摘要 |
PROBLEM TO BE SOLVED: To enable IPSec (Security architecture for IP) communication using a key even if a fault occurs in a gateway where a key exchange is performed, in a large-scale LAN having a plurality of gateways. SOLUTION: When the key exchange based on IPSec is performed between the gateway of the large-scale LAN having a plurality of gateways and a gateway of another LAN, an Internet key exchange portion in the gateway of the large-scale LAN sets a key in an IPSec portion of this gateway, and requests a key transferring portion of this gateway to transfer the key. In response to this request, the key transferring portion transfers the key to a key transferring portion of another gateway in the large-scale LAN, and the key transferring portion of the other gateway sets the key in an IPSec portion of the other gateway by using this transferred key.
|