| At the begin of the dissertation, we has discussed the state of security on Internet, analyzed the factors caused frangibility of Internet, and intrudced some means used to provide security services for Internet. After that, this dissertation focuses on deep research on secure network access as follows. The IPv6 security component IPSec is analyzed in detail in the structure, function, work mode and implementation of IPSec in IPv4 and IPv6. The ability of keeping the IP packet's integrity, secrecy, authentication, data origination, anti-relay is discussed. The relationship of IPSec component Authentication Header (AH), Encapsulating Security Payload (ESP) and IKE (Internet Key Exchange) is also talked about. This discussion of IPSec makes the impression that IPSec make IP layer security enough.Then, I have designed a group of experiments based the fore theory, further proceeding research for IPSec applied in the native IPv6. In these experiments, realized to aim at the different communication stream apply the different the policy of IPSec; Pass the usage of selectors forminged the meticulous protection policy; creatively applied the policy of IPSec to mobile IPv6 network inside. In the dissertation I have compared the network transmission performance that before and after applied IPSec policy to carry through the quantitative analysis. Get a fringe conclusion that applied the IPSec policy would influence network transmission performance and its degree. After implemented experiments, accorded to these test dataes, analyzed deficiency of currently experiments, and put forward our suggestion and consideration for further research of technical in future. |