GRE-over-IPsec vPN工程设计及实现——基于合肥百大集团网络的VPN应用

GRE-over-IPsec VPN Design and Implementation：Hefei Baida Group Network Based VPN Application

人类社会已经进入21世纪，计算机信息网络已深入到世界的各个角落，地域、国家、政府、企业甚至家庭。计算机网络的飞速发展给人来带来了诸多便利，而然其潜在的网络信息安全威胁也弥漫在各个领域。探讨的VPN技术则是建立在GRE over IPSec技术之上，并通过合肥百大集团的网络拓扑对其进行设计与仿真。GREoverIPSecVPN技术是通过GRE与IPSec相结合，而形成的一种安全性更好VPN技术，其主要借用IPSec的安全加密和GRE支持多播的优点，从而使得VPN网络更加安全。该项技术的主要工作原理：将一个完整的组播、广播数据包或非IP数据包封装在一个单播数据包（IPSEC）里，以处理如OSPF的组播或RIP的广播数据流，以完成在IPSec隧道里通信实体之间的动态路由学习。

The human society has entered the 21st century, and the computer information network has penetrated every corner of the world, regional, state, government, businesses and even ~amihes. The rapid development of computer networks has brought much convenience to people, and then the potential security threat network information filled in the various fields. VPN technology is built on top of GRE over IPSec technology, and through Hefei Baida Group to design their network topology and simulation. GRE over IPSec VPN technology is through the coml~ination of GRE and IPSec, and the formation of a better VPN security teShnology, its main borrowing GRE IPSec encryption and security advantages of multicast support, which makes the network more secure VPN. The main working principle of the technology： a complete multicast, broadcast packets or IP packets are encapsuIated in a unicast packet （IPSEC） in order to deal with, such as OSPF or RIP broadcast multicast data streams to com- plete the communication entities in the IPSec tunnel between the dynamic routing study.