OpenBSD下基于IPSec协议的VPN研究与设计  

RESEARCH AND DESIGN OF VPN BASED ON IPSEC IN OPENBSD

作　　者：周敬利[1] 李岩[1] 余胜生[1] 胡熠峰[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机应用》2002年第7期4-7,共4页journal of Computer Applications

摘　　要：IPSec提供一种对用户透明的IP层安全服务 ,包括机密性、完整性、可认证性和数据重放保护。IPSec可用于保护主机间、安全网关间或安全网关—主机间的一条或多条路径的安全通信。文章对IPSec的结构与组成 ,IPSec在OPENBSD下的实现进行了较为详细的研究 ;并对系统的利弊进行了评价。IPSec offers a kind of secure service that is transparent to user and includes confidentiality, integrity, authenticity and replay protection. IPSec can be used to protect communication between two hosts or safe gateways or host and gateway. This paper studies the structure of IPSec and its constitute and the realization of IPSec in OpenBSD system at large. The advantages and disadvantages of this system are evaluated,too.

关 键 词：虚拟专用网 IP安全协议 封闭安全负载 安全关联 INTERNET密钥交换 安全策略数据库 认证 

分 类 号：TN918[电子电信—通信与信息系统]