The Design And Implementation Of VPN Configuration Management

VPN is the network of point-to-point tunnels, where the tunnel is a Security Association (SA) between two security devices. The SAs just provide one-way tunnel, and if there are two devices need to communicate, two one-way tunnels should be created. Compared with the traditional network, VPN can establish the safe channel between two network devices, and enable the safe data access through VPN channel.This paper mainly involves configuration management development of VPN and realizes the VPN configuration management. Users can through VPN management create a VPN. There are two ways to create the VPN:Auto Tunnel VPN and Manual Tunnel VPN. Rich Internet Applications technology is used during finishing the project. The development technology of realizing the project is used ESTJS. The background server is embedded APPWEB server, and backstage technology is PHP. Equipment configuration information can be obtained by foreground, and the ESTJS show the information to the front desk. The configuration information will be organized to message and the message will be transmitted to the backstage PHP server. PHP configuration information will be checked in JUNOS system configuration file through JUNOSCIPT. PHP code configures the data, which checked by logic of page and format of data model, to the file through the commands of JUNOSCRIPT.Besides VPN Configuration Management, this paper also contains configuration management of Application Identification, Application Group management and Application Group. Large numbers of APPIDs and APPGs are provided for users, which can be modified and deleted according to demands of users, and users also can filter through the application of signature management of VPN networks to deliver information, which is called APPFW (Application Firewall).