Research On And Implementation Of Campus Network Security System Based On VPN Technology

VPN (Virtual Private Network)is the technology of building tunnels over the public network by using technology of tunnel and encryption as well as method of identity authentication, thus realizing virtual private network. On the virtual private tunnels built, date can be transmitted through encryption, thus ensuring data confidentiality. In addition, there is no need to especially set up specialized physical network, thus saving cost.In the campus network, it is necessary to build a security system that is secure, convenient and powerful. VPN just meets the requirements of the campus network.This paper, starting from the development situation of VPN, introduces the development prospects of VPN technology in China and around the world. Firstly, three common security systems are introduced, which are firewall system, intrusion detection system, and network isolation system. Theories and shortages of these three systems are concretely analyzed. Then it is pointed out that network system based on VPN is the secure system that is suitable for campus network. Secondly, from the theory of VPN, this paper introduces the types and key technology of VPN. IPSec and SSL protocol are stated in detail. Combining campus net demand in Baoji University of Arts and Sciences, this paper proposes the implementation of VPN security system in the campus network. Based on this implementation, not only the interconnection of private networks, such as financiering and "all-purpose card", can be realized, but also outside school users and mobile office users can access the internal resources of campus network through remote connection. Lastly, by making use of existing network equipments, such as router and servicer, on router, based on IPSec technology, interconnection between two campuses can be realized and on servicer, based on Linux and Open Source Software Open VPN, SSL VPN is realized. Therefore, users can remotely access resources inside school and test the performance of campus network security system. This further proves that solution proposed in this paper is effective and available.