07-04-2023 дата публикации
Номер: CN115941171A
Автор:
ZHOU SICHENG,
FAN RONG,
WAN LI,
WANG QINGNIAN,
HUANG ZHE,
WANG XIAOYUAN,
YANG YANG,
ZHOU HAOYU,
HUANG XIU,
WANG PEIRAN,
XIAO WEI,
ZHANG XUNCHEN,
LUO ZHANGQI,
LI CHENQI,
GAO ZHAO,
ZHAO DASHENG,
YE YAOWEN,
LIU SICONG,
WEN LEZHANG,
HUANG CAN
Принадлежит:
The invention provides a network key exchange negotiation method, a network key exchange negotiation device and network equipment. The method comprises the following steps: acquiring user configuration information which comprises negotiation role information, negotiation strategy information and SA information, the negotiation strategy information is used for indicating a first strategy adopted by negotiation, strategy effective time of the first strategy, at least one second strategy adopted by negotiation and strategy updating time and strategy failure time of each second strategy; when the negotiation role is an initiator and the policy effective time is reached, performing network key exchange protocol IKE negotiation based on a first policy, and determining SA; storing the SA in a database; when the strategy updating time is reached, IKE negotiation is carried out based on a second strategy corresponding to the strategy updating time, and the SA in the database is updated; and when ...
Подробнее