防火墙与IPsec协同实现L3/L2一体化VPN  

L3/L2 integrated VPN based on Cooperation of Firewall and IPsec

作　　者：申玲钰 朱振乾 SHEN Ling-yu;ZHU Zhen-qian(No.30 Institute of CETC,Chengdu Sichuan 610041,China;China Electronics Technology Cyber Security Co.,Ltd.,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,成都610041 [2]中国电子科技网络信息安全有限公司,成都610041

出　　处：《通信技术》2020年第9期2334-2337,共4页Communications Technology

摘　　要：防火墙与IPsec技术为网络安全做出了重大贡献。防火墙主要用于保护网络不受非法入侵,IPsec技术可实现数据的安全传输。IPsec VPN安全网关应用广泛,但其不适用于网桥模式。提出了一种基于NetFilter框架防火墙与IPsec协同实现L3/L2一体化VPN的方案,该方案可在网关与网桥模式下自由切换、配置简单、功能灵活,是一种有效且适应范围广泛的网络防御机制。Firewall and IPsec make great contributions to network security.Firewall is mainly used to protect the network from illegal intrusion,and IPsec technology can realize the safe transmission of data.IPSec VPN security gateway is widely used,but it is not suitable for bridge mode.A scheme of L3/L2 integrated VPN based on NetFilter framework firewall and IPsec cooperation is proposed.The scheme can switch freely in gateway and bridge mode,with simple configuration and flexible function.The L3/L2 integrated VPN is an effective and widely applicable network defense mechanism.

关 键 词：NETFILTER 防火墙 IPSEC L3VPN L2VPN 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]