【正文】 was one relatively walkway that it was resource that both that of one be indispensable to whereas important factor among Network security right through data work. Preparatory work suffer, none but calculator proper and application. Shield this resource. Confidential data by memory at one fit on glass hall. Past crypto guard make inspect weight, nothing but allowed at enterprise work. Versus heap government sector and academic institution came said, inter except one design to transponder electronic mail and proceed document transmission’ instrument. There be the resource pleteness exposure at hacker, juggler and those hellion’ attack of down, there into likely to return include some immoral numerator in order to or certain still ugly motive station ongoing destroy of it was pleteness visible that the revolution transfer know clearly possession all these of the both inter and puter technology. Now, calculator full high speed, cheapness bine possess resolvability, general design to depot private and confidential information. Inter in the range of get folk in an OSI to at global proceed without a hitch corresponding also, thereof unreliability no more will conceivable. These purport end user transmitting data station utilized work element likely to met absence their dam within sight back. If data proper yes confidential, it with met expose likely to burglar, by have no right limit user check or bowdlerize through to. In the meanwhile, special enterprise work too need for use inter bine therewith mutual to. Inter at advertisement and ebusiness aspect repose whereabouts huge business opportunity, versus user came said inter must. Figure full high speed, cheapness bine possess resolvability, general design to depot IP 協(xié)議 及 IPSec 協(xié)議安 全 分析 專業(yè) 班級(jí) :計(jì)算機(jī)科學(xué)與技術(shù) 4 private and confidential information up lead folk in a OSI to at global within range proceed without a hitch corresponding also, thereof unreliability no more will conceivable to it means end user transmitting data station utilized work element likely to met absence their dam within sight back. But do so should gotten enterprise work Tnumber now that, figure full high speed, cheapness bine possesses resolvability, general design to depot private and confidential information up. In despite of cause how about, now versus work security requirements ratio anciently tighten up, too still necessity to know clearly. It was be on the foundation upward strain for security insure of IPlayer or still definitely said yes at each IP grouping that both data stream among as a matter of fact us has manifold means useful for protective work. Could through the medium of be on the fringe erect one fire wall, filter e off those undefeated data stream out for of dedicated work. Application and transport protocols mand thereof own security mechanism. Other kind of technology, considering hereinafter several cause lead such approach possess definite meaning to： 1. The Intra big city yes repose IP 39。of the both inter and enterprise. Proprietary data stream quantity big city must through IPlayer. Proprietary data too big city yes by IP grouping came loadsupporting。use came finished as well that these object. It was by user, application, and / or site, anize versus security and systemic demand came decision that that of required IPSec protocol multitude content very utilized mode. Both the instant correct realize, use these mechanism, they ought not versus use these security mechanism shield tarn missive user, mainframe and rest hero special part bring negative impact forth. This mechanism too by is designed for algorithm IP 協(xié)議 及 IPSec 協(xié)議安 全 分析 專業(yè) 班級(jí) :計(jì)算機(jī)科學(xué)與技術(shù) 6 independent. Such modularity permit select different algorithm multitude instead of impact rest segmental realize for to. For example： In the event of, different user munication is available to different algorithm multitude. It was a sort of away hair homology serial number 39。MAC address use quantity, establish per port broadcast packet flow threshold, use repose port and VLAN’ ACL, foundation security user tunnel grade came kept away aim at two tiered attack； past route filtration, versus route informational encrypt and authentication, orient multicasting control, bump route rapidity of convergence withal relieve route oscillation impact grade measure, came muscle threeply Network security update of the cow originate in equipments drawing unreliability, such as sheet caloric spoil, physical interface 39。 potential safety hazard, such as both encapsulation attack, broadcast packet attack, MAC waterflooding, spanning tree attack grade second floor attack, as well as mendacious ICMP messenger, ICMP waterflooding, source address beguile , route oscillation grade aim at threeply consultative attack into. On the shield instrument include of application layer, mostly have got direct , FTP/TFTP, tel and through the medium of electronic mail blaze viral attack abroad as well to. toward these attack, be available to： past AAA, Tacacs+, radius grade security access control protocol, Control user versus Network access authority, phony catch aim at application layer 39。multicasting address base these immovability of the address structure bed cleaning in feeding stage of an instars know clearly do with three two bit address space reach up to know clearly 1 two 8bit besides, return versus IP mainframe likely to obtain different type address did know clearly some adjust of the IPv6. IPv6 suffer Cancel know clearly broadcast address whereas instead arbitrary point sow address. IPv6 useful appoint one work interface. 2. Predilection head format Both IPv6 suffer include total length for four 0 syllabic eight words segment (there into two is source address and subsection can but by source node proceed among IPv6 suffer include total length for four 0 sylla