基于Linux的IPSec实现技术研究  

Study on Implementing IPSec Based on Linux

作　　者：金冉[1] 奚李峰[1] 陈智罡[1] 

机构地区：[1]浙江万里学院,浙江宁波315100

出　　处：《浙江万里学院学报》2009年第2期22-26,共5页Journal of Zhejiang Wanli University

摘　　要：Internet VPN是专用网家族的最新发展成果,目前基于IPSec安全协议的VPN被广泛看好。文章在研究IPSec协议框架和Linux操作系统的基础上,提出了通过改造Linux内核以及在操作系统原来的TCP/IP协议栈上添加IPSec的实现方案,并对具体实现的关键技术作了进一步的研究。As one main research focus of network security,VPN puts forward a new solution of networklayer security architecture, and VPN based on the IPSec become more popular. In this paper, IPSec protocol architecture and linux kernel structure are studied in detail. Then the paper presents the scheme of designing and implementing IPSec on the linux by making changes to .TCP/IP stack of linux and appending IPSec there. Also the key technique to accomplish this system is discussed in the paper in detail.

关 键 词：IP安全协议 虚拟专用网 INTERNET密钥交换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]