Research And Implementation Of IPSec VPN Under IPv6 Based On Linux

Along with organizations scale extends and the branches of organizations expand continuously. The electronic commerce, electronic governmental affairs are put in practice, the information inside or outside the organization exchange very often. But the network security problem are more and more serious, how to protect the communications between organizations with the lowest expenses became the focus problem of organizations concern of. Currently ,the most popular solution is to establish a VPN(virtual Private Network)on Internet or other public networks. And IPSec has already become the primary standard of setting up VPN.The IPSec provided a transparent safety service for the IP layer, keeping TCP/IP communication from wiretapping or distort, resisting the network attack effectively, and offer safety guarantee to VPN implementation. This project put forward for the lacking of researches on IPSec VPN.Through deep research on IPSec protocols, implementation mechanism and the kernel structures of systems, and compare with three ways of implement IPSec into IPv6,we chose to integrate IPSec into Operation System (resource code opened). Launch a research to the StrongSwan on the Linux system, analyze the techniques of StrongSwan software and the successful experience of the applied IPSec in the IPv4.We put forward the method that the StrongSwan software integrate into Linux. And give two important solutions of Host to Host-cert and Road Warrior-cert. Explaining how to create CA by detailed configure orders.