| 摘要 |
<p>A secure Virtual Private Network (VPN) is established by firstly performing an authentication between a remote terminal 1 and a gateway 31 via a first Internet Protocol (IP) network 101, e.g. a public IP network, according to a configuration method, e.g. an Internet key Security Association and Key Management Protocol (ISAKMP). Configuration data and an IP address belonging to a second IP network 300, e.g. a closed IP Local Area Network (LAN), are then issued from the gateway to the remote terminal, thus achieving automatic configuration of the remote terminal. An IPsec SA connection is then established for secure VPN communication through an IPsec ESP (Encapsulated Security Payload) tunnel 102. The configuration data and IP address may be obtained from a management server 32 or separate configuration data and address servers. A pre-shared key may be used in performing the authentication.</p> |
