Method, system and gateway for remotely accessing MPLS VPN

A gateway, applied to a system in which a remote user accesses a Virtual Private Network (VPN) resource server in a Multi-Protocol Label Switching Virtual Private Network (MPLS VPN) through a Secure Socket Layer (SSL) connection between the remote user and the gateway, functioning as an SSL VPN gateway in an SSL VPN and a Provider Edge (PE) router in the MPLS VPN, and comprising:

• a configuration unit, a first network interface, a second network interface, a processing unit, a VPN instance storing unit and a relation storing unit;
• wherein the configuration unit is configured to establish multiple virtual interfaces, one virtual interface being bound with one VPN, form VPN instances according to the virtual interfaces bound with the VPNs, save the VPN instances in the VPN instance storing unit;
• differentiate different VPN users according to authentication and authorization information of users, bind the authentication and authorization information of the users with corresponding VPNs respectively;
• save binding relations in the relation storing unit;
• wherein the relation storing unit is configured to store the binding relations established by the configuration unit;
• wherein the VPN instance storing unit is configured to store the VPN instances;
• wherein the first network interface is configured to provide a data transmission channel between the gateway and the users;
• wherein the second network interface is configured to provide a data transmission channel between the gateway and an MPLS network;
• wherein the processing unit is configured to perform information interaction with a user and establish a connection related to a remote access;
• when receiving a packet sent by the user through the SSL connection, obtain a VPN instance bound with authentication and authorization information of the user from the VPN instance storing unit according to a binding relation stored in the relation storing unit, add a VPN label and an MPLS forwarding label to the packet by using the VPN instance obtained, send the packet to the VPN resource server through the MPLS network;
• when receiving a response packet from the VPN resource server, search for a corresponding VPN instance in the VPN instance storing unit according to a VPN label carried by the response packet, and forward the response packet to the user through the SSL connection according to the found VPN instance.