基于IPsec的VPN应用毕业设计论文.doc

廊坊职业技术学院高职计算机类07级毕业（设计）论文 PAGE 51 廊坊职业技术学院高职计算机类 毕业（设计）论文 网络技术专业 题目 基于IPsec的VPN应用 基于IPsec的vpn应用 企业中的IPsec vpn解决方案 摘要：　　 以Internet为代表的全球信息化浪潮日益高涨,信息网络技术的应用正日益普及,应用层次正在深入,应用领域从传统的、小型的业务系统逐渐向大型、关键业务系统扩展,伴随着网络的普及,安全日益成为影响网络效能的重要问题。目前,TCP/IP几乎是所有网络通信的基础,而IP本身是没有提供“安全”的,在传输过程中,IP包可以被伪造、篡改或者窥视。针对这些问题,IPSec可有效地保护IP数据报的安全,它提供了一种标准的、健壮的以及包容广泛的机制,可用它为IP及上层协议(如UDP和TCP)提供安全保证。 目前许多电信运营商采用IPSec隧道加密技术,在宽带业务的基础上推出主要针对商用客户的VPN新业务,为商用客户既提供了高带宽低资费的企业网络联网服务,又提供了在公用网络上拥有私有VPN网络的数据传输安全保障服务,赢得了广大商用客户的青睐。本文将研究IPSec体系结构、技术原理和VPN基本技术,分析了IPSec VPN的主要实现方式,将上述研究得出的成果应用于实际中,结合某国内企业业务发展的需求,设计并创建了一个实用的IPSec VPN网络,并对该网络进行了实际测试。 关键词：　IPsec vpn 加密 隧道 安全 Abstract： Internet as the representative of the rising tide of global information, information network technology is increasingly popular, application level is in-depth, applications from the traditional, small to large business systems gradually, expanding business-critical systems, along with the popularization of the network security impact of network performance is increasingly becoming important issues. Currently, TCP / IP network communications are almost all based on the IP itself does not provide security in the transmission process, IP packets can be forged, altered or peep. To solve these problems, IPSec can effectively protect the security of IP datagram, which provides a standard, robust and inclusive mechanisms, can it IP and upper layer protocols (such as UDP and TCP) to provide security guarantees. Many carriers now use IPSec tunnel encryption technology, based on the introduction of broadband services for business customers VPN major new business, both for commercial customers to provide high-bandwidth network with low rates of enterprise network services, also provided on public network own private VPN network, data security services, won the majority of commercial customers. This article will examine the IPSec system structure, the basic technical principles and VPN technology, analysis of the major IPSec VPN implementat