IPSec VPN应用场景分析与实验仿真  

Application Scenario Analysis and Experimental Simulation of IPSec VPN

作　　者：李超凡 马凯 LI Chao-fan;MA Kai(Information Department,Suqian First People's Hospital,Suqian,Jiangsu,223800,China;College of Medical Information and Engineering,Xuzhou Medical University,Xuzhou,Jiangsu,221004,China)

机构地区：[1]宿迁市第一人民医院信息处,江苏宿迁223800 [2]徐州医科大学医学信息与工程学院,江苏徐州221004

出　　处：《新疆师范大学学报（自然科学版）》2022年第1期34-39,共6页Journal of Xinjiang Normal University(Natural Sciences Edition)

基　　金：徐州市科技计划项目重点研发计划(KC21308);江苏省研究生教育教学改革研究与实践课题(JGZZ19_065)。

摘　　要：VPN是进行远程访问的一种技术手段,IPSecVPN是目前企业网解决端对端加密数据通信的主要途径。文章基于EVE-NG仿真环境,设计与仿真端对端VPN模式、动态地址VPN类型、网络穿越和应用隧道技术等多业务场景下的逻辑网络拓扑,利用Wireshark工具分析各VPN类型进行通道建立的数据包交互。仿真实验结果表明,依据不同业务需求建立的加密数据包通道都能够提供安全可靠的服务。通过搭建B/S结构的EVE-NG虚拟网络仿真环境,满足实验教学的课程需要,实验方案可依据实际业务需求部署到真实网络环境中,也为仿真平台提供了相应的实践案例。Virtual Private Network is a technical means for remote access.Internet Protocol Security VPN is currently the main way to solve site-to-site encrypted data communication in enterprise networks.Based on the EVE-NG simulation environment,this paper designs and simulates the logical network topology in multi-service scenarios such as site-to-site VPN mode,dynamic address VPN type,network traversal and application of tunnel technology.At the same time,the Wireshark tool is used to analyze the data packet interaction of each VPN type dur-ing channel establishment.The simulation experiment results show that the encrypted data packet channels estab-lished according to different business requirements can provide safe and reliable services.By building the EVE-NG virtual network simulation environment of B/S structure,it can meet the needs of experimental teaching courses.The experimental scheme can be deployed in a real network environment according to actual business requirements,and corresponding practical cases are also provided for the simulation platform.

关 键 词：虚拟仿真环境 IPSECVPN 数据加密 实验教学平台 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]