基于IPSec的动态星型VPN系统  

Dynamic hub-and-spoke VPN system based on IPSec

作　　者：姜文[1] 史烈[1] 

机构地区：[1]浙江大学计算机学院,浙江杭州310027

出　　处：《计算机工程与设计》2006年第4期640-643,共4页Computer Engineering and Design

摘　　要：针对目前基于IPSec的虚拟专用网应用在网络规模较大时配置复杂、难以管理的问题,提出了一种动态星型网对网VPN系统,该系统定义VPN集中器与子网网关间的消息交换机制以支持子网网关动态加入/退出VPN,引入组的概念提供各子网间的访问控制管理,并进一步介绍了在Linux下实现该系统的方法。To resolve the problem that it is hard to configure and manage a lager-scale VPN based on IPSec, a dynamic hub-and-spoke VPN system was defined, in which VPN hub exchanges messages with subnet gateways to support gateways to join/quit VPN dynamically. And notion of＂group＂ was introduced to provide access-control for all subnets. Furthermore, the way to implement it in Linux OS was given.

关 键 词：虚拟专用网 星型网络 网际安全协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]