Research And Design Of VPN Gateway Sed On Dual-core CPU

With the development of the Internet and the internationalization of enterprises, more and more large enterprises in all parts of the country and even all over the world have their branchs, in the past these branches ofen uses the leased line to achieve internal network interconnection.But this kind of cost is too high, only some large enterprises can affor it,while for those small and medium-sized enterprises,how to achieve internal network security interconnection on basis of low cost is a big problem.The Security Gateway Virtual Private Network technology is one of the feasible ways to solve this contradiction.And the open source, stable Linux operating system is suitable to slove the defects such as high-cost, power consumption of VPN, So the Linux embedded VPN gateway is a very meaningful topic.Because the core and foundation of VPN technology is still the Internet, therefore the VPN technology development faced by the safety problems also cannot allow to ignore. This paper first introduces virtual private network technology and based on Linux embedded system development, then detailed study of the VPN security technology.And after analyzes the advantages and disadvantages of all kinds of VPN technique, specific analysis of the IPSec VPN technology realization.This paper mainly analyzes the embedded development platform and system transplantation.Respectively Analyzes the development environment design and construction、transplantation of U-BOOT and Linux2.6.39、use BUSYBOX to create CRAMFS root file system and the realization of IPSEC VPN based on Linux2.6.And then design a VPN gateway based on a double CPU for some occasions that need high performance requirement.This gateway has good performance%high stability, and has good scalability,also adapt to the development of the next generation of IPv6network VPN.And finally do some test and anslysis for this VPN gateway.