VPN原理培训-PPT课件.pptVIP

*NAT-TraversalIKEHeader123Hash(1)SAProposalNiDHKeyExchangeIDiIDiIKEHeaderHash(1)SAProposalNiDHKeyExchangeIDiIDiIKEHeaderHash(1)NAT-OANAT-OA*IPSecVPN原理简介**目录IPSec概述IKE协议AH协议ESP协议*VPN分类L2FPPTPL2TPIPSecGRELayer3（网络层)Layer2（链路层)Layer1（物理层)Layer4（传输层)Layer5（应用层)*一个利用IPSec通信的例子主机:xVPN网关:A主机:yVPN网关:BxyDataxyDataABxyDataABxyData加密、验证、封装解封、验证、解密*加密解密加密对称密钥:DES、3DES、AES非对称密钥:RSA加密算法解密算法*验证HASH算法MD5,SHA-1HASHHMACHMAC算法:带密钥的HASH算法MAC:MessageAuthenticationCodeHMAC-MD5,HMAC-SHA1HHMACH’H?