摘要： 传统远程接入配置机制存在交互时间长、安全性不强、访问控制难、远程接入服务器负担重等缺陷。该文在最新的IKEv2的基础上，将CP载荷与DHCP机制有效结合，实现远程接入用户的自动配置。实验表明，该机制提高了远程接入效率和安全性，增加对用户身份的识别以及基于用户组的分配策略，为进一步的访问控制提供了便利。

关键词: IPSec协议, 远程接入, VPN网络, 配置机制, IKEv2协议

Abstract: Traditional remote access configuration mechanism has the following shortcomings: interactive time is long, security is not strong, access control is difficult, the burden of remote access server is heavy and so on. Basing on the newest IKEv2, this paper combines CP payload with DHCP mechanism and implements automatic configuration of remote access client. Experiment shows that the improved mechanism improves efficiency and security of remote access and makes advanced access control easier by adding to user identification and allocation strategy which is based on user group.

Key words: IPSec, remote access, VPN, configuration mechanism, IKEv2 protocol

中图分类号: 

• TP393