|
Maybe, the Internet’s top has been gone, but the relation between the people and Internet has been getting more and more closer, especially the voice for the Internet security has been getting higher and higher. In order to keep the information’s security and reliability, and it has been forming the Internet security protocol IPSec based on the IP layer gradually, which has been applying in many fileds, IPSec must support the IPv6. SDR (Software Definition Radio) Software Basestation platform is ZTE’s open platform, which is based all IP and supports the multi-mode, is ZTE’s future main platform, and ZTE’s targets are some top markets, such as North America & West Europe, these customers are sensitive for information security, the main termination device merchant T-Mobile has raised the all requirements for the future 3 years. So ZTE begins to pay more attention to the research for the platform’s security.With the IPSec’s application in SDR platform, it can supply the services of authentication and cryption for the communication data, furthermore, it can make sure some key business data’s security and reliability, improving the corporation’s compatibility. From the technology of view, SDR Software Basestation platform is based on all IP, and IPSec is also based on the IP layer, its importance is obvious. According to the researching requirement for IPSec by the SDR Software Basestation platform, it introduces the IPSec system’s design and implementation.Firstly, this paper describes the SDR and IPSec briefly、the system’s researching background, and the main technologies for the implementation of the IPSec system, which includes IKE、NAT、IPv6、Sec driver, and so on.Secondly, this paper describes the process of system analysis and design, including the general architecture of the system, the functional requirements of the system, the data configuration interface for the extern product module, IKE modulee, IKEv2 module, SAD/SPD module, NAT module and IPv6 module.Finally, this paper introduces the implementation of the configuration interface module, including the IKE’s phase1 data: resend times、resend interval、user id type、support NAT、NAT Keepalive、isakmp policy、psk、negotiation version and negotiation mode, and so on; the IKE’s phase2 data: ACL、Trans、PFS group、PFS level、anti-replay、timelife、Map、SA, and so on. Based on satisfying all the functions, through the analysis and tests, the result of performances proves that the design idea and implementation methods are reasonable and practical. And onwards, these are valuable to research and develop the similar software.
|