The Research And Design Of Linux VPN Security Gateway Based On IPSec Protocol

This thesis has made thorough research to IPSec protocol architecture and ESP protocol and AH protocol. It has proposed the design methods of realizing VPN security gateway based on IPSec protocol under Linux, and has discussed in detail the implementation of ESP protocol and AH protocol in tunnel mode, as well as the secure kernel improvements to IP protocol stack on Linux VPN security gateway machine. The thesis has specially discussed the topics on design of the Security Policy Database, Security Association Database, ESP protocol, the DES-CBC Cipher algorithm, HMAC-MD5-96 and HMAC-SHA-1-96. In the end, the thesis has made some systems analysis on the testing results to the IPSec VPN security gateway.