摘要： 随着Internet及网络经济的快速发展，企业在网络的安全性等方面提出了更高的要求，虚拟专用网(VPN)以其安全性好、成本低等优势赢得了越来越多企业的青睐。IP层安全协议(IPSec)能很好地实现VPN，但是基于IPSec的VPN的网络服务质量不能满足用户的需求。针对此问题，文章提出了用区分服务(DiffServ)来实现IPSec隧道的服务质量保障的方案，这样IPSec隧道就可以根据不同的需求提供不同的网络性能。文章深入研究了区分服务和IPSec隧道技术，通过实验进一步证明了该方案的可行性和优势。

关键词: 虚拟专用网, IP层安全协议, 服务质量, 隧道, 区分服务

Abstract: With the fast development of Internet and network economy, enterprises have put forward higher request in security of the network. Virtual private network ( VPN) wins the favors of enterprise more and more by its low cost and security . Although IPSec can realize VPN very well, Quality of service (QoS) based on IPSec can not meet enterprise's need. To this question, the article proposes a standpoint by using differentiated service to guarantee QoS on IPSec tunnel. Thus, tunnel can provide different performance of network for different request. The paper studies Diffserv and IPSec, furthermore, it proves its feasibility and advantage through experiment.

中图分类号: 

• TP393