摘要： IPSec作为网络层的安全协议套件，是实现VPN的重要途径。在Linux系统下通过对网络部分代码的修改，可便捷地实现IPSec协议。该文描述了基于IPSec的VPN系统的结构和实现，并对系统的安全性进行了分析。

关键词: Linux, VPN, IPSec, CA, 攻击, IKE, 隧道技术

Abstract: IPSec can provide security service for traffic at the IP layer,and it is an important approach to implement VPN. IPSec can be implemented in Linux system through modifying codes in its network part. This paper gives an architecture and implementation of VPN based on IPSec through realizing IPSec in Linux system. And this paper also gives an analysis of its security.

中图分类号: 

• TP393.03