基于IPSec的路由器IP层安全协议实现-计算机技术专业论文.docxVIP

摘 摘 要 在现代信息化社会中，网络已成为信息通讯的重要手段。正因为网 络的广泛应用，网络信息安全就越显重要。 VPN通过利用现有的Intonet等公用通信设施，利用隧道技术，构 建了一个虚拟而安全的专用网络，由于其优越的性价比，得到了广泛的 使用。IPSec作为第三层隧道协议，保障了信息的安全传输。 IPSec安全协议给出了封装安全载荷ESP协议和认证头AH协议。 其中ESP协议为通信提供机密性、无连接的完整性、数据源认证和防 重放功能；AH协议为通信提供无连接的完整性、数据源认证和防重放 功能。这两个协议体现了IPSec作为隧道协议的本质。 本文系统的论述了VPN的优越性能，深入分析了IPSec的工作原 理，按照相关规范要求，在路由器口层中实现了IPSec的两个安全协 议。 关键字：IP安全封装安全载荷协议认证头协议安全关联 隧道技术 Abstracthl Abstract hl the modem information worl正network has been used more and more widely,e_／en in the home environment．Network has become all important means for people to exchange information．The network information security is very critical for the wide use ofnetwork． VPN(Virtual Private Network)is a virtual private local network which Call reduce cost through secure channels over the existed public communication charmels，such as Internet．VPN implements this using a teehnelegy called tunnel．IPSee implements the network seeurity in IP (Internet Protoc01)layer．The advantage ofwhich is that口Sec is transparent for the application protocol layers above IP,so me special secWe mechanism is not neoded．So the advantage is in evidence． ESP and AH mechanisms are provided bv the IPSee protoc01．ESP provides confidentiality,integrity,authentication and non-repudiation，and AH only provides integrity,authentication and non-repudiation．In IPSec protocol，automatic secnFc parameters negotiation ofthe seeurity protocol is implemented byⅨE．The parameters negotiated byⅡ迎include the arithmetic of enerypt and authentication,the keY used in encrypt and authentication,the protecting pattern of communication(transfers or tunnel pattern)and so on． This papeldiSCUSS the advantage of VPN in constructing a security network and analyze the technology of口Sec briefly,implement the two mechanisms of IPSee protocol in IP stack in routers．All the implementation is in the instruction ofIETF RFCs． KEY WORD： IPSec ESP AH SA Thnnel 长春理工大学硕士学位论文原创性声明本人郑重声明：所呈交的硕士学位论文，《基于IPSec的路由 长春理工大学硕士学位论文原创性声明 本人郑重声明：所呈交的硕士学位论文，《基于IPSe