A VPN Solution Based on IPSec and MPLS

郑刚,周源远,张福炎

DOI: https://doi.org/10.3969/j.issn.1001-3695.2003.10.030

2003-01-01

Abstract:This paper explores the advantages and disadvantages of IPSec VPN and MPLS VPN according to VPN requirements, and puts forward a VPN solution integrated with IPSec and MPLS, which is aimed to get the advantages of the two techniques.

What problem does this paper attempt to address?

Solution to VPN and Authentication System

LI Jian-jun,XU Duan-qing,GUO Wei-qing

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.09.068

2005-01-01

Abstract:Combining with living examples and based on IPSEC,the realization of the VPN system was approached in many internet circumstances of remote access(such as gateway,broadband,xDSL etc.),and in view of the deficiency and the hidden troubles of the traditional static password,introduces a working mechanism was introduced which took into consideration both the tokencard two factor authentication and Windows AD,and proveds to be flexible and liable for the single-sign on clients.
Solution of VPN on MPLS Backbone Networks

赵鹏,罗平,刘蓓洁

DOI: https://doi.org/10.3321/j.issn:0372-2112.2002.z1.027

2002-01-01

Abstract:Currently, most VPNs are based on Internet Protocol which has disadvantages in speed, expansibility and quality of service etc. Accordingly, we bring forward a solution of VPN on Multiprotocol Label Switching (MPLS) backbone network. We introduce Certificate Authority (CA) in this solution because both MPLS and IPSec haven't made a clear definition of authorizing identity. Taking advantages of MPLS in transporting efficiency, authorizing identity by CA, exchanging keys by Internet Key Exchange Protocol (IKE) and encrypting data by IPSec protocol, we construct a secure and efficient VPN on MPLS backbone network. Furthermore, we describe the realization of every component of MPLS VPN in detail.
VPN Test System Based on IPSec Network Protocol

陆敏锋,平玲娣,李卓

DOI: https://doi.org/10.3969/j.issn.1000-3428.2010.03.051

2010-01-01

Abstract:Aiming at the problem that the IPSec-based VPN product, this paper designs and achieves a IPSec-based VPN test system running on the Linux platform. This paper introduces the IPSec protocol and its architecture, and presents the design and achievement of the test system through analyzing the principle of the IPSec protocol. Experiment result shows that this test system is feasible and effective.
Virtual Private Networks Constructed by the Combination of IPSec & L2TP

朱昌盛,余冬梅,王庆梅,谢鹏寿,包仲贤

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.11.041

2002-01-01

Abstract:The advent of VPN makes it possible for enterprises to transform private confidential massage securely and economically through the Internet. Security tunneling technology is the core technology of VPN, while L2TP IPSec are two tunneling technologies most widely used at present. As the two main accesses to IP network, the combination of L2TP IPSec can share the advantage of L2TP's low cost, initiative, mutual-communication and IPSec's high security, reliability，learn from others' strong points to offset one's weakness, to a great extent, to construct a secure, reliable and low-cost VPN.
Application of IPSec Technique to VPN

马淑萍,阳小华,李海燕

DOI: https://doi.org/10.3969/j.issn.1673-0062.2004.02.018

2004-01-01

Abstract:In current VPN applications,IPSec-based VPN is followed with great interests.This paper analyzes safe system structure,implementation strategy of IPSec and problems needed to pay attention to.Some integrated solutions to realize VPN are also provided.
Research on MPLS-based Layer 2 VPN

PAN Pei-sheng,ZHENG Bao-yu

DOI: https://doi.org/10.3969/j.issn.1005-7641.2006.07.010

2006-01-01

Abstract:VPN has been a popular network technology in recent years.By VPN the enterprise can establish conveniently its own private network through public networks.As a platform,MPLS can support different link layer technologies and different layer 3 protocols,fuse the existing mainstream network technique, avoid the repetition of network,insure the security of IP operation.In this paper,the difference between MPLS L2 VPN and other traditional VPN technology is described,and then the realizing principle of MPLS L2 VPN is introduced in detail.Finally,the developing trend of MPLS L2 VPN is foreseen.
VPN Implementation Based on IPSec in Linux

周立峰,周昕,金志权

DOI: https://doi.org/10.3969/j.issn.1001-3695.2002.05.021

2002-01-01

Abstract:In this article, we present some rationale and key technology relevant to the im plementation of VPN based on IPSec, then two kinds of typical implementation are described.
IPsec Security Policy Oriented VPN Performance Evaluation Model

顾文婷,潘雪增,楼学庆,郑斯琦

DOI: https://doi.org/10.3778/j.issn.1002-8331.2009.36.023

2009-01-01

Computer Engineering and Applications Journal

Abstract:The complex semantics of IPsec policies increase the difficulty of VPN performance evaluation,lack of framework in performance analysis of IPsec VPN cannot guarantee the effectiveness of evaluation,to solve this issue,a model of VPN performance evaluation based on IPsec security policy is presented.The model constructs a flexible VPN environment,maintains a volume of IPsec security policies which set the measure to VPN performance,compiles statistics in parallel based on concurrency control of multi-thread.At last,experiment is carried on to verify the reliability and the feasibility of this model.
A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Yan Shen,Qi-fei Zhang,Ling-di Ping,Yan-Fei Wang,Wen-juan Li

DOI: https://doi.org/10.1109/trustcom.2012.41

2012-01-01

Abstract:In the existing large-scale performance test of IPsec tunnel, it often needs special software and hardware. To solve the problem, this article proposed a new method, in which packet was encapsulated in user space, and a multi-tunnel controller was designed and implemented with the method of FSM(finite state machine), which controlled the negotiation and establishment of multiple tunnel, including L2tp, IKEv1, IKEv2, IKEv2+EAP and L2tp Over IPsec. Libpcap was used as the bottom layer driver of package, and the application of zero copy technique had reduced system cost immensely. At last, the result of the experiment verified the performance of the IKEv1 tunnel on Tunnel-mode and Transport-mode.
Design and Implementation of Enterprise Information Network Based on MPLS VPN

Duan Quan

Abstract:The advantages and disadvantages of MPLS VPN over traditional VPN are compared. The methods using MPLSVPN technology interconnecting all branch offices and factories across regions through an enterprises network are described. With reduced networking complexity and cost, MPLS VPS provides the capability to deliver private network services over a shared infrastructure.

Computer Science,Engineering
Design of implementation of MPLS VPN security

AN Ji-yong,XIA Shi-xiong

DOI: https://doi.org/10.3969/j.issn.2095-6835.2010.27.018

2010-01-01

Abstract:By analyzing MPLS VPN can not fully ensure security and integrity of data and it’s difficult to access to VPN for the mobile user. Taking advantage of MPLS VPN and IPSec VPN, and forwarding a new project of IPSec based MPLS VPN and IPSec VPN based CE device for ensuring data security and accessing to VPN for mobile users. The project can share the advantages of IPSec’s high security and mobility and MPLS’S high speed switching, QOS guarantee and flow engineering as well as expand ability.
Two Stronger Solutions of Remote Access VPN

梁健,李建华,石荣

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.09.097

2002-01-01

Abstract:At present, remote access VPN is mainly on the base of L2TP protocol and IPsec protocol. But both of them have some shortcomings. This article gives a particular analysis on them and puts forward two stronger solutions, L2TP/IPsec solution and an IKE solution based on PKI and hybrid authentication.
A Solution of Dynamic Alliance Oriented Enterprise VPN

朱祥飞,张申生,顾翊

DOI: https://doi.org/10.3321/j.issn:1002-8331.2003.07.067

2003-01-01

Abstract:This paper describes the IPSec standard firstly,especially on IKE and its defects.Then,to satisfy the agility of the dynamic alliance of modern enterprises,the paper proposes a new VPN solution,which manages and exchanges keys by enterprise CA.The main procedures are presented and merits and defects are discussed.
Research on Key Technology of VPN Centralized Management Based on SNMP

黄勇,陈小平,潘雪增,陈红洲,蒋晓宁

DOI: https://doi.org/10.16208/j.issn1000-7024.2008.09.057

2008-01-01

Abstract:Under the WAN environment,large-scale VPN networks is effectively and safely managed by long-distance centralized mana-gement system based on SNMP.To solve the flaw of topology discovery,a method in which agent initiates registry to the server is pro-posed.After analysis of the SNMPv3 security features,the public key authentication mechanism is introduced and the procedure of key negotiation is discussed in detail.For poor reliability and real-time data transmission of UDP-based SNMP,a strategy of configuration based on XML is given,which is proved to be feasible and efficient by the result of experiment at last.
Implementation of Virtual Private Network Based on Ipsec

伊萨姆,肖石林,曾庆济

DOI: https://doi.org/10.3969/j.issn.1002-5561.2004.04.012

2004-01-01

Abstract:this paper is a brief introduction of fundamentals and implementations of the virtual private network (VPN),a comparison between characteristics and technologies of the traditional and based on IPsec VPN.Through studying IPsec, we presented a method of designing end-to-end VPN system based on combined SA of IPsec, and analyzing of its security.
A Novel Approach to Improve the Performance of MPLS-based VPN

YH Geng,Q Sun,YZ Chen,NH Yu

DOI: https://doi.org/10.1109/korus.2004.1555266

2005-01-01

Abstract:The IP-based virtual private network (VPN) technology is now becoming a good solution for the delivery of future Internet services, and multiprotocol label switching (MPLS) technology is being adopted to offer VPNs and some value-added applications on top of VPN transport networks. In this paper, we proposed a novel approach based on using label stack properly to reduce the label size efficiently. In this way, the performance of MPLS-based VPN can be improved. Our simulation results validated our approach, demonstrating that MPLS-based VPN established by our approach has a better performance.
The research of VPN security gateway based on IPSec

Zhao Ling

Abstract:This paper is the research of security gateway that can set up a Virtual Private Network(VPN),the gateway adopts IPSec protocol as the security protocol of the network layer.Firstly,introduces the concept of VPN and its critical techniques;Secondly,describes the key technique to implement VPN security gateway—IPSec and its architecture,working mode and implement structure; Finally,analyzes the important role of security gateway in VPN system in detail.

Engineering,Computer Science
Implementation of Provider Edge Router in MPLS VPN

朱斌,陈文正,张朝阳

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.11.049

2003-01-01

Abstract:This article introduces the architecture and working theory of MPLS VPN. Specially, it emphasizes the implementation of provider edge router in MPLS VPN.
A VPN Model Based on IP Encapsulation

Zhitang Li,Song Mei

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.08.014

2001-01-01

Abstract:This paper first introduces IPSec protocols,discusses the complexity to achieve IPSec,and analyses the theory of IP-in-IP tunneling encapsulation in Linux.Then it presents one VPN solution based on Linux IP encapsulation.
A MPLS and VPN Based Egovernment System

Yongming Wei,Zhiyi Fang,Zhiming Dai,Xiao Han,Fengyuan Xu

DOI: https://doi.org/10.1109/cic.2006.12

2006-01-01

Abstract:This paper analyses the technology of Virtual Private Network (VPN) and Multi Protocol Label Switch (MPLS), introduce the principles and characteristic of MPLS, especially network hierarchy framework theories of MPLS VPN, and implementation in an eGovernment System.

A VPN Solution Based on IPSec and MPLS

Solution to VPN and Authentication System

Solution of VPN on MPLS Backbone Networks

VPN Test System Based on IPSec Network Protocol

Virtual Private Networks Constructed by the Combination of IPSec & L2TP

Application of IPSec Technique to VPN

Research on MPLS-based Layer 2 VPN

VPN Implementation Based on IPSec in Linux

IPsec Security Policy Oriented VPN Performance Evaluation Model

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Design and Implementation of Enterprise Information Network Based on MPLS VPN

Design of implementation of MPLS VPN security

Two Stronger Solutions of Remote Access VPN

A Solution of Dynamic Alliance Oriented Enterprise VPN

Research on Key Technology of VPN Centralized Management Based on SNMP

Implementation of Virtual Private Network Based on Ipsec

A Novel Approach to Improve the Performance of MPLS-based VPN

The research of VPN security gateway based on IPSec

Implementation of Provider Edge Router in MPLS VPN

A VPN Model Based on IP Encapsulation

A MPLS and VPN Based Egovernment System