Design And Implementation Of VPN System Based On IPSec

In the communication software technology, microelectronics technology and therapid development of the computer today, the computer technology as the foundation ofthe network technology in the specification of Open Systems Interconnection model andTCP/IP protocol cluster, technical barrier between heterogeneous computerinterconnection between, is completely broken, thus promoting the development of theinformation technology.Platform information system in the expansion of informationexchange and sharing, technology at the same time by network technology, but alsoinformation on the ownership, use right and the right to resist challenges.VPN is anetwork technology concepts (i.e.,establishing the virtual private network in the publicnetwork), widening the application of network environment, effectively solve theinformation rights problems of information interaction.Due to the application of VPNtechnology can improve the communication system performance/cost, so as to reducethe communication cost, guarantee the quality of communication, so it is widely appliedin society.Widely used in the IPSec VPN hardware encryption card also makes thesystem performance has practical significance to improve the.Application in the publicsecurity system of the e-government network: public security police equipment, mobilecommunication.For the IPSec and VPN technology, all sorts of deficiencies in practical application,the research focuses on the IPSec VPN in applications involving hardware requirements,on the basis of the proposed PCI expansion slot data cipher card design andimplementation method based on.Based on the above requirement, this paper design andimplement the hardware encryption card and the way to construct the IPSec VPN.Thefirst VPN agreement on classification analysis, and discuss the advantages of VPNIPSec protocol, then the structure and working principle of a concrete analysis of IPSecprotocol.Secondly introduces the system design and architecture of IPSecVPN.Finally,design, functional data cipher card structural design,safety design and the way to test thehigh speed, safety performance data cipher card.Thesis presents the hardware implementation of the IPSec VPN used data cipher card is to use the IPSec to the hardware implementation, including the treatmentprotocol processing, key management, security policy management of these complexoperations.Because the whole is realized in hardware, so the speed can meet therequirements of fast and Gigabit transmission, and has the advantages of high speed,low latency, and operating system independent, transparent to the user, good securityadvantages.From the speed and safety of two long-term point of view, hardwareimplementation of IPSec is the inevitable trend of IPSec implementation, and how todesign and construct VPN system with high efficiency, safety, based on IPSec protocol,it is the purpose of this paper.