The Design And Realization Of Dynamic Multipoint VPN

Nowadays, corporations build the Virtual Private Network (VPN) in order to provide the security and integrity for the communication between different departments of them. The most popular way is by using IPSec to do this. However, the traditional IPSec VPN depends on the static tunnel too much, which is configurated by manually, at the same time, the traditional IPSec VPN don't provide the service which is to configurate IP address dynamically. With the development of corporation, the traditional VPN faces a lot of problems, especially in the corporation which has a lot of departments. In order to resolve these problems, I have put forward Dynamic Multipoint VPN to build the IPSec tunnel dynamically.In this article, I have describe the process of developing the IPSec and SSH protocols in routers. I have put forward the dynamic multi-point VPN module as well as developed establishment of IPSec tunnel and SSH tunnel after I study and analysis the VPN technology. I am focus on the process of comprehending, developing and improving the IPSec and SSH technology in this article.I have developed the dynamic multipoint VPN function module on routers, which includes IPSec module with a new NHS module and SSH module. At the same time I have established the tunnel between LAN-TO LAN and SITE-TO-LAN dynamically. By doing this, I make it more integrate and safe to transfer data by using the tunnel. Besides, I developed the authentication function of access client. After this, I have tested and analyzed the software in detail. At last, I have put forward some ideas of improving both dynamic establishment of IPSec and negotiation process of SSH to make the software more efficiently.