| VPN, as a mainstream network security device, has been studied and developed for many years. It has been widely adopted as basic network security communication device, both in currently extensively- used IPv4 network and IP v6 network being developed, by mobile handle official business and inter-network communication. The three most frequently used types of VPN are IPsec VPN, SSL VPN and MPLS VPN, which are different in their working principles and levels. There is overlap between the application areas of IPsec VPNå'SSL VPN. These two types of VPN have their own characteristics, advantages and disadvantages.IPsec VPN protocol provides satisfactory security, authentication and authorization services with high capability. It can be applied in complicated transparent networks with high usability and feasibility. It has been adopted widely domestically; however, few researchers are working on its improvement and depth research. This dissertation will study the problems of NAT traversal to provide solutions and results based on the realization of an IPsec VPN system with client part and server part. Dispose the actual demand of IPsec VPN system in the star type topological network to what users put forward. We used GRE protocal encapsulate IPsec package method realized Hub-and-Spoke, and center node centralized management in the user' s demands at the same time.SSL VPN has just come out for few years and being researched by few institutions and companies with different realization methods. This dissertation will describe the research and realization process of a SSL VPN and then carry out a systematic test to it, so as to conclude the project methodology for SSL VPN research' development and test. In realization ,we especially described that the detail of tunnel ports transmit technology. It is the key technology of light client SSL VPN.Besides, this dissertation will compare IPsec VPN and SSL VPN in therory and practice field. At the end, we forecast the future development of them. |
PDF Full Text Request