增强普适性的VPN系统设计与分析  

Research of strategies to enhance VPN's adaptability

作　　者：罗昕[1] 张延园[1] 马巍娜[1] 

机构地区：[1]西北工业大学计算机学院

出　　处：《微型电脑应用》2008年第5期39-41,5,共3页Microcomputer Applications

摘　　要：作为较普及的VPN系统,SSLVPN比IPSec VPN更具有维护成本低、组网灵活、操作简便等特点。因此本文在比较了传统VPN系统的优缺点之后,对基于SSLVPN的产品OpenVPN进行研究,通过结合Ethernet over SSL、Mail Callback、Relay Sever技术,增强了整个VPN系统的普适性,使得系统能够满足更灵活的环境配置需求,并在客户端配置Client Firewall,以降低由远程登陆用户给企业内部网络带来的安全隐患。最后对改进的系统建立了GSPN模型进行性能分析,通过与实际测试结果的比较。As two kinds of popular VPN system,the SSL VPN is cheaper and easier to deploy and operate than the IPSec VPN.After compared normal VPN systems,we investigated OpenVPN,one product based on SSL VPN,and combined the Ethemet over SSL,Mail Callback,Relay Sever technologies to enhance VPN's adaptability,and proposed the Client Firewall strategy to improve the system security.At last through modeling the system with GSPN model,the experiment,which compared the estimative value with the experimental values,proves that the new structure of VPN system has the same outstanding performance.

关 键 词：虚拟专用网 客户端防火墙 邮件回调 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]