基于HCR路由器的IPSec系统设计与实现  

Design and Implementation of IPSec System Based on HCR

作　　者：张治元[1] 孔庆月[2] 

机构地区：[1]长沙通信职业技术学院计算机信息工程系,湖南长沙410015 [2]河北化工医药职业技术学院计算机信息工程系,河北石家庄050026

出　　处：《计算机与现代化》2009年第11期50-52,共3页Computer and Modernization

基　　金：湖南省教育科学规划课题项目(XJK06BZC004)

摘　　要：IPSec VPN和分布式路由器技术为网络的安全做出了重大贡献。在路由器上实现IPSec VPN功能模块有着更为重要的意义,这不仅可以保护重要的网络路由数据包及各种网络业务数据包,还可以和其它的VPN技术融合来共同构筑整个IP传输网的安全。本文提出一种基于HCR路由器技术的IPSec VPN系统方案,给出IPSec VPN系统在网络处理器(NPC)上的处理流程以及SPDB/SADB模块和加密/解密模块的设计方案。IPSec VPN and distributional router technology make great contributions to the safety of network. The lPSec function modules can be implemented on routers. By doing this, we can protect not only the router packets, but also the network service packets. Additionally, the IPSec also can be combined with other VPN techniques to provide security for the IP transport net- work. So it is of more important signifieanee. This paper puts forward a kind of IPSee System scheme based on HCR, and provides the IPSec process flow on Network Processor（NPC）. The design scheme of SADB/SPDB and encryption/decry, ption modules is also provided.

关 键 词：IPSEC 异构型集群路由器 安全关联 因特网密钥交换协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]