| With the development of Internet, the security of Internet becomes more and more important. The scientific dissertation analyzes the underlying factors caused by Internet, and puts forward some objects and means to improve network security. Then, the paper imports VPN and selects IPSec as a perfect realization technology. But there are some different formats between the headers of IPv4 and IPv6, and there is a better network performance in IPv6. At the same time, there is an irregular contradiction between the traditional VPN and NAT in IPv4. So, the research on IPv6 VPN is more significant. Then it introduces the function, the system module and the principle of IPSec briefly. It also brings forward authentication model of IPSec. Secondly, it defines the segments and the relationships of IPSec components, such as Authentication Header, Encapsulating Security Payload and Internet Key Exchange, and how they can cooperate with each other.According to three relative implementation modes of IPSec in IPv6, the paper chooses the mode of integrating OS source codes with IPSec, and develops the research of FreeS/WAN on Linux kernel with consulting the success experience of IPSec-VPN in IPv4, and sufficiently considers the different transfer in OS of IPSec between IPv4 and IPv6, then it puts forward the model about integrating FreeS/WAN into Linux kernel, also designs different projects under the condition of various communication flow, operation platform and users requirement. The performance is more improved than traditional IPSec-VPN. After implemented experiments, the paper summarizes the result and the deficiency of current experiments. It merely researchs the theorys and experiments on part function of IPSec-VPN in IPv6, therefore the function of IPSec-VPN is not flexible enough, and the capability of IPSec-VPN needs to be improved. At last, it brings forward some suggestions and considerations for the further research on technology in future, such as QoS, LDAP, and so on.
|
PDF Full Text Request