虚拟专用网组策略管理模型研究  

Research on Group Security Policy Based Management Architecture for Virtual Private Network

作　　者：贾培[1] 曹斌[1] 刘积仁[1] 

机构地区：[1]东北大学信息科学与工程学院,沈阳110004

出　　处：《计算机工程》2006年第5期102-103,182,共3页Computer Engineering

基　　金：国家计委高科技产业化示范工程项目"联动式网络安全集成系统"

摘　　要：针对大规模虚拟专用网络中安全隧道管理的复杂性,提出了一种基于组策略的管理模型。通信实体按其安全需求聚合为不同的安全组,组策略以抽象方式定义组内成员间通信的安全保护机制,设备之间的隧道连接关系则通过对组策略的扩展自动生成。模型实现了对全网VPN设备的统一管理,有效减轻了VPN的管理负担,具有良好的扩展能力。Group policy based management architecture is proposed to solve complexity problem of security tunnel management in large-scale VPN network. In this architecture, communication entities are aggregated into different security groups, and group policy is used to regulate security protection mechanism for communications among group members. For each VPN device, tunnel relationships are computed automatically via extension of corresponding group policy. This architecture is both efficient and scalable, and is supposed to have promising perspective.

关 键 词：虚拟专用网 安全隧道 组策略 安全组 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]