安徽中澳科技职业学院毕业设计(论文)基于IPSecVPN网络的规划与设计学生姓名:系部:信息技术与艺术传媒系专业:12级计算机网络技术指导教师:日期:2014年6月摘要目前,TCP/IP几乎是所有网络通信的基础,而IP本身是没有提供“安全”的,在传输过安徽中澳科技职业学院程中,IP包可以被伪造、篡改或者窥视。针对这些问题,IPSec可有效地保护IP数据报的安全,它提供了一种标准的、健壮的以及包容广泛的机制,可用它为IP及上层协议(如UDP和TCP)提供安全保证。目前许多电信运营商采用IPSec隧道加密技术,在宽带业务的基础上推出主要针对商用客户的VPN新业务,为商用客户既提供了高带宽低资费的企业网络联网服务,又提供了在公用网络上拥有私有VPN网络的数据传输安全保障服务,赢得了广大商用客户的青睐。本文将研究IPSec体系结构、技术原理和VPN基本技术,分析了IPSecVPN的主要实现方式。关键词:IPSecvpn,加密,隧道,安全。AbstractCurrently,TCP/IPnetworktrafficisalmostallofthefoundation,andIPitselfdoesnotprovide"security",inthetransmissionprocess,IPpacketscanbeforged,altered,orpryingeyes.Tosolvetheseproblems,IPSeccaneffectivelyprotectthesecurityofIPdatagrams,whichprovidesastandard,robustandinclusivemechanisms,canuseitfortheIPandupperlayerprotocol(suchasUDPandTCP)toprovidesecurityguarantees.ManytelecomoperatorsusingIPSectunnelencryptiontechnology,onthebasisoftheintroductionofbroadbandservicesforbusinesscustomersVPNmajornewbusiness,bothforcommercialcustomerstoprovideahigh-bandwidthnetworkwithlowratesofenterprisenetworkservices,alsoprovidedinthepublicnetworkhasaprivateVPNnetworkdatasecurityservices,wonthemajorityofcommercialcustomers.ThispaperwillstudythearchitectureofIPSec,VPNtechnologyprinciplesandbasictechnology,analyzesthemainwaytoachieveIPSecVPNKeyword:IPSecvpn,Encryption,Tunnel,Security。目录引言......................................................................................................................................................................1第1章VPN的概述............................................................................................................................................11.1VPN的基本概念...................................................................................................................................11.2VPN的类型...........................................................................................................................................21.2.1RemoteAccessVPN(远程访问虚拟专用网)...............................................................................2安徽中澳科技职业学院1.2.2IntranetVPN(企业内部虚拟专用网)...........................................................................................21.2.3ExtranetVPN(外连虚拟专用网).................................................................................................21.3VPN的相关技术....................................................................................................................................21.3.1典型的隧道技术协议.................................................................................................................31.3.2隧道协议的比较分析..................................................................................................................31.4VPN技术的优点....................................................................................................................................41.4.1安全保障.................................................................