非对称VPN体系研究

Study on Unsymmetrical VPN Model

首先分析了传统对称 VPN模型在集团或者行业用户模式中的局限性 ,然后提出非对称 VPN模型 ,它具有用户认证和访问权限控制、线路中继以及端到端的加密传输等功能 。

With the more and more applications of the Intranets, network and information security is a upmost concern for most industries today. Up till now, VPN has served as the primary sources of network security. Although the VPNs protect private networks, they limit the communications of subnets distributed in the corperate also. At first this paper analyses the limitations of symmetrical VPN which used in the envirement of mutiple subnets, and then puts forward a new module of unsymmetrical VPN with low cost, high package transform efficiency and functions of user authentication and access control. This module can be developed under the environment of Linux.