摘要： 针对网络安全需求以及软件加密算法效率低下的缺点,使用通信处理器MPC8260和安全处理器MPC180来设计实现了一款安全路由器。利用MPC8260的通信处理模块资源,设计包括多达3个快速以太、3个高速同步串行接口在内的多种路由器接口,而MPC180则提供硬件加密功能,解决软件实现VPN功能时效率低下的缺点。通过对设计的硬件平台的测试,表明设计的安全路由器能够满足中小企业虚拟私有网络(VPN)应用需求,具有较好的性能价格比。

关键词: 安全路由器, IPSec, 安全处理器

Abstract: To meet the challenge of line rate security, a design of security router using MPC180 and MPC8260 is accomplished. MPC8260 is a communications processor and MPC180 is a security processor that can interface to MPC8260s local bus gluelessly. The router provides up to three 10/100Base-Tx(Fx) interfaces, three high-speed serials and one channelled E1. All of the algorithms associated with IPSec,IKE and SSL/TLS are also implemented through MPC180. Test for the router shows that the throughput in various security algorithms can achieve more than 95% of the theoretic limits of MPC180.

中图分类号: 

• TP393