基于IPSec 的VPN 模型采用傳輸加密報文的形式，實現(xiàn)了企業(yè)重要數(shù)據(jù)的安全共享。網(wǎng)絡(luò)復(fù)雜性的增加以及一些高端的網(wǎng)絡(luò)應(yīng)用需求已迫使對VPN 的模型做優(yōu)化改造，引入策略管理和策略授權(quán)協(xié)議，設(shè)計基于策略服務(wù)協(xié)議的隧道模式的 VPN 安全網(wǎng)關(guān)模型，成功的實現(xiàn)了高端網(wǎng)絡(luò)對訪問控制與審計、動態(tài)IP技術(shù)以及WLAN 的需求，提高了網(wǎng)絡(luò)安全管理的效率。
關(guān)鍵詞：策略協(xié)議；CA；VPN 網(wǎng)關(guān)；隧道
Abstract: In the form of encrypted messages, the VPN model based on IPSec realizes secure share of the primary data among enterprises. The increased complication of the network has entailed optimization and transformation of the traditional model of VPN. By introducing policy management and policy authorization protocols, and devising the secure gateway model based on the tunnel model which adopts policy service protocols, it has successfully fulfilled the demands of the advance network for access control, auditing, dynamic IP
techniques and WLAN, and accordingly enhanced the efficiency of the network security management.