The Research And Realization Of Tunnel-switching Technology Based On IPsec

The tunnel-switching technology is a new domain in VPN technology and it can enhance VPN validly the flexibility and extensibility, and implement interconnection of the different network service provider or the different security field, becoming more and more important. However, the tunnel-switching technology has not formed a unified standard and the concept at present, and it also has the certain deficiency in aspects of architecture, dynamic-switching, implementation-model and the integration of the function of VPN and tunnel-switching. In this paper, we have deeply studied the IPsec tunnel-switching technology,and we have designed and developed the IPsec tunnel-switching gateway.The main work of this paper is as follows:1. Analyzed situation of tunnel-switching deeply. According to the deep research and classifly on the modern tunnel-switching technology, we have a comprehensive understanding. Pointed out the deficiency of modern tunnel-switching technology.2. Researched the architecture of tunnel-switching deeply and pointed out the key question. Through analyze three kind of application-model of tunnel-switching we know the essential application mode and network characteristic in the VPN network..That can enhance the flexibility and extensibility of VPN network according to use tunnel-switching technology.3. Designed two mechanism of dynamic tunnel-switching.Researched the basic principle of IPsec mechanism of dynamic tunnel-switching In view of the insufficiency of static switch..Designed the corresponding mechanism of dynamic tunnel-switching from two aspects of central inquiry and the automatic-detection, that can selection switch-route according to the information of route,strategy and flux, and can make the dynamic adjustment according to the network analysis situs and the change of security tunnel., and reduced the complexity of configuration also causes the tunnel-switching to be more flexible.4. Researched the integration realization of IPsec tunnel-switching. Studied the integration implementation thought and given the integration implementation method in the meaning, the principle, the application foundation of two different mode of decrypt/encrypt and IP encapsulation.The user can selection configuration freely according to the actual situation.Research and development a product will be convenient.5. Designed and implemented the IPsec tunnel-switching gateway which has the function both of VPN and tunnel-switching combining the modern IPsec VPN gateway. The IPsec tunnel-switching gateway both to be possible to be a security gateway safeguarding network security, and to be a switch-equipment executing tunnel-switching function.That can enhances the flexibility and reduces the product complexity of research and development.