本文提出了基于IPSec VPN 技術(shù)的端到端虛擬組網(wǎng)思想，引入了虛擬工作組及組策
略的概念來實現(xiàn)不同VPN 通信實體的安全隔離。在現(xiàn)有安全策略管理方法的基礎(chǔ)上，設(shè)計實現(xiàn)了一個基于工作組的安全策略系統(tǒng)，并討論了該安全策略系統(tǒng)的功能模塊及采用的關(guān)鍵
技術(shù)。關(guān)鍵詞：安全策略系統(tǒng)；端到端；虛擬工作組
Abstract：This paper proposes a theory of end-to-end virtual network based on IPSec VPN
technique. It introduces a concept of virtual workgroup and group policy to isolate different VPN communication entities safely. Based on the current IPSec security policy management method, a workgroup-based security policy system is designed and realized. The function modules and solution to key problems of the workgroup-based security policy system is also discussed.
Key words: security policy system; end-to-end; virtual workgroup