The Research On Embedded VPN Security Gateway For WLAN Based On NP

Presently, WLAN is used more and more widely. The main approach providing data security of 802.11 wireless products' transmission is WEP security mechanism. While, there are several fatal security problems in the original WEP, and these problems become more and more serious and make WEP unable to keep up with the current security requirements. Therefore, IEEE proposed 802.11i to enhance the security of WLAN.There are still some defects in 802.11 and 802.11i, and there are two other ways to enhance the security of WLAN, which are WAPI and VPN. WAPI is proposed by China, but it is very hard to implement currently. IPSec, the security protocol of internet layer, which is based on wired network, can provide confidentiality, integrity, data sourse authentication, anti-replay attack to make up the defects of WLAN. So it is of great importance to apply IPSec in WLAN. We need to do some work in security products like IPSec gateway, which can provide the security services in internet layer, to ensure the security of data transmission in WLAN.We analyzed the four security protocols, which are 802.11, 802.11i, WAPI and IPSec VPN. As result, we applied IPSec VPN in improving the security of WLAN. We designed an embedded VPN gateway project named IVW-2005, and it can meet the current WLAN's needs in transmission after the test. Now the next WLAN with lOOMbps in transmission is proposed, so IVW-2005 cannot meet the new requirements in next high-speed WLAN. Therefore, we design a gateway project named WG-2006 to replace the IVW-2005 project. The research work mentioned in this paper is mainly about:(1)Research on WEP, 802.11i and WAPIDefects existing in original WEP are analysed, the authentication, key exchange and confidentiality mechanism of wireless security protocols of WPA, RSN and WAPI are deeply studied.(2)Researsh on IPSec protocolsThe architecture, encryption and key management of IPSec are analysed, and it has been compared with the WEP, 802.1 li, andWAPI in security.(3)Researsh on IPSec gatewayWe compared with four VPN gateway projects. We analysed the IVW-2005 project, and then an IPSec VPN gateway project named WG-2006 is proposed and designed, which is better than the IVW-2005 project.The WG-2006 is designed to apply in the next generation WLAN with lOOMbps' transmission. Theoretically, it can meet the needs of the next generation WLAN, and it can be applied in ethernet network.