CAJ | 학술논문

现有 VPN技术对动态获取 IP地址的分支机构间网络相互连通配置极其繁琐，且在 NAT 穿越、动态路由支持、报文加密等方面存在某些缺陷。针对上述问题，通过对动态点到多点隧道机制的分析，提出了 AC-VPN方案，设计了 AC-VPN隧道报文的封装格式和在动态 IP地址的设备之间隧道管理机制，结合动态路由机制，实现了使接入到 AC-VPN的设备能够相互访问。通过仿真测试，验证了 AC-VPN的有效性。
현유 VPN기술대동태획취 IP지지적분지궤구간망락상호련통배치겁기번쇄，차재 NAT 천월、동태로유지지、보문가밀등방면존재모사결함。침대상술문제，통과대동태점도다점수도궤제적분석，제출료 AC-VPN방안，설계료 AC-VPN수도보문적봉장격식화재동태 IP지지적설비지간수도관리궤제，결합동태로유궤제，실현료사접입도 AC-VPN적설비능구상호방문。통과방진측시，험증료 AC-VPN적유효성。
The present VPN technology makes it very tedious for branches dynamically getting IP address to communicate with each other,and there are some defects in NAT traversal,dynamic routing support and message encryption.Therefore,in order to solve these problems,AC-VPN scheme is proposed,and the encapsulation format of messages and the tunnel management mecha-nism of the dynamic IP address in AC-VPN tunnel are designed based on analyzing the multipoint tunneling mechanism of dynamic point,then the devices accessed to AC-VPN communicating with each other are realized by combining with the dynamic routing mechanism.Finally,the effective-ness of AC-VPN is verified by the simulation test.