虚拟专用网实现矿区计算机网络安全连接  

Virtual Private Network Applied to Safety Connection of Computer Networks Between Mining Areas

作　　者：顾闯[1] 

机构地区：[1]煤炭科学研究总院经济与信息研究所,北京100013

出　　处：《煤炭科学技术》2009年第6期99-102,共4页Coal Science and Technology

摘　　要：针对煤炭企业矿区地理位置分布偏远所带来的网络安全连接的问题,提出利用IPSec安全协议实现2个矿区之间跨越因特网的企业内部网络连接方案,运用虚拟专用网内部网关策略控制体系,对发送端原始的数据经过高强度、动态变换的密钥封装在另一个IP通道内,通道头部地址为接收端的IP地址,以此来保证数据的安全性,以达到煤炭企业网络安全扩展的目的。并对企业矿区之间网络出口存在网络地址转换设备,导致两地网络间安全数据隧道无法连接的问题提出了有效的解决方法。According to the network safety connection issues due to the geographic location distribution of the coal enterprises in remote areas, the paper proposed to apply the IPSec Safety Protocol to the connection plan of the enterprise internal networks between two different mining areas through the Internet with the internal network gate strategy of the virtual private network to control the system. With the original data at the transmission terminal sealed and packed with a high strength and dynamic changed pass words in another IP channel and the front address of the channel as the IP address of the receiving terminal, the safety of the data could be ensured and the target to safely extend the coal enterprise network could be reached. An effective solution was provided to the hard to be connected for the safety data tunnel between the two networks caused by the network address translation devices existed in the network outlet between the enterprise mining areas.

关 键 词：虚拟专用网络 IPSEC安全协议 端口转换 

分 类 号：TD67[矿业工程—矿山机电]