Design and implementation of two-level VPN service provisioning systems over MPLS networks

Virtual private network (VPN) services are getting important due to the expansion of enterprises and the requirement for securely transferring confidential data. The populations using VPN services include service provider administrators, local enterprise device managers, and end users. Service provider administrators provide interconnectivity among separated local devices, while local enterprise device managers provide network connectivity for end users. In the paper a two-level VPN service provisioning system is designed and implemented. In the system there are two parts: provider edge manager (PER) deployed in service provider backbone, and customer edge manager (CAR) deployed in local enterprise networks. PER deals with provisioning multi-protocol label switching (MPLS) VPN service to local device manager, and CAR takes charge of deploying customer premises edge-based (CPE-based) VPN services for end users. Local device managers can deploy CPE-based VPN services over MPLS VPN services provided by service provider administrators, through the exchanges of VPN status and control information between PER and CAR