Disclosed are a two-dimensional routing protocol-based L3VPN implementation method and a system. The method comprises the following steps: activating an L3VPN network, and acquiring a route directed to each user site; a user in a source user site sending a packet to a user in a target user site, and sending the packet to an entry of a first edge routing apparatus; the first edge routing apparatus performing encapsulation according a public network IP of the packet; and forwarding, by means of two-dimensional routing matching, the encapsulated packet to an exit of the first edge routing apparatus to perform decapsulation, and forwarding the same to the target user site via an entry of the second edge routing apparatus. The method inherits the advantages of two-dimensional routing, such as control flexibility, scalability based on existing protocols, incremental deployment, and the like, and meets functional requirements of VPN while realizing strategic routing within one VPN network.
展开▼