改变世界的westermo-强固型工业网络的领导者.ppt

Prevent Broadcast flooding防止广播风暴扩散 The whole system is divided into several LANs by Layer 3 routers Each LAN is one broadcast domain, broadcast packets cannot go out Any broadcast storm is constrained within a LAN, other parts of the system are protected LAN 1 LAN 2 LAN 3 LAN 4 LAN 5 OK OK OK OK VRRP – Gateway RedundancyVRRP虚拟路由器冗余协议–网关备援方案 VRRP (RFC 5798, Virtual Router Redundancy Protocol): enable redundancy between a host and its gateway Master GW and backup GW have the same virtual IP address. Host’s default gateway is configured to the virtual IP Master GW VRRP Backup GW X IP: 192.168.10.1 Virtual IP: 192.168.10.3 Priority: High IP: 192.168.10.2 Virtual IP: 192.168.10.3 Priority: Low Default gateway: 192.168.10.3 VRRP – Load SharingVRRP虚拟路由器冗余协议–资料分流,负载平衡 Load Sharing by Multi-netting and VRRP Fully utilize the redundant path, divide different traffics VRRP Virtual IP: 192.168.10.3 Priority: High Virtual IP: 192.168.10.4 Priority: Low Default gateway: 192.168.10.4 (GW2 master, GW1 backup) Default gateway: 192.168.10.3 (GW1 master, GW2 backup) Virtual IP: 192.168.10.3 Priority: Low Virtual IP: 192.168.10.4 Priority: High GW1 GW2 Interoperability and RedundancyOSPF 开放式最短路径优先协议–与核心路由器有效整合 OSFP (RFC 2328, Open Shortest Path First) Enable redundancy between routers from different venders If the topology changes, routers will automatically detect this and inform each other. The data traffic will be forwarded other ways. VRRP X X X GW OSPF OSPF 3rd party backbone Core switch Interoperability, Redundancy and Load Sharing互操作性,灵活冗余,数据流负载平衡 The network will find out the path to recover a failure No idle path, different traffics are divided OSPF VRRP A B a b Secure Remote AccessIPSec VPN加密虚拟私有网域–跨互连网远距数据采集 IPsec and VPN provide secure remote across A polled system, the Lynx located at the office site will be set to initiator and the units on sites as responders. An always on system, the office unit will be set as responder and the sites as initiators IP n