A scheme to provide multi-VPN services using a virtual networking service platform (VNSP)

摘要

This paper proposes a networking scheme that can provide multi-level security for a virtual private network (VPN) on Virtual Networking Service Platform (VNSP). This scheme provides multiple security attributes defined on an access interface to accommodate TPN sites composed of multi-level security domains. The attribute is transparently forwarded between different sites in a VPN and used to improve security of the VPN. For example, to use the attribute as security level can enhance defense capability against DoS attack. For another example, to use the attribute as sub-VPN identifier can divide a VPN to different wide-area sub-VPNs.