联想网御VPN系统产品白皮书联想网御科技(北京)有限公司版权信息©版权所有2001-2008,联想网御科技(北京)有限公司本文档中出现的任何文字叙述、文档格式、插图、照片、方法、过程等内容,除另有特别注明,版权均属联想网御科技(北京)有限公司所有,受国家有关产权及版权法保护。如何个人、机构未经联想网御科技(北京)有限公司的书面授权许可,不得以任何方式复制或引用本文档的任何片段。商标信息联想,网御,Legend,Lenovo,leadsec等标识及其组合是联想网御科技(北京)有限公司拥有的商标,受商标法和有关国际公约的保护。第三方信息本文档中所涉及到的产品名称和商标,属于各自公司或组织所有。联想网御科技(北京)有限公司LenovoSecurityTechnologiesInc.北京市海淀区中关村南大街6号中电信息大厦8层1000868/FZhongdianInformationTowerNo.6ZhongguancunSouthStreet,HaidianDistrict,Beijing电话(TEL):010-82166999传真(FAX):010-82166998技术热线(CustomerHotline):400-810-7766,010-82167766电子信箱(E-mail):infosec@lenovo.com公司网址:目录引言...........................................................................................................................................................5第一章VPN技术概述............................................................................................................................61.1企业网络互联的基本安全要素.....................................................................................................61.2VPN技术基础................................................................................................................................61.2.1隧道技术..........................................................................................................................71.2.2密码技术..........................................................................................................................71.2.3网络访问控制技术..........................................................................................................81.3IPSECVPN网络安全体系.............................................................................................................81.3.1IPSec的优势........................................................................................................................81.3.2IPSec的原理........................................................................................................................91.3.3IPSec的实现方式..............................................................................................................101.3.4IPSec与NAT协同工作.....................................................................................................11第二章联想网御VPN产品特点.........................................................................................................122.1完备的VPN系统.........................................................................................................................122.2全面支持IPSEC协议标准...........................................................................................................122.3支持最新的NAT穿越(NATT)协议.......................................................................................122.4集成SSLVPN接入功能.............................................................................................................122.5集成完善的防火墙功能...............................................................................................................132.6...