Font Size: a A A

Design And Implementation Of The IPSEC VPN

Posted on:2006-05-11Degree:MasterType:Thesis
Country:ChinaCandidate:J F YuFull Text:PDF
GTID:2178360242961714Subject:Software engineering
Abstract/Summary:PDF Full Text Request
IPsec Virtual Private Network (VPN) is an Enterprise Network deployed over shared infrastructures with IPsec encryption techniques and provides corporate networks connected to the Internet with the ability to enable flexible and secure VPN access. IPsec is a framework of open standards for ensuring private communications over IP networks which has become the most popular network layer security control. It can provide several types of data protection: confidentiality, integrity, data origin authentication, prevention of packet replay and traffic analysis, and access protection. Allowing organizations to connect remote sites over the Internet with the security of encryption protection against wire taping or private communication intrusion, IPsec VPN become an effective and economical replacement for the traditional WAN access such as Frame Relay or ATM.This Paper is derived from the Design of capitel's VPN Project which is been supposed to support kilomega bits throughput. Firstly, the paper presents IPSec protocols in details, and then, it discusses the architechture of an IPSec VPN, Finally, an effective way to implementation of a secure IPSec LAN based on the Linux platform is been described .An IPSec-compliant VPN is constructed and the traffic between the host and the gateway is protected by the IPSec tunnel. An performance analysis are done to determine the effects of IPSec service on the VPN. The thesis presents a method to determine the Capability of tunnel connection by CPU performance. The implementation not only includes implementing the system itself but so many protocols, The technique of design we have gained through this project have enabled engineers to design a better IPSec system in the future.
Keywords/Search Tags:Viturle Private Network, Internet Key Exchange, Encapsulating Security Payload, Authentication Header
PDF Full Text Request
Related items