Patent ID: 8661525

Claim:
An implementation method of virtual private network (VPN) wherein the VPN is implemented based on an identity and location separation network which comprises an access service node (ASN) and a mapping server which are connected through the network, and the method comprises: setting a VPN dedicated mapping table and a general mapping table of the VPN in a mapping server of the identity and location separation network, wherein the VPN dedicated mapping table comprises an identity identifier-location identifier mapping relationship of VPN end hosts in the same VPN, the general mapping table comprises the host identity identifier-location identifier mapping relationship of a general end; the ASN receiving a message carrying the identity identifier of the source end host and the identity identifier of the destination end host sent by the source end host; the ASN inquiring an VPN attribute table according to the identity identifier of the source end host to obtain the attribute of the source end host, and forwarding the message or sending an inquiry request to the mapping server, wherein the message or the request carries the attribute of the source end host and the identity identifier of the destination end host; and the mapping server inquiring the VPN dedicated mapping table or the general mapping table consistent with an attribute of a source end host according to the identity identifier of a destination end host, if the mapping relationship of the destination end host is found, the ASN or the mapping server forwarding the message to the destination access service node corresponding to a destination location identifier to achieve the communication, if the mapping relationship of the destination end host is not found, the communication failing.