An experimental development of a VPN policy management system of end-end management

摘要

It is common that the policy management standards for configuring IPsec based VPNs focus only IPSEC gateway elements, and one policy focuses each element. However, generally, many kind of elements (i.e. Firewalls) may exist on the VPN route besides IPSEC gateway elements. Network administrators should manage various kinds of elements that exist on a VPN route. In this case, it is desirable to provide a mechanism for managing all elements on a VPN route. We developed a VPN policy management system that is based on policy management standards, in order to manage VPN routes on end-end basis. This report describes the outline of the system.