Method and device for realizing VPN automatic penetration by utilizing detection mechanism

Abstract

The invention relates to a method and a device for realizing VPN automatic penetration by utilizing a detection mechanism. The method comprises the steps of configuration and data package processing respectively, wherein the processes of data package treatment comprise the followings: when an IPSEC data package is sent, whether a tunnel quotes a VPN penetration port is checked, if the tunnel quotes the VPN penetration port, the data package is converted and sent out based on the configurated penetration port; when a VPN gateway system receives the data package, the processing method comprises the following two ways: if the data package is not the IPSEC data package, then normal system flow is carried out without converting the data packet; if the data package is converted IPSEC data package, then the converted IPSEC data package is converted to a normal IPSEC data package. The device used in the method for realizing VPN automatic penetration by utilizing the detection mechanism comprises a receiving module, a sending module, a conversion module, an automatic detection module and a penetration port usability configuration module (5). The invention can establish a VPN tunnel based on a service port opened in the network, and when the port is detected unopened, VPN communication can be carried out by switching to other ports, thus facilitating the establishment of the VPN tunnel to be more flexible, satisfying the requirement for establishing VPN communication under the condition that normal IPSec VPN can not communicate normally, realizing the load balancing of the tunnel.

Description

technical field [0001] The invention relates to a method and a device for realizing VPN automatic penetration by using a detection mechanism, and belongs to the technical field of network information security. Background technique [0002] A router is a computer system with multiple network interfaces. It receives data packets from the network, searches the routing table according to the source and destination of the data packets, and forwards the successfully searched data packets. Now enterprises and governments have large and small branches in different regions, and these branches have their own local area networks. But these networks are decentralized and need to be interconnected. Because the addresses of these LANs are all private addresses and cannot be routed through the Internet, interconnection cannot be achieved by relying on routers. [0003] The IPSec protocol has designed a framework and standards for IP security. IPSec virtual private network (VPN) is a tec...

AI Technical Summary

Problems solved by technology

[0004] 1. If the communication network between the gateways does not open the standard IPSec VPN service, the standard IPSec VPN cannot be established;

[0005] 2. Even if it is open, once the standard IPSec VPN service in the network is unstable, it will cause abnormal IPSec VPN communication;

Images