Abstract: By analyzing connection track and status packet inspection, a new mode of VPN processing based on connection track is put forward, which enables the strategy track to be related with connection time only. Thus, the VPN processing speeds up, preventing the occurrence of network bottleneck. And the status inspection on data packet strengths the security of VPN system.

Key words: VPN, Connection Track(CT), status packet inspection, IPSec

摘要： 通过分析研究轨迹跟踪和状态包检测技术，提出了一种基于轨迹跟踪的新的虚拟专用网(VPN)处理模式，使得策略查找只与连接次数有关，在一定程度上提高了VPN的处理速度，避免了网络瓶颈的发生，同时对数据包进行了状态检测，增强了VPN系统的安全性。

关键词: 虚拟专用网, 轨迹跟踪, 状态包检测, IP安全协议

CLC Number: 

• TP393