1007-53212003-0140-04VPN066004PPTPL2TPIPSecIPSecVPNVPN.VPNAHESPTP393.08A2002-101976.SecurityAnalysisofVPNLIUYa-kunYANGDing-caiYanshanUniversityOinhuangdao066004ChinaAbstractThisarticIeinvestigatesrepresentativetunneItechnoIogysuchasPPTPL2TPIPSec.ItfocusesonthesecurityofIPSeccomparesthesimiIaritiesanddiffer-encesbetweenIPSecandPPPanddescribeswideappIicationandprospectofVPN.KeywordsVPNtunneItechnoIogyAHESPVPN..VPN.VPN..OoS..120036Jun.200326JournaIofBeiingUniversityofPostsandTeIecommunicationsVoI.26Sup!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.PPPPPTPL2TP.PPTPVPNPPTPISP.PPTPIPPPP.PPTPWindowsNT4.0Windows98.L2TPPPTPCiscoL2FIayer2forwardingIP.L2TPPPPVPN.IPIPSec.IPSecIETFIPSec.IPV4IPV6IPIPAHIPESP.AHIPRSAAH.AHIP.IPIP.AHNextHeaderPayIoadLenReserVedSecurityParametersIndexSPIAuthenticationDataVariabIeNextHeader.ESPIP.2.IP.IP.ESPIPHeaderOtherHeaderESPHeaderEncrypteddataESPHeaderSecurityAssociationIdentifierSPI32bitsOpagueTransformDataVariabIeLengthESP32SPI...ESPAHAH2.AHIPIPHeaderAuthenticationHeaderESPHeaderIPHeaderData141VPNIPHeaderESPHeaderAuthenticationHeaderIPHeaderDataIPSec..IPSecIKEinternetkeyexchangeSecurityAs-sociation..IETFSOCKSVS.2VPNIPSecIPSecPPTP2.2.1IPSec2.2.PPTP.2.2L2TPPPTPIPXIP.IPSecIP.2.3PPTP.L2TP/PPTPPPP.IPSec.IPSec.3VPNVPNDDNVPNInternetInternet.VPN3VPNl2/3.4VPNVPN24l261VPNVPN.2OoSVPN.3VPNIntranetExtranet.4.5VPNIPSecIPSecVPN.VPNVPNVPN.VPNVPN.VPNVPN.1.VPNJ.200118237-40.2.VPNJ.200221685-91.3MartinWMurhammer.M.2000.4CaritonRDaris.IPSecVPNM.2002.5CaseyWiisanDeterdoak.M.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!2000.1393ServletServietJAVA2.0AppietAppietServiet.ServietCGIWEBServiet.ServietServietinit.CGI.CGIWeb.CGI.Servietava.Serviet.Serviet.1MartyHaii.ServietJSPM.2001.2.JSPM.2001.341VPN