VPN在企业网中的规划与实现

本科毕业论文题目：VPN在企业网中的规划与实现学院：班级：姓名：吉九学指导教师：职称：完成日期：2016年5月23日本科毕业论文-I-摘要当前互联网技术快速而高效的发展，通过电子商务进行办公成为各级单位和企业的办公方式，各个企业和政府都允许各自的分支机构访问自己的内部资源，以此来加强了解和方便办公。但是这一种信息交流使网络更加复杂,而且安全性也非常差,管理也不方便。目前比较主流且昂贵的组网方式有专线组网方式。它是通过同步数字体系将企业和政府单位连接到公用网络来实现点到点的通信。虽然这一种组网方式它的保密性比较强，独享带宽，传输快，不被其他信号干扰。但是花费太大,许多企业不能负担起这么高的费用,但是花费太大,许多企业不能负担起这么高的费用,VPN技术是通过在互联网上建立自己的私有网络，换言之,就是在公网上虚拟出一条专网,这样既让服务质量得到保证,也提高了安全性和专用性,同时也节省了公司的开支。组建虚拟专用网是利用互联网的大量资源，为企业和政府的重要数据提供可用带宽传输数据。VPN的组网方式有两种可以分为点到点的虚拟网络和远程访问方式。当前比较主流的接入方式有IPSEC。在本论文中，通过对VPN技术的基本了解和配置，比较了几种不同的虚拟专用网配置方式和优缺点。对加密认证，密钥管理，身份认证技术加以实现和验证。当前配置环境是在微软2003操作系统上配置服务器。通过在服务器添加用户名和密码，实现远程VPN访问。论文中也涉及了一部分电力系统中组建VPN的相关知识。当然本论文只是对企业中的VPN进行了简单的规划与实现，这与实际中的企业VPN来说，是远远不够的。但是通过在模拟环境下配置VPN，对企业VPN组网有了深入的了解。这对于以后在实际情况中组建VPN网络起到了很大的作用。关键词：企业；IPsecVPN；安全；数据加密VPN在企业网中的规划与实现-II-AbstractAtpresent,andhighspeedandrapiddevelopmentofInternettechnologyinChina.Officebecomeunitsatalllevelsandenterprisesthroughtheelectroniccommerceintheoffice.Branchcompaniesandthegovernmentwillallowtheiraccesstotheirinternalresources.Inordertostrengthentheunderstandingandconvenienceofoffice.Butthiskindofinformationexchangemakesthenetworkmorecomplex,andthesecurityisalsoverypoor,themanagementisnotconvenient.Atpresent,therearemoremainstreamandcheaperwayofnetworking.Itisthecommunicationenterprisesandgovernmentunitsconnectedtothepublicnetworktoachievepoint-to-pointthroughsynchronousdigitalsystemWhilethiskindofnetworkmodeitsconfidentiality,exclusivebandwidth,transmissionisfast,withouttheinterferencebyothersignals.Butcoststoomuch,manycompaniescan'taffordsuchahighcost.VPNtechnologyisthroughtheInternettobuildtheirownprivatenetwork,inotherwords,ItisavirtualprivatenetworkbulidedontheInternet,suchalreadylettheservicequalityguaranteed,alsoimprovesthesecurityandspecificity,butalsosavethecompany'sexpenses.SetupavirtualprivatenetworkistousealargenumberofdatatousetheInternetandvideoresources,fortheenterpriseandthegovernment'simportantdataprovidetheavailablebandwidthtotransmitdata.TherearetwomainwaysofVPNnetworkcanbedividedintothepoint-to-pointvirtualnetworkandremoteaccess.ComparingthecurrentmainstreamwayofaccessingaIPSEC.Inthispaper,throughthebasicunderstandingofVPNtechnologyandconfiguration,comparedwithseveraldifferentvirtualprivatenetworkconfigurationandadvantagesanddisadvantages.Encryptionandauthentication,keymanagement,identityauthenticationtechnologytoachieveandverify.ThecurrentconfigurationenvironmentisconfiguredontheMicrosoft2003operatingsystem.ByaddingausernameandpasswordontheservertoachieveremoteVPNaccess.PaperalsocoveredpartofthepowersystemintheformofVPN.ofcourse,thispapercarriedonthesimpletotheenterpriseVPNplanningandimplementation,ithastodowiththeenterpriseactualVPN,itisnotenough.ButthroughtheVPNconfigurationinasimulatedenvironment,totheenterpriseVPNnetworkhavein-depthunderstanding.ForthelatersetupVPNnetworkinpracticehasplayedabigrole.KeyWords：company；IPsecVPN;security;dataencryption本科毕业论文-III-目录摘要.....................................................................................................................................IAbstract...................................................................................................................................II引言....................................................................................................................................1第一章综述...........................................................................................................................21.1VPN技术概述.............................................................................................................21.1.1VPN的产生背景..............................................................................................21.1.2VPN的特点......................................................................................................21.2VPN的分类.................................................................................................................31.2.1按VPN的业务类型划分................................................................................31.2.2按所用设备类型划分......................................................................................31.2.3按VPN的业务类型划分................................................................................31.3VPN的相关技术及协议.............................................................................................41.3.1VPN关键技术..................................................................................................41.3.2VPN的基本协议..............................................................................................5第二章VPN方案设计.........................................................................................................112.1IPsecVPN与SSLVPN的比较...............................................................................112.2IPsecVPN简述.........................................................................................................112.2.1IPsecVPN加密算法......................................................................................112.2.2IPsecVPN安