2002 8 2
1....1 1.1.... 1 1.2. PKI IPsec... 1 2....2 2.1. VPN... 2 2.2.... 3 3....4 3.1. VPN PKI... 4 3.2.... 5 3.3. IPsec... 6 4....7 4.1. VPN PKI... 7 4.2.... 7 4.3. IPsec...11 5.... 21 5.1.... 21 5.2.... 21 5.2.1.... 21 5.2.2. IPsec... 22 5.3. PKI IPsec... 27 5.3.1.... 27 5.3.2.... 29 5.3.3.... 30 5.3.4.... 31 5.3.5. CA VPN... 33 i
1. 1.1. 1.2. PKI IPsec 1
2. 2.1. VPN 2
2.2. 3
3. 3.1. VPN PKI 4
3.2. 5
3.3. IPsec 6
4. 4.1. VPN PKI 4.2. 7
4-1-(1) 8
4-1-(2) 9
CRL 4-1-(3) CRL 10
4.3. IPsec 11
4-3-(1) 12
13
4-3-(2)-1 VPN 14
4-3-(2)-2 15
16
4-3-(3)-1 VPN 17
4-3-(3)-2 18
CA 19
4-3-(4) CA 20
5. 5.1. 5.2. 5.2.1. 21
5.2.2. IPsec 22
23
24
5-2-(1) SCEP WWW (CGI Script) IPSec Gateway SCEP LDAP LDAP SCEP over HTTP RA (Registration Authority) SEP/CMP CA (Certification Authority) 25
26
5.3. PKI IPsec 5.3.1. 27
5-3-(1) ID Certficate 28
5-3-(2) CRLDP 5.3.2. 29
5.3.3. 5-3-(3) IKE 30
5.3.4. 31
5-3-(4) ID 32
5.3.5. CA VPN 5-3-(5) CA 33
5-3-(6) CA 34
CA 1 SSH Certifier
2 Entrust Authority
3 Easy Cert
4
VPN IKE VPN IKE VPN
use-32bit-cpi Compatibility flag for implementations that use 32-bit CPI values in IPCOMP. no-well-known-cpis Allocate CPIs that have no well known values. no-initial-contact
FAX FAX 03-5978-7518 IPA