知搜-全球专利检索

  1. 登录
  2. 注册
发明授权
CN101515859B 一种因特网协议安全隧道传输组播的方法及设备 失效 - 权利终止

一种因特网协议安全隧道传输组播的方法及设备
摘要：
本发明提供了一种因特网协议安全隧道传输组播的方法及设备。所述方法包括：IPSec隧道的本端设备自动镜像对端设备配置的目的地址为组播地址的ACL规则，并基于自身和对端设备各自配置的目的地址为PIM协议组播地址的ACL规则，建立自身和对端设备之间的PIM协议报文的IPSEC隧道；本端设备在所述PIM协议报文的IPSEC隧道上接收对端设备发送的PIM协议报文，并在判断出接收到的PIM协议报文为PIM hello报文时，直接将所述对端设备加入到自身的PIM邻居表中，建立本端设备和对端设备之间的PIM邻居关系；本端设备按照PIM协议转发组播组的报文。按照本发明，可以通过IPSec建立两个私网之间的基于IPSec隧道的PIM邻居关系，实现在IPSec隧道中传输组播。
摘要（英）：

The invention provides a method for multicast transport in an Internet protocol secure tunnel and a device. The method comprises: a local terminal device of an IPSec tunnel automatically mirrors a destination address configured by an opposite terminal device to be an ACL rule of a multicast address, bases on the respective configured destination addresses of the local terminal device and the opposite terminal device to the ACL rule of the PIM protocol multicast address and builds an IPSEC tunnel of a PIM protocol message between the local terminal device and the opposite terminal device; the local terminal device receives the PIM protocol message transmitted by the opposite terminal device on the IPSEC tunnel of the PIM protocol message, and directly adds the opposite terminal device intoa primary PIM neighbor table when the local terminal device judges that the received PIM protocol message is a PIM hello message, and the PIM neighborhood between the local terminal device and the opposite terminal device is built; the local terminal device transmits messages of a multicast group according to PIM protocol. According to the invention, the PIM neighborhood based on the IPSec tunnelis built between two private networks by IPSec so as to realize multicast transport in the IPSec tunnel.

公开/授权文献
0/0