Design, implementation and performance evaluation of IP-VPN

Abstract

Network security has always been a significant issue, but a recognized priority today due to the popularity of Internet. The issue is not if security should be implemented on a network rather, the question to ask is if security has been implemented properly and the interoperability with today's network architecture. Although there are various ways to perform a secure network environment, but the most popular and the most progressive network security mechanism is Security Architecture for IP (IPSec), offered by IETF (Internet Engineering Task Force). We discuss the problems when combine IPSec into current TCP/IP module by porting an IPSec shareware (FreeS/WAN) into a router. Finally, in order to understand the impact on router's performance when using various services and hash/encryption algorithms provided by IPSec, we testing the throughput of the router before and after applying IPSec.