IKEv2远程接入配置机制的改进与实现  

Improvement and Implementation of IKEv2 Remote Access Configuration Mechanism

作　　者：徐家燕[1] 周晓东[1] 陆建德[2] 

机构地区：[1]苏州大学计算机学院,苏州215006 [2]江苏省计算机信息处理技术重点实验室,苏州215006

出　　处：《计算机工程》2008年第18期113-116,共4页Computer Engineering

基　　金：江苏省自然科学基金资助项目(BK2004039)

摘　　要：传统远程接入配置机制存在交互时间长、安全性不强、访问控制难、远程接入服务器负担重等缺陷。该文在最新的IKEv2的基础上,将CP载荷与DHCP机制有效结合,实现远程接入用户的自动配置。实验表明,该机制提高了远程接入效率和安全性,增加对用户身份的识别以及基于用户组的分配策略,为进一步的访问控制提供了便利。Traditional remote access configuration mechanism has the following shortcomings： interactive time is long, security is not strong, access control is difficult, the burden of remote access server is heavy and so on. Basing on the newest IKEv2, this paper combines CP payload with DHCP mechanism and implements automatic configuration of remote access client. Experiment shows that the improved mechanism improves efficiency and security of remote access and makes advanced access control easier by adding to user identification and allocation strategy which is based on user group.

关 键 词：IPSEC协议 远程接入 VPN网络 配置机制 IKEV2协议 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]