Design, Implementation and Performance Evaluation of IP/VPN

• Main Authors: Ching-Tien Chang, 張競天
• Other Authors: Jin-Cherng Lin
• Format: Others
• Language: en_US
• Published: 2002
• Online Access: http://ndltd.ncl.edu.tw/handle/34224948603150960905

碩士 === 大同大學 === 資訊工程研究所 === 90 === Network security has always been a significant issue, but a recognized priority today due to the popular of internet. The issue is not if security should be implemented on a network; rather, the question to ask is if security has been implemented properly and the interoperability with today’s network architecture. Although there are various ways to perform a secure network environment, but the most popular and the most progressive network security mechanism is Security Architecture for IP (IPsec), offered by IETF (Internet Engineering Task Force). IPsec is designed to provide interoperable, cryptographically-based security for IPv4 and IPv6. IPsec can offer the set of security services includes access control, connectionless integrity, data origin authentication, protection against replays and data confidentiality. These services are provided at the IP layer, offering protection for IP and upper layer protocols. In this paper, we will discuss the problems when combine IPsec into current TCP/IP module by porting an IPsec shareware (FreeS/WAN) into a router. Finally, in order to understand the impact on router’s performance when using various services and hash/encryption algorithms provided by IPsec, we testing the throughput of the router before and after applying IPsec.