaged report to an original data package which is to be forwarded to the local area network by a local capture package network card. According to the invention, the gateway apparatus has simple configuration, does not depend on operators, supports multiple protocols and applications, has simple deployment, does not affect existed internet communication and reduces network fault rate.

Description

technical field [0001] The invention relates to the field of virtual private network, in particular to a remote virtual private network gateway device and an implementation method. Background technique [0002] Various institutions (companies, schools, departments, etc.) have mostly established branches in different places, and most of the branches have also built IP intranets and connected to the Internet. In order to allow the IP networks of these branches to be interconnected and managed in a unified manner, it is necessary to connect the above-mentioned remote branches or individuals through the Internet to form a virtual local area network. At this time, Virtual Private Network (VPN) technology is often used. ). [0003] The current common remote virtual private network consists of three parts. One is the above-mentioned headquarters organization, which is called the server end or the access end, which is generally a dedicated local area network; the second part is th...

AI Technical Summary

Problems solved by technology

For individual end users, additional VPN dial-up software needs to be installed. In order to meet the diversity of end users, multiple versions of VPN dial-up software need to be developed, which increases the cost of use and maintenance.

At the same time, the configuration and maintenance of VPN gateway equipment is also a relatively complicated professional work

[0010] (2) There are many devices and terminals that need to be configured

However, it is the same as the traditional virtual private network, with additional setting requirements

Users in the LAN at the access end also need to set their default gateway to the address of the edge router of the user network. Once the address of the edge router of the user network is updated, the end users in the LAN will reset the default gateway of the device. obviously an inconvenience

In addition, the edge and core routers of the backbone network in the MPLS VPN method will generate additional calculations or overheads, because the labels must be calculated and processed, and the routers in the backbone network will maintain an additional virtual routing and forwarding table (VRF) , and after receiving the VPN data packet, carry out label calculation, query, stacking, stacking and other operations before forwarding, which increases the burden on network equipment

In particular, the core routers in the backbone network often become the bottleneck of performance, which increases the network overhead and equipment maintenance.

And because the MPLS label is an added layer before the IP label, it brings a considerable workload to the network engineer during network configuration, complex configuration, and difficult maintenance and operation

Finally, because the MPLS VPN method has changed the working mode and equipment of the network backbone network, its implementation must rely on the equipment and technical support of the communication operator, and it is impossible to complete the virtual private network only through internal coordination. Network construction and access

[0011] (3) Not supported by existing Internet devices

However, the popularity of SDN VPN equipment is slow. In most cases, VPN access to a single controller can only be implemented in a small area. Once a long-distance access is performed, the connection between the SDN network and the traditional network will require VPN access. hinder

[0012] (4) It is easy to cause network failure

In other words, each method has an impact on the communication of the local area network

Once the VPN-related equipment fails, it will not only affect the VPN access, but also cause the local LAN to access the Internet.

[0013] Therefore, there is currently no remote virtual private network solution, which can reduce additional configuration and impact on local network communication while implementing VPN services, and rely on the existing Internet to achieve device plug-and-play

Images