基于IPsec的非对称VPN在Linux下的设计  

Design on unsymmetrical VPN based IPsec under Linux

作　　者：龙艳彬[1] 王丽君[1] 

机构地区：[1]鞍山科技大学计算机科学与工程学院,辽宁鞍山114044

出　　处：《鞍山科技大学学报》2006年第4期384-390,共7页Journal of Anshan University of Science and Technology

摘　　要：为解决在多级子网中系统开销大和较低的包传送效率的问题,提出了一种在Linux下基于IP安全协议的非对称VPN安全机制,通过用户认证、访问权限和线路中继,可以在网络层中提供完整性、保密性、可认证性、不可否认性等安全服务,在性能上降低了系统开销,提高了包传输率。In order to solve the problem of high cost and low package transform efficiency in the environment of multiple subnets, a unsymmetrical VPN security mechanism based on IP security protocols under Linux structure was presented, which can provide integration, security, authentication and non-repudiation services at the network layer by using authenticaiton, access authority and the routing relay. Furthemore, it can decrease the system cost and increase the package transform efficiency.

关 键 词：虚拟专用网 因特网 安全协议 网络安全 

分 类 号：TP393.18[自动化与计算机技术—计算机应用技术]