Perimeter Defence Policy Model of Cascade MPLS VPN Networks

摘要

This paper propose method to solve the security problems of establishing trust zone which is changed by security policy in large scale networks containing multiple VPNs. Therefore, we surveyed the vulnerability of VPN technologies and it analysis various models suitable for trust zone. By simulations of various models, we have the cascade perimeter defence policy model having the merit as such an efficient transit cost and the strictly isolation for trust zone. This model can protect the trust zone from the public network by dividing the trust zone according to each VPN group and it shows the better transit performance by cascading the position of perimeter defence policy.