ipsec在ipv6中的分析与应用-analysis and application of ipsec in ipv6.docxVIP

By analyzing a number of IPSec configuration examples, it brings forward some usual IPSec solutions protecting data security and protocol security, detailedly speaks the nesting application of IPSec tunnel and its process.In the way of IPSec applications, there is not such a research about manual configuration IPSec in the civil presently. This paper studys these problems, and compares manual configuration with the IKE daemon automatic configuration. On one hand it is to introduce how to configurate IPSec. On the other hand, it is to explain the merits and demerits of two configuration modes, all these are to account for what the IKE daemon can automatically does and what need administrators to do.With regard to the IPSec application research in the internal, there are much more about the applications of pre-shared key authentication, but there is hardly little as to the X.509 certificate authentication applications. So this thesis deeply studies these problems, dwells on the generation and application of X.509 certificate, how to generate a fingerprint for a public key certificate and how to generate randomly a pre-shared key.For the applications of IPSec in IPv6 network, the paper, on the Linux 2.6 platform, begins with analysing the security desiderata of IPv6 campus trial network , then combines network topology to discuss every material configuration process. During the connecting test, it applies experiment data to explain the functions and characteristics of Security Policy and Security Association. It also specifies the dynamic process of automatically negotiating IKE SA and IPSec SA by racoon, as well as the active IPSec SA parameters. In the end, it objectively evaluates every application security.Key Words：Internet Protocol Security, Internet Security Association and Key Managemant Protocol, Security Association, Security Policy,Virtual Private Network独创性声明本人声明所呈交的论文是我个人在导师指导下进行的研究工作及 取得的研究成果。尽我所知，除了文中特别加以标注和致谢的地方外， 论文中不包括其他人已经发表或撰写过的研究成果，也不包含为获得 西北师范大学或其