基于IPsec的站点间VPN部署方法  

IPsec-based Site-to-site VPN Deployment Method

作　　者：李春平[1] 张淑荣[1] 王东 韦立梅[1] 肖亚光 LI Chun-ping;ZHANG Shu-rong;WANG Dong;WEI Li-mei;XIAO Ya-guang(Guangdong Baiyun University,Guangzhou 510000,Guangdong)

机构地区：[1]广东白云学院,广东广州510000

出　　处：《电脑与电信》2022年第4期73-77,共5页Computer & Telecommunication

摘　　要：在企业级的网络部署中,为了保证公司总部和分支机构的正常通信,同时为了节省开支,可利用互联网平台,采取加密通信的方式保证网络和通信安全。采用IPsec VPN实现站点间安全通信是有效的部署方法,分析IPsec的工作原理,简化拓扑模型,根据IP地址规划和相应的IKE策略,分步实施并进行验证测试,证明部署模型是正确的,验证了IPsec隧道通信是安全可靠的。In enterprise-level network deployment,in order to ensure the normal communication between the company headquarters and branch offices,and to save costs,the Internet platform can be used to ensure network and communication security by means of encrypted communication.Using IPsec VPN to realize secure communication between sites is an effective deployment method.This paper analyzes the working principle of IPsec,simplifies the topology model,and implements step-by-step verification tests based on IP address planning and corresponding IKE policies to prove that the deployment model is correct,and the IPsec tunnel communication is safe and reliable.

关 键 词：加密 网络安全 IPSEC VPN 隧道 

分 类 号：TP393.1[自动化与计算机技术—计算机应用技术]