| 摘要 |
<p>An implement method of the dynamic VPN (Virtual Private Network) is disclosed. It supplies a linking method of dynamic IPSec VPN network, in view of the shortcomings of the existing IPSec VPN network, such as taking too many system resources with high cost, complex structure, and inconvenient control. It uses the BGP dynamic routing protocol to transmit the resource information that need to be protected in the location to the far-end VPN device in the mode of the BGP route update. The far-end VPN device obtains the legal address according to next jumping address of the received BGP route update and the expansion association attribute of theBGP route. IPSec is responsible for automatically establishing the relevant IPSec tunnel according to the learned information. The invention takes a little network resource, and has the low cost, simple configuration, flexible dispose, convenient control and high security.</p> |
