Data transmission system with multi-segment accessibility and method thereof

Abstract

The invention relates to a data transmission system with multi-segment accessibility and a method thereof. The method comprises the following steps: a user executes a virtual private network client program set in an electronic system; the virtual private network client program is connected to a virtual private network router and sets a virtual network address of a virtual network module; and the virtual private network client program accesses a sub-segment corresponding to the virtual network address through the virtual network address. By adopting the data transmission system with the multi-segment accessibility and the method thereof of the invention, different segments can be accessed through change of the virtual network address, thus improving multi-session accessibility and connection resilience of a virtual private network.

Description

technical field [0001] The invention relates to a data transmission system and method with multi-network segment access, in particular to a data transmission system and method with functions of switching and accessing multiple network segments. Background technique [0002] At present, since a virtual private network (Virtual Private Network, VPN) is a major technical application that provides a secure and exclusive communication connection on the public and open Internet, the setting method of a virtual private network VPN is not easy for ordinary users to use . For users who must use virtual private networks, how to provide safe and convenient access to virtual private network connections has become an increasingly important issue. If the settings of application software are complicated and network resource access is subject to many restrictions It will cause great inconvenience to users. In order to simplify the setting of virtual private network, some products on the ma...

AI Technical Summary

Problems solved by technology

It can be seen from this that if a virtual private network can only provide access to a single network segment, it will bring great inconvenience to users. On a single network segment will also bring complexity and some security considerations to network management

[0004] The traditional Internet security protocol virtual private network application software using Microsoft Windows IPSecutility has another shortcoming in network address addressing, because the Internet security protocol channel (Tunnel) established by it is a direct correspondence Gateway (host-to-gateway) method, so the packet source address (Source IP Address) is the address of the computer using the application software itself, this kind of network address may be a public address (Public IP Address), when the user uses this application When the software establishes an Internet security protocol channel to connect to the enterprise network, this type of public address packet may be bypassed by the default routing plan (Default Routing) inside the network, resulting in performance delay problems (Network Latency), and may Because the internal firewall of the enterprise does not allow this type of packet to exist in the internal LAN, and then the packet is lost, causing network management problems

Images