自建立虚拟专用网络技术的设计与实现  

Design and Implementation of Automatically Created Virtual Private Network Technology

作　　者：胡法红 

机构地区：[1]兰州交通大学现代信息技术与教育中心,甘肃兰州730070

出　　处：《兰州交通大学学报》2014年第6期44-49,共6页Journal of Lanzhou Jiaotong University

摘　　要：现有VPN技术对动态获取IP地址的分支机构间网络相互连通配置极其繁琐,且在NAT穿越、动态路由支持、报文加密等方面存在某些缺陷.针对上述问题,通过对动态点到多点隧道机制的分析,提出了AC-VPN方案,设计了AC-VPN隧道报文的封装格式和在动态IP地址的设备之间隧道管理机制,结合动态路由机制,实现了使接入到AC-VPN的设备能够相互访问.通过仿真测试,验证了AC-VPN的有效性.The present VPN technology makes it very tedious for branches dynamically getting IP address to communicate with each other,and there are some defects in NAT traversal,dynamic routing support and message encryption.Therefore,in order to solve these problems,AC-VPN scheme is proposed,and the encapsulation format of messages and the tunnel management mechanism of the dynamic IP address in AC-VPN tunnel are designed based on analyzing the multipoint tunneling mechanism of dynamic point,then the devices accessed to AC-VPN communicating with each other are realized by combining with the dynamic routing mechanism.Finally,the effectiveness of AC-VPN is verified by the simulation test.

关 键 词：VPN 隧道技术 AC-VPN 动态点到多点隧道 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]