Design and Implement of IPsec VPN Service Mapping Layer Based on the ForCES Framework

ForCES brings flexible, programmable, and cost-effective advantages over traditional architectures. This paper presents an implement of ForCES-based IPsec VPN SML, which helps users to manage and configure IPsec information. We illustrate the design of IPsec VPN SML, and describe the IPsec-related LFBs. Then we focus on the implement, mainly the realization of SAD and SPD. Finally, we test our works and give the result.