网络加密通信设计

Network Encryption Communication

保密机能够保证数据在广域网的安全传输,去掉保密机后造成了数据直接暴露在网络内,造成了很大的安全隐患,通过使用ACL、CHAP认证、IPsec技术设计一种可以暂时替代保密机的方法。实验表明综合使用ACL、CHAP认证、IPsec技术能够在一定程度上替代保密机,保障数据在网络中的安全传输。

Confidential machine can ensure the secure transmission of data in the WAN, if it is removed, it will cause the data directly exposed to the network, and result in a lot of security risks. The paper designs an equipment to temporarily replace the confidential machine by using ACL, CHAP authentication and IPsec technology. Experiments show that the combined use of ACLs, CHAP authentication and IPsec technology can replace the security machine to a certain extent, and safeguard the secure transmission of data in the network.