Patent ID: 8274967

Claim:
A method for remotely accessing a Multi-Protocol Label Switching Virtual Private Network (MPLS VPN), wherein a remote user accesses a VPN resource server in the MPLS VPN through a Secure Socket Layer (SSL) connection between the remote user and an SSL VPN gateway, the SSL VPN gateway also functions as a Provider Edge (PE) router in an MPLS network, and packets received by the SSL VPN gateway from the VPN resource server or transmitted by the SSL VPN gateway to the VPN resource server are transmitted through the MPLS network, the method comprising: A: establishing multiple virtual interfaces in the SSL VPN gateway, one virtual interface being bound with one VPN, and forming VPN instances according to the virtual interfaces bound with VPNs, differentiating different VPN users according to authentication and authorization information of users, and binding the authentication and authorization information of the users with VPNs respectively; B: performing, by a user, information interaction with the SSL VPN gateway, and establishing a connection related to a remote access; C: receiving, by the SSL VPN gateway, a packet sent by the user through the SSL connection, adding a VPN label and an MPLS forwarding label to the packet according to a VPN instance bound with authentication and authorization information of the user, and sending the packet to the VPN resource server through the MPLS network; wherein the packet is a resource request packet; D: receiving, by the SSL VPN gateway, a response packet from the VPN resource server, searching for a VPN instance according to a VPN label carried by the response packet, and forwarding the response packet to the user through the SSL connection according to the found VPN instance.