Design And Implementation Of Gigabit IPSec VPN Based On Security Processor

IPSec-based Virtual Private Network already becomes one of the common solution in network security,but existed IPSec VPNs are mostly implemented with the software method,so the processing speed is lower.With the rapid development of internet and bandwidth, IPSec VPNs have already become the choke point in the high speed internet,which fall behind a switch and router.Aiming at the increasing capability's requirement, this paper proposes the design scheme of Gigabit IPSec VPN,which is based on PowerPC750 processor and Hifn8300 security chip. PowerPC750 mainly accomplishes configuration management of the VPN. Hifn8300 security chip can accomplish encryption/decryption and encapsulation protocol and so on, which supports 128/256-bit AES,DES and 3DES encryption arithmetic as well as SHA-1 and MD5 verification arithmetic,and can accomplish thread-speed encryption/decryption. IPSec VPN that this paper designed obtains expectant effect in the test,and it increases performance obviously of IPSec VPN.I mainly design and implement two configuration parts–CLI and Web,and i also participate the test and integrated debug of the whole system.Although IPSec VPN has the strong security performance, along with the realtime services as sound,video are widely applied in the network,because IPSec VPN can't solve these questions of QoS guarantee,traffic engineering,etc,so this paper researchs other implementation scheme of IP VPN—MPLS VPN,and puts forward a solution and implementation model named IPSec-based MPLS VPN.It combines IPSec's high security and reliability and MPLS's high speed switching,QoS guarantee and traffic engineering as well as expandability,which can provide secure and reliable VPN which have perfect capability.It will be a future development direction of VPN.