基于SNMP的VPN管理

该文在SNMPv3的基础上实现了VPN的远程管理。RFC草案定义的MIB对象并不能很好地解决VPN的管理问题,而且基于SNMPv3的安全模型在重播保护方面也有一定的缺陷。该文实现的设计方案主要就是针对这些不足之处,扩展了相关IPSecMIB草案的对象定义,并改善了SNMPv3的安全模型,以适应添加的MIB对象的要求;另外该文还在保证与原协议兼容的前提下,改进了SNMPv3消息格式的数据结构,以便更好地解决数据包重播问题。最后在Win-dows平台上实现了SNMPv3Manager,与Linux平台下监控VPN网关的Agent协同工作,提供全局VPN设备的状态信息。

VPN Management Based on SNMP

As the need for secure electronic transmissions becomes ever more desirable,Virtual Private Networks provide a good and economical solution.But building larger and more complicated VPNs ,people are faced with a chore that grows with the network:effective management.Although IETF has defined some internet drafts for the problems of VPN management ,MIB objects defined by drafts cannot completely solve them,and the security model based on SNMPv3has some deficiencies on replay protection.This paper implements a new solution of VPN remote managements based on SNMPv3.It solves these problems by extending some objects of definition in the draft of IPSec MIBs ,and improving the user -based security model corresponding to these new MIB objects.Then the paper updates data structures of SNMPv3message which are compatible with the old message structure on the user-based security model of SNMPv3.Finally this paper demonstrates this system model:SNMPv3manager entity on Windows platform,and agent entity on Linux platform which runs on VPN gateway.