虚拟专用网安全隧道技术方案

提出了一种虚拟专用网安全隧道技术方案。在这个方案中，将L2TP与IPSec相结合，L2TP的数据报文经过Ipsec的封装，构成安全报文。首先在传输层对数据报进行L2TP封装，然后在网络层进行IPSec协议封装，在接收方进行相对应的拆封处理。这样不仅利用了L2TP的封装机制，而且对数据分组提供了安全性保护，并解决了IPSec只支持IP协议的问题，保证了多数据报在隧道中传送的安全性，能够满足远程用和企业的安全性要求。并结合企业文档管理系统提出了虚拟专用网的应用方案。

Secure tunneling technology scheme of virtual private network

In the scheme,the authers combined L2TP with IPSec. Packed with IPSec protocol,the datagram of L2TP is to be secured.First,pack the datagram with L2TP on the transfer layer,then pack it with IPSec on the net layer. On the receiving side, it will be unpacked accordingly. This not only adopts L2TP's package theorem but also provides secure protection for data subgrouping, It resolves the problem that IPSec only supports the IP protocol. It insure the security of multi-protocol datagram's transmitting on the tunnel and meets the secure requests of remote users and enterprises. In the end, on application scheme based on enterprises document management system is offered.