Dynamic Virtual Private Network Technology Research

At present VPN (Virtual Private Network) has provided a very good kind of safety resolving scheme in network applications, and implemented building the private network through the internet and sharing the network resource. But there is some defects in the traditional VPN technology, such as: deploy complicated, maintenance and extend difficult, adapt to dynamic IP incapable and so no. Especially a branch of enterprise almost access to the public network adopting dynamic IP address in the application of enterprise network, this is very difficult for the branch of enterprise to visit each other directly, for having no way knowing the public IP address of the other side.This paper has suggested and designed one kind of new resolving scheme of enterprise network—DVPN (Dynamic Virtual Private Network) in allusion to the defects of traditional VPN technology, making up of VAM and dynamic point to multiple points tunnel.The DVPN scheme has provided one kind of way to building up VPN flexibly. It has implemented the equipments to create tunnel automatic after getting IP address dynamic and making the equipment of accessing to the VPN region visit each other easily. And it has meeting the need of all branch of enterprise building up VPN between each other in the condition of accessing to public network with dynamic IP address. At the same time the scheme has provided identity authentication, encrypted protection of control packet, protection of date packet with IPSec. It has suggested the NBMA type tunnel mechanism, using the tunnel logic interface as DVPN tunnel end point, and supporting the dynamic route protocol. Moreover, through making one interface as the end point of multiple sessions at the same time, it is accomplishing the network layout of one to more, and facilitating work of deploy and maintenance largely. In one word, DVPN is especially in keeping with at present as well as future network applications.