摘要： 提出了一种基于层化IPSec的VPN方案。该方案采用层化IPSec保护机制,对数据报不同部分进行区分,提供不同的安全服务,满足新出现的诸如流量工程、QoS、流量分析等应用和服务;在此基础上通过模块化方式设计的VPN模型,不但有利软件与嵌入式实现,而且还可以大幅度降低构建VPN的成本和周期。

关键词: 层化IPSec, 虚拟专用网, 安全关联

Abstract: A layering IPSec VPN scheme is proposed. A mechanism of layering IPSec is adopted in the scheme in which the IP data gram is divided into different zones to provide relevant security services for meeting many new emerging applications and services, such as traffic engineering, QoS, traffic analysis, and so on. On the basis of the layering IPSec idea, a VPN model is designed by module ideas not only to be favorable for software and embedded implementation, further reduce the cost of VPN as well.

中图分类号: 

• TP393.08