METHOD AND APPARATUS FOR IMPLEMENTATION IPSEC ENGINE IN IXDP2851

摘要

A method and an apparatus for realizing an IPSec engine in IXDP2851 are provided to classify/process packets into packets, which need IPSec processing, and packets, which do not need the IPSec processing, thereby realizing the IPSec engine without affecting the speed of processing normal packets which do not need the IPSec processing. An apparatus for realizing an IPSec(Internet Protocol Security) engine in IXDP2851 comprises the followings: a packet classification/forwarding microblock(225) which classifies packets into an inbound packet, of which a destination address of an IP(Internet Protocol) header of a packet is itself, and an outbound packet, of which that is not itself, by using received packet information and determines whether it is necessary to perform IPSec processing for the inbound packet and the outbound packet in order to perform packet forwarding for packets which do not need the IPSec processing; an outbound IPSec processing microblock(230); an inbound IPSec processing microblock(210); and an IPSec packet forwarding microblock(240).