Applied Study And Design Of VPN Technology In "All-purpose Card" Network

It is the basic demand of construction of digital campus to guarantee the data information of " all-purpose card " is transmitted safely on campus network .It is extremely important to design the " all-purpose card " network communication system for security . This text utilizes VPN technology, has designed the " all-purpose card " network system of Changshu Institute of Technology, thus to solve the security transmission problem of network data between two campuses effectively.This thesis, first of all, analyzes in depth the technology of VPN ,and discusses VPN"s definition, function, advantages and classification, and makes a study of IPSec in detail, the key technology of constructing VPN.lt introduces Internet Key Exchange(IKE) and Encapsulating Security Payload(ESP) and Authentication Header (AH); deals with two modles for security associations: transport modle and tunnel modle; and dwells on Security Association Database and Security Policy Database.Secondly, it utilizes IPSec function in Linux Kernel to construct VPN between one computer and the other, between one net with the other by employing Preshared Key and X.509 certificate on Linux systematic platform.Finally, it designs the network architecture, plans IP address distribution, installs the gateway and the route, constructs the VPN to ensure the safe transmission of data in "all-purpose card " between two campuses of Changshu Institute of Technology and carries on the security test of it.