虚拟专用网络加密技术实验教学改革探索  

Research on Practical Teaching of VPN Encryption Technology

作　　者：姚晔[1] 张玉蓉 邱洪君 YAO Ye;ZHANG Yurong;QIU Hongjun(School of Cyberspace,Hangzhou Dianzi University,Hangzhou 310018,China)

机构地区：[1]杭州电子科技大学网络空间安全学院,杭州310018

出　　处：《实验室研究与探索》2023年第4期227-231,共5页Research and Exploration In Laboratory

基　　金：浙江省高等学校省级虚拟仿真实验教学项目(浙教办函[2020]267号)。

摘　　要：为了提升网络安全实践课程教学的创新性,根据实际工程项目需求,在校企融合背景下设计了一种基于IPSec VPN和SSL VPN的网络安全综合实验教学改革方案,并给出实现方法和过程。总部实验室与分部实验室使用IPSec VPN连接和完成通信,移动站点用户选择SSL VPN远程接入总部网络。通过加密的虚拟链路对内部网络数据进行安全保护,利用防火墙的安全策略对数据互通进行有效控制,同时增加堡垒机对用户进行必要的安全访问控制和行为监控。该网络安全架构已在上海总部和武威分部的实验室进行相应的部署和测试。这种设计营造了真实的实验环境氛围,注重实践教学的应用性,致力于培养学生解决实际工程问题和独立思考的能力。Based on the actual engineering project requirements,this paper designs a comprehensive network security case based on IPSec VPN and SSL VPN under the background of school-enterprise integration for enhancing the innovation of network security practical course teaching.Specific methods and processes of the case are given.It establishes a connection for secure communications between head quarter and branch by means of IPSec VPN,and the mobile site chooses SSL VPN to access to headquarter,remotely.It protects the internal network data safely through encrypted virtual link,and utilizes secure strategies of firewalls to control data communications,effectively,meanwhile,controls security access and monitors behaviors of users are guaranteed by adding a bastion host.This network security architecture has implemented and tested in Shanghai headquarter and Wuwei branch.The new design creates a real experimental environment for students,aims to cultivate their abilities of solving practical engineering problems,and think independently.

关 键 词：网络安全 加密技术 虚拟专用网络 产教融合 教学改革 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]