Research And Application On Network System Of VPN Based On Ipsec And SSL

With the rapid development of electronic commerce, Virtual Private Network (VPN) becomes more popular as a new kind of Internet secure technique due to its simple, cheap, safe and reliable access to Internet. At present, there are two improvement trends of VPN in view of technology, one is IPsec and another is SSL. It is difficult for customers to choose which one is better for their networks. The paper analyzes the architecture, mechanism and security protocols of VPN in detail. It pays more attention to compare and study VPN system based on IPsec or SSL respectively, presents peculiarity and deficiency on system frame and networks security. Then the paper demonstrates respective characteristics and differences between IPsec VPN and SSL VPN in view of system frameworks, security architecture and networks efficiency. Moreover, a rule of solution is put forward: IPsec VPN is suitable for LAN to LAN, especially for long-distance access to computers and other equipments. However, SSL VPN is suitable for long-distance access only to Web. At last, the paper explores a new VPN architecture management by clarifying the configuration, protocol and authenticity of VPN. Meanwhile, a design rule of VPN is summed up and three kinds of VPN solutions for electronic commerce are established and a new design of SSL Proxy VPN software is realized and the functions of each module are described.