Implementing a Virtual Private Network for a Mobile LAN Using DIRECWAY and OpenSSH.

摘要

Mobile Internet Protocol (IP) Local Area Network (LAN) is a technique, developed by the U.S. Army Research Laboratory, that allows a LAN to be IP mobile when attaching to a foreign IP-based network and using this network as a means to retain connectivity to its home network. This technique is a form of virtual private networking which enables a LAN to roam on the Internet. In this paper, we describe an enhanced version of Mobile IP LAN where a personal computer (termed a pass-through system) equipped with Hughes Network Systems (HNS) DIRECWAY (an upstream/downstream Internet service via satellite communications) and Secure Shell (SSH) software allows a LAN to be mobile in the United States. The pass-through system does no network routing (layer 3) but instead serves as a transparent (secure) bridge at layer 4 (transport layer) to link the mobile LAN and its home network. This bridging technique implemented on the pass-through system can be adapted to any system equipped with a network interface card, SSH software, and Internet access as a means to provide a VPN for a mobile LAN to its home network.