?9? VPN??(?) - PowerPoint PPT Presentation

Loading...

PPT – ?9? VPN??(?) PowerPoint presentation | free to download - id: 5e157b-M2U3M



Loading


The Adobe Flash plugin is needed to view this content

Get the plugin now

View by Category
About This Presentation
Title:

?9? VPN??(?)

Description:

Title: PowerPoint Presentation Last modified by: Z.Y.Zhang Created Date: 1/1/1601 12:00:00 AM Document presentation format: Other titles – PowerPoint PPT presentation

Number of Views:52
Avg rating:3.0/5.0
Slides: 60
Provided by: sigdrmOr
Learn more at: http://www.sigdrm.org
Category:
Tags: vpn | ikev2

less

Write a Comment
User Comments (0)
Transcript and Presenter's Notes

Title: ?9? VPN??(?)


1
?9? VPN??(?)
2
?? VPN?????
  • 1?VPN???
  • 2?VPN???
  • 3?VPN?????

3
1?VPN???
  • VPN???????ISP???NSP???????????????????????,??????
    ??????,??IP?????????ATM???
  • ??
  • ???
  • IETF???IP?VPN????IP??????????????

4
2?VPN???
5
3?VPN?????
  • ??????
  • ??????
  • ????
  • ??????
  • VPN?????
  • ???????????
  • ??????
  • ????????

6
4?VPN???(1)
  • ?VPN?????? (1)Intranet VPN(??????)
  • (2)Access VPN(????VPN)
  • (3)Extranet VPN(???????)
  • ?VPN?????? (1)????,???????VPN
  • (2)?????,??????????????VPN

7
4?VPN???(2)
  • ????????? (1)??????L2F/L2TP?PPTP
  • (2)??????GRE?IPSec
  • (3)????????????MPLS (4)??Socket V5?VPN
  • ??,??VPN??????,??????????????????

8
??VPN?????
  • 1????????
  • 2???????
  • 3??????PPTP
  • 4??????L2TP
  • 5????????IPSec
  • 6??????????

9
1????????
  • ?????????????,?????(??X)????????(??Y)???,??????X?
    ??????(????Y)????
  • ?????????????
  • ????(Passenger Protocol)
  • ????(Encapsulating Protocol)
  • ????(Carrier Protocol)
  • ??????

10
2???????
  • ???????????OSI/RM???
  • ??????PPTP,L2TP???
  • ?????IPSec

11
3??????PPTP(1)
PPTP???????,???PPP????IP??????
12
3??????PPTP(2)
PPTP?????
  • PPTP????PPTP???????PPTP????,??????
  • ???????????????
  • ?????IP??
  • ?????GRE?PPP??
  • ??????,?PPP?????????????????
  • ???????????????

13
4??????L2TP
  • ??????
  • ??
  • ???????????(L2F)?PPTP?????????
  • ?????????

14
5????????IPSec
  • IPSec?IP?????,??Internet??IETF?IPSec??????IP?????
    ???????IP????????TCP/IP???????????
  • ??????

15
6??????????
  • ????
  • PPTP?L2TP?????????????????
  • IPSec???????????????,??????????
  • ???
  • PPTP?????????,??????
  • L2TP?????????????,?????????????
  • IPSec?????????????
  • QoS??????
  • ???????IPSec???

16
????IPSec?VPN?????
  • 1?IPSec????
  • 2?IPSec????
  • 3?AH??
  • 4?ESP??
  • 5?IPSec????
  • 6?IPSec????
  • 7????????(SPD)
  • 8????????(SADB)
  • 9????????
  • 10????????
  • 11??????????

17
1?IPSec????
18
2?IPSec????(1)
  • ??????????????,IPSec?????????IPV4?IPV6????????????
    ???????IPSec?????????????????????????????????????
    ????????????IPSec????????
  • ?????-RFC2401
  • ?????AH??-RFC2402?ESP??-RFC2406

19
2?IPSec????(2)
  • ???????IKE - RFC2409 ?ISAKMP-RFC2408?OAKLEY??-RFC
    2412?
  • ?????HMAC-RFC2104/2404?CAST-RFC2144?ESP????-RFC24
    05/2451??
  • ??????DOI-RFC2407?IPComp-RFC2393?Roadmap-RFC2411?

20
2?IPSec????(3)
ike???????????,??????????,????????????.????????"??
?(doi)"??????
21
3?AH??
22
4?ESP??
23
5?IPSec????
24
6?IPSec????
25
7????????(SPD)(1)
  • SP???????,?????????????????????,????????????SP????
    ???SA????
  • SP??????????????????Telnet???,??ESP????,??3DES???
    ??HMAC-SHA1?????

26
7????????(SPD)(2)
  • ???????????SPD,????????SP,????????????,??????IPSec
    ?????????
  • ???????,???????????????????????,????IP??IP??????
    ????????????????????SPD,??????????SP?

27
8????????(SADB)(1)
  • SA(Security Association)???IPSec??????????????????
    ??,????????????IPSec??????????????????????????????
    ??????????????

28
8????????(SADB)(2)
  • ????????
  •  ????????
  • ????????????
  • ???,32????,??????????,??SA?????,????????????,????
    ?????IPSec??,??????????????????
  • ??????????????????????????????????????
  • ?????????SA???????,??????????????????????
  • ?????????????????
  • IPSec???????
  • ??????(SPI)????????SA?

29
9????????
  • ???????????????,???
  • IP?,???????????,?????
  • SPD,????????
  • SP??????,??????,????
  • ???????ICMP??
  • SP??????,??????????????????
  • SP????IPSec,??SP??????SA,???????????,?????SA???,??
    ?IKE??????SA,????????????????????,?????,???????

30
10????????
  • ????IP??,?????IPSec?,??
  • ????ltdst_ip,protocol,SPIgt,??SADB?
  • ????SA,???
  • ???,????????,?????
  • ?????IP?,????IP???????,
  • ???SPD?????,??????????
  • ????????,???????,????
  • ???IP??????????

31
11??????????
32
????????? (Internet Key Exchange)
1?IKE?? 2????????(ISAKMP)- 3???????? 4?????????? 5
?Diffie-Hellman???? 6?????
33
1?IKE??
  • ?IPSec?????,????????IPSec?????,????????????,?
    ??????????????????????Internet Key
    Exchange,?IKE?IKE??????IPSec??????????????????????
    ????,??????????
  • IKE???Oakley?SKEME?????,??ISAKMP??????????,?
    ????????????????????????,??SNMPv3,OSPFv2,IPSec??

34
2????????(ISAKMP)--1
35
2????????(ISAKMP)--2
  • ??????,
  • ??????????????????????????,????,????????,???????
  • ??????,??????????????? ????,??????????????
  • nonce??,???????,?????????
  • ????,??????????????
  • ???????

36
3????????
??????????????,??????? ?????????????,???????,?????
?,????????????????????????,??????????,????????????
????????????????????,??????,????????????,?????????
?,???????????????????????,????????????????
???????,???????????????
37
4??????????
1.?????(phase1 exchange)???????,??IKE?????????,
????????????,??????????,???????ISAKMP?????????????
??????(?????)????????,???????????????
2.?????(phase2 exchange) ??????,IKE???????????
??????,??????????????????????,?VPN???,????IPSec???
????????????????????????????
38
5?Diffie-Hellman????
D-H?????????????????????????????
39
6?????(1) (?????????)
40
6?????(2)?????
???(1)?,?????????????????,?????????(2)?,??????????
???????,????????????????????????? ???(3)?(4)?,????
?????DH???,??????nonce,???????,??????????????DH???
,???????SKEYID???????? ??(5)???(6)?,??????????????
?????????????? ???????????????,??(5)?(6)????????,?
???????????,????AUTH DATA???????????,?????????????
?????????????LDAP?DNSSEC??????
41
6?????(3) (???????)
42
6?????(4)?????
?????ISAKMP??????????,????????????????????
??????????(PFS),???????????DH????????KE,??????????
??????????,????????????????
???????????,??????????????,????????IPSec????????

43
??IPSec??????????
  • 1?IPSec VPN???
  • 2?IPSec????
  • 3?IPSec ???????
  • 4??IKE?????
  • 5?IPSec?NAT???
  • 6???????
  • 7?????
  • 8?????????????
  • 9??IPSec?????

44
1?IPSec VPN???(1)
  • VPN????????,?IETF??IPSec??????IPSec????????IP
    VPN??,?IPSec???????????????
  • ??IPSec??IP VPN??????IPsec???????(Security
    Gateway)???????,????????????????????????????

45
1?IPSec VPN???(2)
  • ??????????????????????????????,???????????????????
    ???
  • ????IPSec VPN?????PVC?????????????
  • ????IPSec VPN????????????(????????VPN?????)?

46
2?IPSec????(1)
  • ????????IPSec?,??????,????AH?ESP??????????????????
    ,????????
  • ????AH
  • ????AH
  • ????ESP(???)
  • ????ESP(???)
  • ????ESP(??)
  • ????ESP(??)

47
2?IPSec????(2)????????
  • ??????
  • ??AH??
  • ?ESP?,?????????,?????????
  • ?????????????

48
2? IPSec????(3)????AH??
  • AH?ESP??????
  • AH????????
  • ????ESP
  • ???AH?????????
  • ???????????

49
3?IPSec ???????
?????????,?IPSec????? ??????IPSec???????,IETF ??
IPSec???????IPSec?????, ??IKEV2?
???????,IPSec???????? ?? 1. IKE?????? 2.
??????????? 3. ???????????? 4. ?????????
50
4??IKE?????(1)
  • 1. ?????????,?IPSec????
  • ???????IPSec???????,
  • IETF??IPSec????????IPSec???
  • ??,?IKEV2?
  • 2. J.Zhou???IKE?????,??
  • HASH_I?HASH_R????????????
  • 3. Bruce Schneier????IKE??????
  • ,??????????,?ISAKMP???
  • ???

51
4??IKE?????(2)
4. J.M.Sierra????????????- ?????(Generator
Mode)??IKE SA? ????? 5. Radia
Perlman?????,IKE??? ??????????????????? ?????,????
????????? ????????J.Zhou???????? ?????????????????
?? ????
52
5?IPSec?NAT???(1)
??????-NAT??????IP? ???????????IPSec????? ?MAC???
?IP???????,?? NAT?IPSec?????? IETF????????????????
??IPC-NAT( IPSec Control NAT) ?????? ??????IPSec?N
AT???,?????????RSIP(Realm Specific IP) ???
53
5?IPSec?NAT???(2)
  • Balaji Sivasubramanian????????IP??????????????????
    ????????IPSec??????NAT???????(??IP?????),?????NAT?
    ??,NAT??????????IPSec??????????????
  • IPSec???????UDP????IPSec???????,?NAT?????????UDP?
    ??????

54
6???????
  • IPSec???????IP??????,?
  • ????????????????,??
  • ??????????,??IPSec????
  • ?????????
  • ?????????????
  • ??L2TP??
  • ??Mobile IP??
  • ??IKE??-Xauth???Crack???Hybrid ????
  • PIC??

55
7?????(1)
  • IPSec???????????????
  • ?(Multicast)??,??????????
  • ???????
  • ?IPSec??????????,???
  • ????????
  • SA??????
  • ??????
  • ???????
  • ?????????

56
7?????(2)
?????G_R???????????????,??????????????????? ?????
???????????? C.K.Wong?????????????????????????????
??????????,????????????,????????????C.Canetti????
?MAC?????? ????????K???,?????? ????L???(LltK),????
??? ??????K?MAC? ?

57
7?????(3)
???????? C.K.Wong???????????,? ??????(KS)???????
?,? ???????????????????? A.Ballardie?H.Harney???
????? ??????????(SMKD)???? ????(GKMP),????????? ??
????????????????? ?,SMKD?????????(CBT)? ?Iolus???
,S.Mitra???????? ?????????????????? (GSI)????????
??
58
8?????????????
  • IPSec?????????
  • Horton?????????????????????
  • ????????,????????

59
9??IPSec?????
  • ??
  • ?????????????
  • ??
  • ????
  • ??????
  • ???????
  • ????????IPSec????????????,????????IPSec??????(com
    mittee process)
About PowerShow.com