The Study And Implentation Of Automatic Test Program For IPSEC VPN

With further informatization of the field of health, especially the disease control system in our province and the increasing size of network applications, the users are increasingly widespread, and partners are growing. Under these circumstances, the fixed-location-based special line connection of the traditional network is difficult to adapt to the needs of the informatization of the disease control system. To ensure the flexibility, security, cost-efficiency, scalability and other requirements within the network, the implementation of the VPN system becomes the optimal choice for the disease control system to build the disease control network in our province.At present, the relatively common VPN technologies include IPSec VPN, SSL VPN and MPLS VPN. IPSec VPN is directly accessed (non-proxy mode) through setting up the tunnel between two sites to achieve transparent access to the entire network. It realizes data encryption and authentication in the network layer to provide access control, data source authentication, integrity authentication of connectionless data, confidentiality of data content, anti-replay protection, confidentiality assurance of the limited data flow and other services. Compared to the other two methods, it is more suitable for the existing business applications in our system.The IPSec VPN technology is able to provide good security; however, with the continued expansion of access terminal, its maintenance pressure is increasing, and the complexity of its work is increasingly higher when new equipments are connected. In order to safeguard the normal operation of the network, a good automated testing tool is essential. Currently, the specific testing software for the IPSec VPN system is insufficient. The automated testing tool studied by this topic is developed to solve this problem.This paper introduces the IPSec-related technologies, including the architecture, related protocols and working principle of the IPSec system. Through the introduction of related technologies, it reveals the working principle of IPSec VPN and the work done during the tunnel setup.In the specific software design phase, the topic adapted the socket protocol and library file provided by the Linux system and designed a tunnel setup program. Then, taking advantage of the simulation program of NS-2 network, it conducted the tunnel capacity test, the tunnel setup rate test, and performance test.Finally, this paper used the tool to conduct the field test on the DUT devices randomly. By means of the study of this paper, it will greatly enhance the maintainability of public health IPSec network in our province.