A kind of ipsec VPN gateway data processing method

Abstract

The invention relates to the field of communication safety, in particular to a method for automatically configuring an IPSec policy of an IPSec VPN. The technological problem needing to be solved is to provide a method for processing IPSec VPN gateway data. According to the method for processing the IPSec VPN gateway data, a network and service which are protected by each IPSec VPN gateway only need to be configured, information of an information issuing center is configured, and interconnection and interworking among networks protected among the IPSec VPN gateways can be achieved. According to the method for processing the IPSec VPN gateway data, through communications of an information issuing server, the IPSec VPN and the like, the policy configuration of the IPSec VPN gateways is simplified, the information of the network / service and information issuing service protected by each IPSec VPN gate only needs to be configured, and interconnection and interworking among the networks protected among the IPSec VPN gateways can be achieved. The method for processing the IPSec VPN gateway data is applied to the field of data communication safety.

Description

technical field [0001] The invention relates to the field of communication security, in particular to an IPSec VPN automatic configuration method for IPSec policies. Background technique [0002] IPSec (Internet Protocol Security) is a network transmission protocol suite (a collection of interrelated protocols) that protects the IP protocol (a collection of interrelated protocols) by encrypting and authenticating IP protocol (Internet Protocol) packets to provide end-to-end public and private networks. Encryption and authentication services. [0003] IPsec consists of two major parts: (1) Key exchange protocol for establishing secure packet flow; (2) Protocol for protecting packet flow. The former is the Internet Key Exchange (IKE) protocol. The latter includes Encapsulating Security Payload Protocol (ESP Protocol) or Authentication Header Protocol (AH Protocol) protocol for encrypted packet flow, which is used to ensure data confidentiality, source reliability (authentica...

AI Technical Summary

Problems solved by technology

[0008] Since the headquarters and branches form a mesh network structure, and there may be internal LANs of a certain scale in the headquarters and branches, each IPSecVPN gateway may need to pack and configure the network information of other gateways, including other gateways The IP address of the network, the intranet addresses protected by other gateways, and even the addresses and ports of a series of intranet services protected by other gateways, and policies need to be configured based on these information and the network information protected by this gateway, and once a certain network Or the service changes, and the related IPSecVPN gateway needs to modify the corresponding policy. In this case, the configuration of the policy will be quite cumbersome and error-prone, resulting in network failure and affecting the network services provided by the IPSecVPN gateway.

Images