Study On An High-speed Embedded VPN Gateway For WLAN

With the population of Internet, it is the most two urgent requirements to get wider network band-width and ensure the Security of information. In the wide use of wireless LAN, WEB protocol is mainly used to ensure the security of data transmission in WLAN. However, there's some serious latent security danger in WEB protocol.To enhance the security of WLAN, WAPI specification is introduced in China, in 2003 and 802.11i security specification is introduced by IEEE in 2004. However, WAPI doesn't get the authentication from international organizations such as IEEE etc. And 802.11i has some security defects. Therefore, it is the most urgent problem that need to be resolved to enhance the security of WLAN, especially 100Mbps band-width WLAN.The VPN, virtual private network popularly used in wire network adopts many kinds of technologies, such as tunnel encapsulation, authentication, encrypt, access control etc and supplies the tunnel of Network interoperability and the sharing of resources. IPSec,network Layer Security Protocol is introduced to WLAN with security defects, constructing high speed embedded VPN gateway used in WLAN.It can not only exchange data in high speed, but also ensure the privacy of information. Therefore, this study is oriented to high speed VPN gateway used in WLAN.The main task is as follow:(1) Analysis and study for gateway key technologies such as ASIC,NP with 1000M Handling capacity, internal data transmission, Wire-speed packet processing, are the technical foundation of this study.(2) Comparatively Analyze 3 kinds of VPN technologies: MPLS VPN, SSL VPN, IPSec VPN;According to network features of WLAN,IPSec VPN is introduced to enhance the security of WLAN.(3) Based on the platform of "X86+Linux", a IPSec VPN gateway below 100M is studied to verify the feasibility that IPSec VPN is adapted to WLAN.(4) LookAside structure based on the platform of "NP+Linux" and Flow-through structure based on the platform of "NP+VPN Chip+Linux", designed 100M and 1000M level's gateway respectively, and performed simulation and forecasting for gateway Performance.The result of technical analysis and verification shows that:it can enhance the security of WLAN effectively to construct IPSec VPN gateway in the embedded platform.LookAside and Flow-through security system structure based on the platform of "NP+Linux"are applied to construct IPSec VPN gateway, 100M and 1000M class's security gateway can be realized to be adapted in WLAN above 100M class or Cable main network above 1000M class.