基于虚拟机的VPN综合实验设计  

Comprehensive Experiment Design of VPN based on Virtual Machines

作　　者：杨浩淼[1] 程红蓉[1] 张文科[2] 

机构地区：[1]电子科技大学计算机学院,四川成都611731 [2]卫士通信息产业股份有限公司,四川成都610041

出　　处：《信息安全与通信保密》2012年第6期56-58,共3页Information Security and Communications Privacy

基　　金：电子科技大学新实验建设专项"基于VMWare网络安全协议综合实验的虚拟平台的设计"所支持

摘　　要：虚拟专用网络(VPN)指的是在公用网络上建立专用网络的技术,可以基于PPTP、L2TP/IPSec或者SSTP隧道来建立。传统VPN实验是基于PPTP协议的。文中设计了更广泛的VPN实验:基于L2TP over IPSecs协议和SSTP协议。而基于虚拟机平台的实验具有更方便、更经济的优点。此外,该实验还涉及到了Windows平台上各种安全设置,如活动目录、DNS服务器、DHCP服务器、防火墙、证书颁发中心CA等,具有很强的综合性。A virtual private network（VPN） is a technology in build up the private network on the public communication infrastructures such as the lnternet, which could be built up on PPTP, L2TP over IPSec, or SSTP tunnels. Traditional VPN Experiment is based on SSTP Protocol. Two more general Experiments, respectively based on L2TP/ IPSec Protocol and SSTP Protocol, are designed. However, these experiments based on virtual machine platform are more convenient and economical. In addition, various security apparatuses on Windows system platform are also involved in the comprehensive experiment, such as active directory, DNS server, DHCP server, firewall, certification authority（CA）, and so on.

关 键 词：虚拟专用网络 PPTP协议 IPSEC协议 SSTP协议 

分 类 号：TP393.1[自动化与计算机技术—计算机应用技术]