IPSEC (internet protocol security) VPN (virtual private network) device, isolation method thereof and isolation system thereof

Abstract

The invention provides an IPSEC (internet protocol security) VPN (virtual private network) device, an isolation method thereof and an isolation system thereof. The device comprises an inner end host, an outer end host and a non-network isolation card, the inner end host and the outer end host respectively maintain the same IP (internet protocol) mapping table, each table entry defines information such as a primary address, a destination address and IP mapping ID (identity), a data packet realizes network isolation by modes such as IP head stripping and recombination, IP mapping table search and filtering, private protocol capsulation and decapsulation and non-network isolation card transmission, an IPSEC VPN network data packet is encrypted and decrypted on an internal network host by the data packet, the device can resist malicious attack behaviors and transmission of viruses, Trojans and malicious plug-ins, security isolation in connection of an internal network and an external network is really achieved, higher-strength security protection for the internal network, the IPSEC VPN device and the network service data packet is realized, and the IPSEC VPN isolation device is high in security degree.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to IPSEC VPN equipment and its isolation method and system. Background technique [0002] IPSec is an open IP layer security framework protocol developed by the Internet Engineering Task Force, which provides transparent security services for IP network communications, protects TCP / IP communications from eavesdropping and tampering, and can effectively resist network attacks while maintaining ease of use. IPSEC technology has been widely popularized and applied to gateway devices. Using IPSEC tunneling technology, encryption technology and authentication technology, a virtual private network is built on the public network, and data is transmitted on a secure channel, so as to ensure communication security and confidential information. Purpose. [0003] Generally, IPSEC VPN equipment is deployed between the internal network and the external network. The IPSEC VPN equipm...

AI Technical Summary

Problems solved by technology

[0005] Based on this, it is necessary to provide a very effective IPSEC VPN device and its isolation method for the problem that the existing IPSEC VPN equipment cannot achieve very effective isolation protection. Some internal networks with high security requirements need isolation protection. And the system to meet the needs of some internal network isolation protection with high security requirements

Images