Study On IPSec AES Encryption Mechanism Of WLAN Security

Wireless LAN (Wireless Local Area Network,WLAN), the outcome of modern wireless communication technology which is high-speed developing and computer network, due to its simple network configuration, good mobility and extensibility, high transmission rate and convenient to carry, WLAN becomes more and more popular. While applications of WLAN expand unceasingly, its security problems are more and more obvious, even become bottlenecks in the wireless local area network development.In IEEE 802.11 standard, WLAN safety is guaranteed by WEP, WPA, WPA2, IEEE 802.11 protocols, but these wireless LAN protocols are aimed at the MAC layer. With the rapid development of network, single security protocols cannot satisfy people's needs in sensitive data security protection. Therefore, how to adopt various mechanisms to enhance wireless network security becomes an important subject in WLAN field.We research WLAN security, firstly analyze the existing security mechanism, and point out the existing safety problems and combine VPN technology solutions, then bring IPSec security mechanism of network layer into current WLAN security system. On the basis of implemented DES and 3DES algorithms, advanced encryption algorithm is embedded and IKE negotiation process is configured. And in the AES encryption, keys with three lengths, namely, 128 bits, 192 bits and 256 bits can be chosen, so data safety of network layer is enhanced, then users can be protected from MAC to IP layer.We present detailed design of IPSec implementation, including framework and procedure of the key function entity and implement AES algorithms which is used in IKE negotiation process and data transmission. Experiments show that on the basis of WEP encryption in MAC layer, AES algorithm with 128bits, 192bits and 256bits can encrypt and decrypt information correctly in peer to peer communications, thus enhance safety performance of WLAN.