基于IPsec对等部署方案的对端组播IPsec发现机制  

End-to-End Multicast IPsec Discovery Mechanism for Peer-to-Peer Deployment Scheme Based on IPsec

作　　者：高洋洋 易恒 周华明 GAO Yangyang;YI Heng;ZHOU Huaming(The 30th Institute of CETC,Chengdu 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《现代信息科技》2024年第15期6-9,共4页Modern Information Technology

摘　　要：随着网络技术的迅速发展,组播作为一种高效的数据传输方式,正在得到越来越广泛的应用,人们对其安全性的重视程度也越来越高。IPsec作为一种拥有很高实用性和可靠性的协议,越来越受企业和个人用户的欢迎。文章首先介绍了IPsec对等部署方案、无GCKS的组播密钥管理结构和对端网关发现机制,然后基于对端网关发现机制提出了一种适用于IPsec对等部署方案的对端组播IPsec发现机制,最后讨论了发现报文在实网中的路由问题并提出了解决方案。With the development of network technology,multicast,as an efficient data transmission method,is being used more and more widely,and people are paying more and more attention to its security.IPsec,as a protocol with high practicality and reliability,is becoming more and more popular among enterprises and individual users.This paper first introduces the IPsec peer-to-peer deployment scheme,the multicast key management structure without GCKS,and the end-to-end gateway discovery mechanism.Then,based on the end-to-end gateway discovery mechanism,it proposes an end-to-end multicast IPsec discovery mechanism suitable for the IPsec peer-to-peer deployment scheme.Finally,it discusses the routing problem of discovery packets in the real network and proposes a solution.

关 键 词：IPSEC 对等部署 网关发现 组播IPsec发现 

分 类 号：TN915.04[电子电信—通信与信息系统]