Integrating QoS and security functions in an IP-VPN gateway

Kuo-Pao Fan; Shu-Hsin Chang; Kuan-Ming Lin; Mau-Jy Pen

doi:10.1117/12.445118

16 October 2001 Integrating QoS and security functions in an IP-VPN gateway

Kuo-Pao Fan, Shu-Hsin Chang, Kuan-Ming Lin, Mau-Jy Pen

Proceedings Volume 4583, Metro and Access Networks; (2001) https://doi.org/10.1117/12.445118
Event: Asia-Pacific Optical and Wireless Communications Conference and Exhibit, 2001, Beijing, China

Abstract

IP-based Virtual Private Network becomes more and more popular. It can not only reduce the enterprise communication cost but also increase the revenue of the service provider. The common IP-VPN application types include Intranet VPN, Extranet VPN, and remote access VPN. For the large IP-VPN market, some vendors develop dedicated IP-VPN devices; while some vendors add the VPN functions into their existing network equipment such as router, access gateway, etc. The functions in the IP-VPN device include security, QoS, and management. The common security functions supported are IPSec (IP Security), IKE (Internet Key Exchange), and Firewall. The QoS functions include bandwidth control and packet scheduling. In the management component, policy-based network management is under standardization in IETF. In this paper, we discuss issues on how to integrate the QoS and security functions in an IP-VPN Gateway. We propose three approaches to do this. They are (1) perform Qos first (2) perform IPSec first and (3) reserve fixed bandwidth for IPSec. We also compare the advantages and disadvantages of the three proposed approaches.

Citation Download Citation

Kuo-Pao Fan, Shu-Hsin Chang, Kuan-Ming Lin, and Mau-Jy Pen "Integrating QoS and security functions in an IP-VPN gateway", Proc. SPIE 4583, Metro and Access Networks, (16 October 2001); https://doi.org/10.1117/12.445118

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available