基于IpsecVPN企业信息安全架构设计与实现.docx

摘要 当今，随着现代计算机科技以及互联网科技的历程不断飞速的推进，开始有越来越多的企事业单位等机构的日常办公越来越依赖数字化的信息网络平台，并且也开始有意识地去构建统一的办公系统平台。自动化办公系统互联网络化、应用集中系统化的升级带来了数字化信息进行集中配置、业务流程化、办公规范化的巨大优势。 目前，TCP/IP几乎是所有网络通信的基础，而IP本身是没有提供“安全”的，在传输过程中，IP包可以被伪造、篡改或者窥视。针对这些问题，IPSec可有效地保护IP数据报的安全，它提供了一种标准的、健壮的以及包容广泛的机制，可用它为IP及上层协议(如UDP和TCP)提供安全保证。?目前许多电信运营商采用IPSec隧道加密技术，在宽带业务的基础上推出主要针对商用客户的VPN新业务，为商用客户既提供了高带宽低资费的企业网络联网服务，又提供了在公用网络上拥有私有VPN网络的数据传输安全保障服务，赢得了广大商用客户的青睐。 本文将研究IPSec体系结构、技术原理和VPN基本技术，并且基于一个真实企业的实际网络架构，分析了IPSec VPN的具体实现方式并进行了测试。 关键词：IPSec?vpn?，加密，??隧道，??安全ABSTRACT Today, with the modern computer technology and the continuous progress of Internet technology, began to more and more enterprises and institutions such as the daily office more and more dependent on the digital information network platform, and also began to consciously to build a unified Of the office system platform. Automated office system Internet, the application of centralized and systematic upgrade has brought digital information for centralized configuration, business processes, office standardization of the great advantages. At present, TCP / IP is almost the basis of all network communications, and IP itself is not provided safe, in the transmission process, IP packets can be forged, tampered with or peep. In response to these issues, IPSec can effectively protect the security of IP datagrams, which provides a standard, robust and inclusive mechanism that can be used to provide security for IP and upper-layer protocols such as UDP and TCP. At present, many telecom operators use IPSec tunnel encryption technology, based on the broadband business launched mainly for commercial customers VPN new business for commercial customers not only provide high-bandwidth low-cost enterprise network networking services, but also provides a public network Has a private VPN network data transmission security services, won the majority of commercial customers of all ages. This paper will study the IPSec architecture, technical principles and VPN basic technology, a