| With the rapid development of network information technology and the increasingdemand for network, especially with the rapid development of modern E-Commerce andE-Govern-ment affairs, network security has become the increasingly concerned issueday by day.VPN technology is a virtual private network technology which uses the cryptogramknowledge in the establishment of public networks. SSL protocol, which includes a totalof four two-tier protocol suite, is based on TCP connections. SSL-based VPN system canhelp client access remote enterprise information resources through a simple Webbrowser.SSL VPN gateway is an important component of SSL VPN system. It is located onthe edge of enterprise networks, ranging from enterprise servers and remote users tocontrol communications between the two. It has the dual role. For the enterprise server, itis client-side and for the remote client, it is just server-side.Therefore, gateway system isof great importance to security problem of data access.Based on the construction project of F100E SSL VPN system provided by HangZhou H3C Technology Co., Ltd., this paper mainly focuses on the design andimplementation of VPN gateway system based on Comware and SSL protocol.Firstly，this paper introduces the definition of VPN technique,SSL protocol, andSSL VPN system. Then it points out limitations of the traditional SSL VPN in applicationand puts forward the corresponding solution through analyzing the difference betweenIPsec VPN and SSL VPN. Secondly, it concludes the most appropriate strategy forgateway system according to the analysis on the function of SSL VPN system. Thirdly, itimproves the defects on security, easily use and reliability of normal gateway system.Then it raises constructive suggestions and solutions, which indicate gateway system toadopt the entirely distributed computing technology and modular design. Finally, thispaper summarizes the gateway system and puts forward improvement direction for thefuture. |
PDF Full Text Request