Linux下基于IPSec的VPN的研究与实现

虚拟专用网(Virtual Private Network)是解决公共网络中私有信息安全传输的重要技术,它通过对网络数据的封包和加密传输,在一个公用网络(通常是互联网)建立一个临时的、安全的连接,从而达到在公网上传输私有信息的目的。目前,用于企业内部自建VPN主要有两种技术——IPSec VPN和SSL VPN。文中介绍了IPSec VPN技术的概念及相关原理,并且给出了一个利用Openswan软件基于IPSec VPN的实现。

Research and Implementation of one Kind of IPSec-based VPN in Linux

Virtual Private Network(VPN) is an important technique transfer private information under public networks. It can set up a temporary but safe connection to a public network (normally an internet) by data packing and encrypted transferring, and then achieve the aim of transferring private information on public network. Recently, two technologies are mainly used by enterprise to set up internal VPN: IPSec VPN and SSL VPN. This paper introduces the concept of IPSec technique and describes IPSec protocol architecture, communication steps, and finally discusses implementation of VPN based on IPSec by Openswan in detail.