Optimized LDAP Interface Design and Implementation of IPSec VPN Security Gateway
LDAP is an important protocol for Internet quick directory data query and access. IPSec VPN gateway authenticates its IPSec peer's(e.g. road warrior, remote VPN gateway) identity via certificate to establish SA in IKE interaction. To improve the utility and efficiency of searching, this paper introduces LDAP into the IPSec VPN gateway design. Certificates and CRLs are designed to be stored with combination of the local caching and accessing LDAP server, and the local caching first strategy is adopted. The corresponding design has reduced communication burden of IPSec VPN gateway and LDAP server, has significantly improved the gateway's certificate processing efficiency, and has speeded the authentication.