【摘要】 结合实例,探讨了在网关、宽带接入、xDSL等多种类型的Internet接入情况下,使用IPSEC技术实现VPN系统的一种方法;并针对拨号用户在建立VPN链路时采用静态密码而存在的诸多安全隐患,提出了令牌卡双因素认证与Windows AD认证方式相结合的工作机制,实现拨号用户的单点登录,提高了系统的灵活性和安全性。更多还原

【Abstract】 Combining with living examples and based on IPSEC,the realization of the VPN system was approached in many internet circumstances of remote access(such as gateway,broadband,xDSL etc.),and in view of the deficiency and the hidden troubles of the traditional static password,introduces a working mechanism was introduced which took into consideration both the tokencard two factor authentication and Windows AD,and proveds to be flexible and liable for the single-sign on clients.更多还原