KR20170129461A - Method and system for providing managed service based on virtual LAN - Google Patents

Abstract

The present invention relates to a managed service providing method and system for providing a managed service based on a virtual LAN. A managed service system according to an embodiment of the present invention includes a switch of a customer and a concentrator switch forming a leased line based on a virtual LAN. The managed service system manages a packet received from a customer's CPE to provide a virtual cloud- center; And generating virtual LAN identification information for the private network and virtual LAN identification information for the Internet network required for establishing the leased line based on the virtual LAN and controlling the aggregation switch to associate the virtual LAN identification information for the private network and the virtual LAN identification information for the Internet with the aggregation This includes the infrastructure manager that is assigned to the port of the switch.

Description

[0001] The present invention relates to a method and system for providing a managed service based on a virtual LAN,

The present invention relates to a managed service, and more particularly, to a managed service providing method and system for providing a managed service based on a virtual LAN.

Managed service is a service provider that constructs an IT operation environment for enterprise customers and operates and maintains the IT operation environment. Customers using these managed services can save on initial setup costs and save manpower and costs to maintain their IT operating environment through service providers.

The existing managed service installs the customer premises equipment (CPE) at a place designated by the customer, sets the IT operating environment through the customer premises equipment, and provides the managed service to the customer do. However, such a customer-specific CPE is not only expensive, but also has difficulty in remotely managing the CPE and controlling the service.

Accordingly, a virtualization-based managed service has been developed in which a virtual CPE for a customer service is established in a central management node (for example, a central cloud center), and the managed service is provided to the customer through the virtual CPE. According to the virtualization-based managed service, a CPE for bypassing a path is installed in a client company, and a packet generated in the CPE is transferred to all the managed nodes and processed. A plurality of customers share one virtual CPE constructed in the management node, thereby reducing service provision and operation cost.

However, when the virtual CPE is located at the central management node, the Internet network is used between the management node and the CPE for bypassing the path of the customer, which poses a security threat in the transmission path. In addition, the CPE for bypassing the customer and the central management node have transmission paths according to the access network, the backbone network, the router, and the central cloud center, which causes problems due to an increase in the number of hops.

In order to solve the security problem of the virtualization-based managed service, a system for encrypting a packet by forming an encryption channel (for example, IPSec VPN) between a CPE for bypassing a path installed at a customer and a central management node Developed. However, such a packet encryption scheme requires a cryptographic mechanism between the management node and the CPE, and also degrades the packet transmission rate and quality of service in the process of encryption and decryption.

It is an object of the present invention to provide a method and system for providing a managed service based on a virtual LAN, which provides a managed service to a customer by improving security and minimizing a packet transmission delay .

Other objects and advantages of the present invention will become apparent from the following description, and it will be understood by those skilled in the art that the present invention is not limited thereto. It will also be readily apparent that the objects and advantages of the invention may be realized and attained by means of the instrumentalities and combinations particularly pointed out in the appended claims.

According to a first aspect of the present invention, there is provided a managed service system including a switch of a customer and a collective switch forming a dedicated line based on a virtual LAN. The managed service system processes a packet received from a customer's CPE, A local cloud center that provides managed services; And generating virtual LAN identification information for the private network and virtual LAN identification information for the Internet network required for establishing the leased line based on the virtual LAN and controlling the aggregation switch to associate the virtual LAN identification information for the private network and the virtual LAN identification information for the Internet with the aggregation And an infrastructure manager for assigning the port to a port of the switch.

According to a second aspect of the present invention, there is provided a method for providing a managed service to a customer based on a virtual LAN in a managed service system, the method comprising: receiving a managed service from a customer; Selecting a local cloud center located at a location closest to the customer from among a plurality of local cloud centers; Generating virtual LAN identification information for the private network and virtual LAN identification information for the Internet network; And controlling the aggregation switch built in the selected local cloud center to allocate the generated virtual LAN identification information for the private network and the virtual LAN identification information for the Internet network to the port of the aggregation switch.

The present invention is advantageous in that a virtual LAN-based dedicated line is established between a local cloud center and a customer's CPE to improve security and service processing speed.

Also, according to the present invention, a dedicated line based on a customer's CPE and a virtual LAN is established through a local cloud center located nearest to a customer, and a managed service is provided through the local cloud center, There is an advantage in that the service processing delay due to an increase in the number of hops is minimized.

Further, according to the present invention, an infrastructure manager remotely controls a switch installed in a local cloud center and a switch installed in a customer's company to allocate virtual LAN identification information, thereby reducing the work force generated when applying a virtual LAN, There is also an effect of improving the efficiency.

BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate exemplary embodiments of the invention and, together with the description, serve to explain the principles of the invention. And shall not be construed as limited to such matters.
1 is a diagram illustrating a configuration of a virtual LAN-based managed service system according to an embodiment of the present invention.
2 is a diagram illustrating a configuration of an infrastructure manager according to an embodiment of the present invention.
3 is a diagram illustrating an allocation table according to an embodiment of the present invention.
4 is a flowchart illustrating a method for providing a virtual LAN-based managed service to a customer according to an embodiment of the present invention.
5 is a diagram illustrating a virtual LAN ID assigned to the customer company A and the local cloud center # 1.

The foregoing and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, in which: There will be. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a configuration of a virtual LAN-based managed service system according to an embodiment of the present invention.

1, a virtual LAN based managed service system according to an embodiment of the present invention includes a plurality of local cloud centers 300 and 500, CPEs 111, 112, 411 and 412, a switch 120 , 420, and an infrastructure manager 200.

The local cloud centers 300 and 500 are built in the access network and include aggregation switches 310 and 510 and computing resources 320 and 520. [ Here, the access network is a network formed in the center of the local branch office, and is connected to an ONT (Optical Network Terminal), a splitter, and a switch built in the vicinity of the customer or inside the house through the collective switches 310 and 510, . When a cloud center is established in the access network as a local cloud center and virtualized managed services are provided through the local cloud centers 300 and 500, the virtualized managed service is provided through a single central cloud center, hop count can be reduced to provide faster managed services to customers.

The aggregation switches 310 and 510 are connected to an ONT, a splitter, a switch, and the like built in the vicinity of a customer or a customer to perform a function of concentrating the traffic on the regional offices and relay the communication between the backbone network 600 and the customer . Particularly, according to the present invention, the aggregation switches 310 and 510 are connected to the switches 120 and 420 of the customer who are subscribed to the managed service through a dedicated line based on the virtual LAN. The leased line based on the virtual LAN can guarantee a bandwidth of 1 Gbps or more.

The aggregation switches 310 and 510 are provided with a plurality of ports. Under the control of the infrastructure manager 200, the aggregation switches 310 and 510 are respectively provided with a virtual LAN ID for a private network, a virtual LAN ID for a public network, You can assign one.

Here, the virtual LAN ID for the private network is the virtual LAN identification information used in the customer's private network (i.e., the intranet), and the virtual LAN ID for the authorized network is the virtual LAN identification information for allowing external access and externally using it. For example, a web server of a client company allowed to access to the outside can communicate with the cloud center using the virtual LAN ID for the authorized network.

The virtual LAN ID for the Internet network is virtual LAN identification information used when accessing the Internet through the backbone network 600. Packets transmitted from the CPEs 111, 112, 411 and 412 are transmitted to the Internet network , The local area cloud center 300 or 500 records the virtual LAN ID of the customer's Internet network in the packet.

The computing resources 320 and 520 include network resources, server resources, storage resources, software resources, and the like installed in the cloud center. The computing resources 320 and 520 are used to provide detailed functions required for the managed services. Respectively.

A virtualization network function (VNF) for carrying out a specific detailed function is mounted on the computing resources of the regional cloud centers 300 and 500 so that functions required for the managed service are installed in the local cloud center 300, and 500, respectively. The VNF means a network-based function developed by software for supporting various application programs. As examples of the VNF, there are a Media Resource Function (MRF), a Call Session Control Function (CSCF), a Home Subscriber Server (HSS), a Packet GateWay (P-GW), a Unified Threat Management (UTM), a Web Application Firewall (Personal LTE), CDN (Content Delivery Network), and so on, as well as the Internet, Intrusion Prevention System, access point controller, application hosting function, server hosting, e-mail server function, VPN (Virtual Private Network), DRM ), Customer Relationship Management (CRM), Enterprise Resources Planning (ERP), Web server, and application server. These VNFs can be gathered to provide the managed service of the present invention.

The CPEs 111, 112, 411 and 412 are installed in the customer's company and packets generated by the customer are transmitted to the local cloud centers 300, 500). That is, the traffic generated in the CPEs 111, 112, 411, and 412 is bypassed to the cloud centers 300 and 500, and the traffic is processed in the cloud centers 300 and 500. The CPEs 111, 112, 411 and 412 can be installed in the customer's company in the form of a physical device and the CPEs 111, 112, 411 and 412 are installed in the customer's company by mounting a virtual CPE function .

In particular, the CPEs 111, 112, 411 and 412 according to the present invention establish private leased lines based on the virtual cloud based on the local cloud centers 300 and 500 closest to the customer through the switches 120 and 420 of the customer. That is, the switches 120 and 420 built in the customer company are wired to the aggregation switches 310 and 510 of the regional cloud centers 300 and 500. The switches 120 and 420 of the customer company have a plurality of ports. Under the control of the infrastructure manager 200, any one of a virtual LAN ID for a private network and a virtual LAN ID for a public network can be allocated to a specific port.

The infrastructure manager 200 confirms the detailed functions for realizing the managed service requested by the customer and loads the detailed functions into the specific regional cloud centers 300 and 500. At this time, the infrastructure manager 200 loads the detailed functions into the local cloud centers 300 and 500 using the computing resources of the local cloud centers 300 and 500.

In particular, the infrastructure manager 200 selects the local cloud centers 300 and 500 located nearest to the customer, and loads the detailed functions using the computing resources of the selected local cloud centers 300 and 500. In addition, the infrastructure manager 200 generates a private LAN ID for a private network, a virtual LAN ID for a public network, and a virtual LAN ID for the Internet network for a dedicated private network for building a private LAN based on the virtual LAN, The virtual LAN ID for the private network, the virtual LAN ID for the authorized network, and the virtual LAN ID for the internet network are allocated to the ports of the aggregation switches 310 and 510, respectively, do. The infrastructure manager 200 can remotely control the switches 120 and 420 of the customer via the aggregation switches 310 and 510 connected to the switches 120 and 420 of the customer.

2 is a diagram illustrating a configuration of an infrastructure manager according to an embodiment of the present invention.

2, the infrastructure manager 200 includes a service acceptance unit 210, a storage unit 220, an ID generation unit 230, a center selection unit 240, a profile management unit 250, a switch control unit 260 And a function setting unit 270. These components may be implemented in hardware or software, or a combination of hardware and software.

The infrastructure manager 200 may include a memory and one or more processors and includes a service acceptance unit 210, a storage unit 220, an ID generation unit 230, a center selection unit 240, a profile management unit 250, The switch control unit 260 and the function setting unit 270 may be stored in the memory and implemented in the form of a program executed by the one or more processors. In addition, the components of the infrastructure manager 200 may be implemented in a separate server or device, or may be installed in a specific cloud center 300 or 500 or a server.

The service acceptance unit 210 receives a service subscription from a customer and performs a service contract with a customer. The service accepting unit 210 communicates with the terminal owned by the customer and stores the name of the customer (or company name), the telephone number of the customer, the identification information of the smart CPE 111, 112, 411, 412 owned by the customer, Service type information, SLA rating, customer network device, and server identification information from the customer.

The storage unit 220 is a storage unit such as a database, a disk unit, or the like, stores customer-specific service profiles, and stores location information for each of the local cloud centers 300 and 500. The service profile includes a customer name (or company name), a customer address, identification information of the CPE held by the customer or identification information of the server, identification information of the customer switch, cloud center identification information providing the managed service, Function, and information about the customer's SLA rating. In addition, the storage unit 220 stores a number of detailed functions required for the managed service by the managed service type. The storage unit 220 may store the VNF image as a detailed function.

In particular, the storage unit 220 stores an allocation table in which customer identification information, a virtual LAN ID for a private network, a virtual LAN ID for a public network, and a virtual LAN ID for the Internet are mapped.

3, the assignment table of the storage unit 220 includes client identification information, a virtual LAN ID for a private network, a virtual LAN ID for a public network And the virtual LAN ID for the Internet network are mapped and recorded. Meanwhile, the identification information may not be recorded in the virtual LAN ID field for the authorized network. That is, depending on whether or not the customer needs the virtual LAN ID for the authorized network, the identification information is optionally recorded in the virtual LAN ID field for the authorized network.

The private LAN ID for private network, and the virtual LAN ID for the Internet network, and transmits the identification information, the virtual LAN ID for the private network, and the virtual LAN ID for the Internet network, And records them in the allocation table of the storage unit 220. [ The ID generator 230 may additionally generate a virtual LAN ID for a public network according to whether a customer requires a public network virtual LAN ID, and record the virtual LAN ID in the allocation table.

The center selection unit 240 selects the local cloud center 300 or 500 closest to the customer as a cloud center to provide the service. Specifically, the center selection unit 240 compares the location of the customer company with the location information of each cloud center stored in the storage unit 220, and stores the local cloud centers 300 and 500, which are located closest to the location of the customer, As a cloud center.

The profile management unit 250 creates a service profile of a customer and stores the service profile in the storage unit 220 or performs a function of changing a service profile of a customer. Specifically, the profile management unit 250 identifies the type of the managed service in the service subscription information, and extracts a plurality of detailed functions corresponding to the service type from the storage unit 220. In addition, the profile management unit 250 may include cloud center identification information selected by the center selection unit 240, detailed function information to be mounted on the cloud center, customer information (e.g., customer name or company name, address) And the CPE (or server) identification information of the customer, and stores the generated service profile in the storage unit 220.

The switch control unit 260 controls the virtual LAN ID recorded in the allocation table in the storage unit 220 to the ports of the switches 120 and 420 of the customer company and the ports of the aggregation switches 310 and 510 of the local cloud centers 300 and 500 Respectively. That is, the switch control unit 260 remotely controls the switches 120 and 420 installed in the customer's company and stores the virtual LAN ID for the private network recorded in the allocation table in the storage unit 220 as one or more of the switches 120 and 420 And allocates the virtual LAN ID for the authorized network recorded in the allocation table to one or more ports provided in the switches 120 and 420 of the customer company. The switch control unit 260 remotely controls the aggregation switches 310 and 510 of the selected local cloud centers 300 and 500 to store the virtual LAN IDs for private networks And the virtual LAN ID for the authorized network to one or more ports provided in the aggregation switches 310 and 510 and allocates the virtual LAN ID for the Internet recorded in the allocation table to one or more ports provided in the aggregation switches 310 and 510 do. When the virtual LAN ID is allocated to the switch and the aggregation switches 310 and 510 of the customer's company, the CPEs 111, 112, 411 and 412 of the customer are connected to the local cloud centers 300 and 500 via the private line based on the virtual LAN And communicate with each other.

The function setting unit 270 loads the detailed functions required for the managed service requested by the customer into the local cloud centers 300 and 500 based on the customer's service profile stored in the storage unit 220. Specifically, the function setting unit 270 identifies, in the service profile of the customer, information on functions to be loaded in the cloud center and identification information of the cloud center that provides the managed service. The function setting unit 270 recognizes the local cloud centers 300 and 500 corresponding to the identification information of the cloud center and transmits data about the detailed functions to be installed in the local cloud centers 300 and 500 VNF image or VNF setting information) to the recognized local cloud center 300 or 500 to control the corresponding functions to be mounted on the cloud center. At this time, the function setting unit 270 requests one or more virtual machine assignments for realizing the detailed functions to the recognized local cloud centers 300 and 500, and allows the detailed functions to be loaded through the virtual machine have.

In addition, the function setting unit 270 may transmit data (e.g., VNF image or VNF setting information) for performing a path bypass CPE function to a physical server installed in a customer's company, Can be mounted. Meanwhile, the function setting unit 270 may transmit control information for controlling the function of the CPE device to the CPEs 111, 112, 411 and 412 of the customer when the physical CPE device is already installed in the customer company. When the CPE function is installed or controlled in the server of the customer, the data generated by the customer's CPE 111. 112 is transmitted to the selected local cloud center 300 or 500 and processed.

4 is a flowchart illustrating a method for providing a virtual LAN-based managed service to a customer according to an embodiment of the present invention.

4, the customer accesses the infrastructure manager 200 using his or her own terminal, and then the customer's name (or company name), the customer's telephone number, the CPEs 111, 112, 411, and 412, server identification information, customer location information, switch identification information, managed service type information, and service subscription information including SLA ratings to the infrastructure manager 200 (S401). In the description with reference to FIG. 4, it is explained that the customer who requested the service subscription is the customer A.

Then, the service acceptance unit 210 of the infrastructure manager 200 receives the service subscription information from the customer, and the profile management unit 250 confirms the managed service type included in the subscription information. Examples of the managed service type include a private branch exchange, an internal computerized management service, a video conferencing service, a customer management service, and a shopping mall service, as well as a virtual network function (e.g., a virtual router, a firewall, a WAN accelerator and the like).

Then, the profile management unit 250 extracts the detailed functions corresponding to the managed service type from the storage unit 220, and confirms detailed functions necessary for the service requested by the customer (S403).

Next, the profile management unit 250 requests the center selection unit 240 to select a cloud center. Then, the center selection unit 240 confirms the location information of the customer in the service subscription information (S405), compares the customer location with the location information of each cloud center stored in the storage unit 220, And selects the local cloud center 300 or 500 located in the cloud center to provide the service (S407). In the description with reference to FIG. 4, it is explained that the center selection unit 240 selects the regional cloud center # 1 300 as a center to provide a service.

When the selection of the cloud center by the center selection unit 240 is completed, the profile management unit 250 acquires the cloud center identification information selected by the center selection unit 240, information of the detailed functions to be mounted on the cloud center, (E.g., a name, a company name, an address, etc.) of the customer, CPEs 111 and 112 owned by the customer, location information of the customer, and identification information of the switch # And stores it in the storage unit 220. The profile management unit 250 may provide the generated service profile to the customer and receive a final agreement on the contract.

Next, the ID generating unit 230 generates the identification information of the customer, the virtual LAN ID for the private network, and the virtual LAN ID for the Internet network, maps the identification information of the customer, the virtual LAN ID for the private network, In the allocation table of the storage unit 220 (S409). The ID generator 230 further inquires the customer whether the public network virtual LAN ID is required by the customer, and when the customer responds that the virtual LAN ID for the public network is needed, the ID generator 230 additionally generates the virtual LAN ID for the public network, As shown in FIG. In the description with reference to FIG. 4 and FIG. 5, it is explained that the ID generating unit 230 generates the virtual LAN ID for the authorized network.

When the virtual LAN ID is generated in the ID generation unit 230 and the profile management unit 250 generates the service profile of the customer, the switch control unit 260 stores the identification information of the customer recorded in the allocation table of the storage unit 220 The virtual LAN ID for the private network, and the virtual LAN ID for the Internet.

The switch control unit 260 remotely controls the aggregation switch # 1 310 of the local cloud center # 1 300 selected as a service providing target and stores the virtual private virtual private network The LAN ID and the virtual LAN ID for the authorized network are allocated to the ports provided in the aggregation switch # 1 310, and the virtual LAN ID for the Internet recorded in the allocation table is allocated to one or more ports provided in the aggregation switch # (S411). The switch control unit 260 controls the switch controller 260 to transmit the port number of the aggregation switch # 1 310 and the aggregation switch # 1 310 to which the virtual LAN ID for the private network is allocated to the virtual LAN ID After inquiring of the porter number to the administrator and receiving the reply, the virtual LAN ID for the private network and the virtual LAN ID for the authorized network are assigned to each returned port and the virtual LAN ID for the internet network can be assigned.

Next, the function setting unit 270 sets information on the detailed functions to be mounted on the cloud center in the customer's service profile stored in the storage unit 220 and the identification information of the local cloud center # 1 300 . Then, the function setting unit 270 recognizes the local cloud center # 1 300 corresponding to the cloud center identification information and transmits data (e.g., VNF image) of the detailed functions to be mounted to the local cloud center # Or VNF setting information) to the local cloud center # 1 300 so that the detailed functions are mounted on the local cloud center # 1 300 in step S413. At this time, the function setting unit 270 requests the local cloud center # 1 300 to allocate one or more virtual machines for realizing the detailed functions, so that the computing resource # 1 320 of the local cloud center # ), And then the detailed functions can be mounted on the local cloud center # 1 300 through the virtual machine.

Then, the switch control unit 260 remotely controls the switch # 1 120 installed in the customer's company and stores the virtual LAN ID for the private network recorded in the allocation table of the storage unit 220 in the one or more And assigns the virtual LAN ID for the authorized network recorded in the allocation table to one or more ports provided in the switch # 1 120 of the customer company at step S415. The switch control unit 260 inquires of the manager about the port number of the switch # 1 (120) to which the virtual LAN ID for the private network and the virtual LAN ID for the authorized network are assigned, and then returns the virtual LAN ID for the private network You can assign a virtual LAN ID for the authorized network.

Next, the function setting unit 270 transmits data (for example, VNF image or VNF setting information) for performing a path bypass CPE function to a physical server installed in a customer's company, Function (S417). If there are two servers in the client company A, the function setting unit 270 transmits data (for example, VNF image or VNF setting information) for mounting the CPE function for bypassing the path to each server, And the CPE function for bypassing the path can be installed in the server.

Meanwhile, when a physical CPE is already installed in the customer company, the function setting unit 270 transmits control information for controlling the CPE functions to the CPEs 111 and 112 of the customer's CPEs 111 and 112, It can be set as a path bypass CPE.

 When the CPE function is installed or controlled in the server of the customer, the data generated by the CPEs 111 and 112 of the customer are transferred to the designated local cloud center # 1 300 and processed.

5 is a diagram illustrating a virtual LAN ID assigned to the customer company A and the local cloud center # 1.

Referring to FIG. 5, the CPE # 1-1 (111) established in the customer company A provided with the managed service according to the present invention is set as a dedicated device for providing a private network service, and the CPE # And is set as an authorized network device that can be used externally. In this case, under the control of the infrastructure manager, the switch # 1 120 allocates the virtual LAN ID for the private network (i.e., 10) to the CPE # 1-1 (111) and one or more ports forming the communication line, # 1-2 (112) and the virtual LAN ID for the authorized network (i.e., 11) to one or more ports of the communication line. Also, under the control of the infrastructure manager 200, the aggregation switch # 1 310 connects the switch # 1 120 of the customer A with the virtual LAN ID (i.e., 10) for the private network to one or more ports forming the communication line And assigns the virtual LAN ID 11 for the authorized network. In addition, under the control of the infrastructure manager 200, the aggregation switch # 1 310 allocates the virtual LAN ID for the Internet network (i.e., 19) for the customer A to one or more ports connected to the backbone network 600 .

As described above, the managed service system according to the present invention establishes a leased line based on the virtual LAN between the local cloud center and the customer's CPE, thereby improving security and service processing speed. Also, the managed service system according to the present invention establishes a leased line based on the customer's CPE and the virtual LAN through the local cloud centers 300 and 500 located nearest to the customer, Managed services are minimized by minimizing service processing delays due to the increase in hops generated by virtualization-based managed services.

While the specification contains many features, such features should not be construed as limiting the scope of the invention or the scope of the claims. In addition, the features described in the individual embodiments herein may be combined and implemented in a single embodiment. Conversely, various features described in the singular < Desc / Clms Page number 5 > embodiments herein may be implemented in various embodiments individually or in combination as appropriate.

Although the operations have been described in a particular order in the figures, it should be understood that such operations are performed in a particular order as shown, or that all described operations are performed to obtain a sequence of sequential orders, or a desired result . In certain circumstances, multitasking and parallel processing may be advantageous. It should also be understood that the division of various system components in the above embodiments does not require such distinction in all embodiments. The above-described program components and systems can generally be implemented as a single software product or as a package in multiple software products.

The method of the present invention as described above can be implemented by a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto optical disk, etc.). Such a process can be easily carried out by those skilled in the art and will not be described in detail.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. The present invention is not limited to the drawings.

111, 112, 411, 412: CPE 200: Infrastructure Manager
210: service reception unit 220: storage unit
230 ID generating unit 240:
250: profile management unit 260: switch control unit
270: function setting unit 300, 500: local cloud center
310, 510: aggregation switch 320, 520: computing resource
600: backbone network

Claims (9)

A local cloud center which includes a switch of a customer's company and a collective switch forming a leased line based on a virtual LAN and processes a packet received from a customer's CPE to provide a virtualized management service; And
The virtual LAN identification information for the private network and the virtual LAN identification information for the Internet network necessary for establishing the leased line based on the virtual LAN are controlled and the virtual LAN identification information for the private network and the virtual LAN identification information for the Internet are transmitted to the aggregation switch To a port of the managed service system. The method according to claim 1,
The local cloud center,
And a cloud center located in an area closest to the customer. The method according to claim 1,
The infrastructure manager,
And the virtual LAN identification information for the private network is allocated to the port of the client switch by controlling the switch of the customer. The method of claim 3,
The infrastructure manager,
And assigning the virtual LAN identification information for the authorized network to the port of the client switch by generating the virtual LAN identification information for the authorized network, allocating the virtual LAN identification information for the authorized network to the port of the collection switch, . 5. The method according to any one of claims 1 to 4,
Wherein the infrastructure manager loads one or more detailed functions required for the managed service into the local cloud center,
Wherein the local cloud center processes packets received from the customer's CPE through one or more of the loaded detailed functions. In a managed service system, a method for providing a managed service to a customer based on a virtual LAN,
Receiving a managed service request from a customer;
Selecting a local cloud center located at a location closest to the customer from among a plurality of local cloud centers;
Generating virtual LAN identification information for the private network and virtual LAN identification information for the Internet network; And
And controlling the aggregation switch built in the selected local cloud center to allocate the generated virtual LAN identification information for the private network and the virtual LAN identification information for the Internet network to the port of the aggregation switch. The method according to claim 6,
Wherein the assigning comprises:
And controlling the switch of the customer to assign the virtual LAN identification information for the private network to a port of the switch of the customer company. 8. The method of claim 7,
The generating step may further include generating virtual LAN identification information for a public network,
Wherein the allocating step allocates the virtual LAN identification information for the authorized network to the port of the aggregation switch and assigns the virtual LAN identification information for the authorized network to the port of the client switch. 9. The method according to any one of claims 6 to 8,
Confirming a plurality of detailed functions required for the requested managed service; And
And loading the identified plurality of detailed functions into the selected local cloud center.

Images