摘要
针对IPv6环境下IPSec实现VPN的复杂性,提出一种IPv6下直接基于Linux的IP封装来实现VPN的新体系框架,描述了扩展的IPIP报文结构和系统处理流程,并对直接基于IP封装的VPN和StrongSWAN实现之间进行了比较,得出新的系统在实现的结构上和性能上都具有较强的优势。
For the complexity of implementing IPSec VPN in IPv6 network environment, this paper proposes a more advanced VPN solution framework based on Linux IP encapsulation and discusses the extended IPIP packet format and system process. By analyzing the StrongSwan, the paper has drawn conclusion that the new VPN solution framework base on Linux IP encapsulation is superior to StrongSwan in implentation and performance.
出处
《通信技术》
2008年第6期139-142,共4页
Communications Technology
基金
惠州市科技计划基金项目(2006P42)
惠州学院科研基金项目(C206.0205)