【摘要】 如何使得Internet网络同时具备网络级的移动性和较高的安全性已成为一个具有挑战性又十分有意义的重要问题.本文提出了一种综合移动网络或称网络移动(NEMO)协议与IPsec协议在网络层提供虚拟专用网(VPN)服务的优化网络构建方案,通过防火墙结构的配置解决了直接结合使用会遇到的协议不兼容问题,并在实际环境中进行了验证,实验结果证明了构建方案的有效性与可用性.性能分析表明该方法在为无线移动IP网络提供了高安全性的同时只引入了不到20%的负载压力,这对于安全性要求较高的VPN应用是十分重要的.更多还原

【Abstract】 The mobility and security of Internet are two of challenging and important issues.This paper proposes an optimize solution to integrate network mobility(NEMO) and IP security(IPsec) protocols for Virtual Private Network(VPN) services simultaneously.Compatible problems are solved by using IPsec over NEMO measure.The solution is implemented in our test-bed scenario and the results demonstrate the validity and usability of the proposed solution.Based on this realization,some performances analyses also show that with enhancing wireless/mobile IP network’s security this proposition only introdnces less than 20% overloads which is very important for high security level VPN application.更多还原