CISP-06-密码技术应用(VPNSSL)

1VPN/SSL2008102VPNVPNVPNVPNVPN3§VPN§VPN§VPN4VPN5VPNVPNVPNVPNVPN61§1.1VPN§1.2   VPN§1.3VPN§1.4    VPN§1.5    VPN71.1VPN1VPN1232TCP/IP12381VPN1.1VPNcont.91.1VPNcont.1VPN2“”10§VPNISP§:VPN�1�2�3�41.1VPNcont.11���1.2    VPN121.3    VPN§�VPNVPNVPN§�VPNVPNVPN§�VPNVPNVPN13VPN§VPN�IPIPXAppleTalk§VPN�§VPN�HTTP��web14VPN151.4  VPN§VPNVPN�IPVPN�VPN§VPNVPN�VPNVPN�VPNVPN�VPN16VPN17VPNVPNVPNVPNVPN182.1  VPN§§§§§19§§VPN§VPNL2TPPPTPIPSecMPLSSSL20InternetVPNBAAH192.168.2.34258ESP192.168.2.34259ESP192.168.1.25257AH192.168.1.25256Security ProtocolDestination AddressSPI192.168.1.25BSPD192.158.2.34192.168.1.25SourceAddress…………OthersSecure Service192.168.1.25192.158.2.34Destination AddressISAKMP/OakleyIPESPESPAHIPIP192.168.2.34SADSAESPAHESPAHSecurity Protocol……………………Others110001101010KeySHA­12583DES CBC259DES CBC 4257MD5256AlgorithmSPIIPVPNASPDIPSASADSA2.2VPN21VPN22VPNVPNVPNVPNVPN233.1§VPN���AAA�24PSTNInternetInternet    Mail  DNS3.125~255SPIAHESPSA0SA1SAIP232—1SA3.1283.2§VPNQoSVPNQoS.293.3VPN§VPNVPN30VPN31VPNVPNVPNVPNVPN324VPN§§IPSec§SSL334.1§:�PPTPAscend3COM�L2FCiscoCisco�L2TPIETFAscendCisco3COM344.1cont.L2TP354.2    IPSec§IPSec1995IPSec§IPSec§InternetISAKMPIPSecISAKMPIPSec36IPSecIPESPAHDOI37AHvAHvvIPvIP38AHAH39ESPvAHESPIPv40§SSL (Secure socket Layer)X.509Web Server§SSLSSL§SSLwebInternet4.3   SSL41SSL§TCP/IPSSLTCP§SSL§SSLSSLSSLSSL4243SSL§DES§MAC§444.4 IPSecVPNSSL VPNIPSecVPNSSL VPN///web//IPHTTP/TELNET/NMTP/FTP//45VPN46VPNVPNVPNVPNVPN475    VPN§Intranet VPN§Extranet VPN§Access VPN485.1VPNvVPN“”vvVPN49InternetVPNAVPNBGatewayIPSecGatewayIPSecISPISP5.1VPN505.2VPN§§VPN§51InternetVPNAVPNBAIPSecIPSecISPISP5.2VPN525.3VPNvVPNISDNDSLVPNvVPNvVPN53InternetBISPVPNBIPSecGatewayIPSecPSTN5.3VPN54§:�VPN�VPN�VPN55