CN100394747C - Wireless VPN Router - Google Patents

Abstract

A wireless virtual private network router belongs to the technical field of wireless communication. The present invention includes: a hardware platform and a virtual private network routing module. The hardware platform adopts an embedded design and is composed of a core board and an interface board. The core board and the interface board are connected by a dual vertical in-line connector. It is composed of the management program module, and the virtual private network routing module directly works on the hardware platform. After the hardware platform is started, the virtual private network routing module automatically runs on the space provided by the core board to realize the virtual private network routing function, and at the same time outputs the control signal to the The interface board manages the wireless wide area network access, the virtual private network routing module implements virtual private network routing through the supporting program module, and the management program module configures and manages the hardware platform and the supporting program module through the WEB interface. The invention can greatly reduce equipment cost, reduce fault points, and provide stable wireless security network access.

Description

Wireless VPN Router

technical field

The invention relates to a router in the technical field of wireless communication, in particular to a wireless virtual private network router.

Background technique

With the increase of Internet access, traditional Internet access services can no longer meet the needs of users, because the traditional Internet only provides single services such as browsing and e-mail, without service quality assurance, authority and security mechanisms, VPN (virtual private network) can solve these problems. The networking method of virtual private network provides a low-cost network infrastructure for enterprises, and increases the functions of enterprise network and expands the scope of its private network. The way of wired access + virtual private network has been recognized by enterprise users. However, the wireless access + virtual private network method has not been widely developed due to the wireless application environment. In recent years, wireless data communication has developed rapidly, especially the rapid development of GPRS/CDMA1x2.5G network. The unique mobility, low price and fast and convenient construction of the wireless access + virtual private network mode have been widely used.

After searching the literature of the prior art, it is found that the Chinese patent application number is: CN200410012761.5, and the title of the invention: the transmission method of the general wireless transparent VPN bridge system based on GPRS/CDMA20001X. The way to realize the virtual private network, which can use the wireless network to realize the function of the virtual private network: using this system, the remote organization will not feel the existence of the geographical gap when exchanging data information with the headquarters, which is equivalent to conducting information on the intranet of the same enterprise. exchange. At the same time, the system has a highly encrypted and authenticated mechanism for data transmission. However, the specific implementation method adopts wireless virtual private network terminal + virtual private network gateway, which is not only expensive, but also has huge equipment and many failure points. The wireless WAN virtual private network router can replace the wireless virtual private network terminal + virtual private network gateway. The research on the virtual private network router based on the wireless wide area network is the key to the large-scale promotion and use of the entire wireless network. The research on the router is It is imperative.

There are thousands of routers, but the wireless virtual private network router of the wide area network has always been a difficult point in the design, the main reason is the complexity of the wireless network. Further literature search found that there is no wireless WAN virtual private network router at home and abroad.

Contents of the invention

The present invention overcomes the deficiencies in the prior art and provides a wireless virtual private network router, which not only meets wireless data transmission but also has the characteristics of virtual private network security, and is suitable for use environments that require safe wireless data transmission.

The present invention is realized through the following technical solutions, and the present invention includes: a hardware platform and a virtual private network routing module. The hardware platform adopts an embedded design, and is composed of a core board and an interface board, and the core board and the interface board are connected through a dual vertical plug connector. The virtual private network routing module is composed of a support module and a management module. The virtual private network routing module directly works on the hardware platform. After the hardware platform is started, the virtual private network routing module automatically runs on the space provided by the core board to realize the virtual private network routing function, and at the same time outputs control signals to the interface board to manage wireless wide area network access. The virtual private network routing module implements virtual private network routing through the support module, and the management module configures and manages the hardware platform and the support module through the WEB interface.

The core board includes a core board power supply module, a central processing module, an external crystal, a reset module, a watchdog module, a flash memory module, and a synchronous dynamic storage module. The core board power supply module is directly connected with the central processing module, external crystal, reset module, watchdog module, flash memory module, and synchronous dynamic storage module to supply power to the entire core board. Taking the central processing module as the center, the external crystal, the reset module and the watchdog module are directly connected with the central processing module. The external crystal provides an off-chip oscillator, the reset module provides necessary and reliable power-on reset, and the watchdog module is used to ensure the stable operation of the hardware. The flash memory module is connected to the central processing unit through a 32-bit bus, the synchronous dynamic storage module is connected to the central processing unit through a 32-bit bus, and the flash memory module and the synchronous dynamic storage module are also connected through a 32-bit bus. The flash memory module realizes the storage of data and programs, and the synchronous dynamic storage module provides the space for program operation to ensure the operation of the program.

The interface board includes an interface board power module, a network module, a serial port module, and a wireless module. The interface board power module is directly connected with the network module, the serial port module, and the wireless module to supply power for the entire interface board. Among them, the network module, the serial port module and the wireless module are all directly connected to the core board through the dual vertical in-line connector. The network module provides a 10/100M network interface, and the serial port module realizes the serial port level conversion function. The wireless module realizes the function of GPRS/CDMA1x wireless data transmission.

The virtual private network routing module includes: a support module and a management module. Wherein the supporting module adopts embedded Linux to meet the limitation of few resources of the equipment hardware components of the present invention. At the same time, the module can directly provide TCP/IP support without external TCP/IP protocol package, which basically guarantees the stability of the system. In the present invention, the supporting module adopts Openswan (free swan, a kind of open source Linux program) to realize the Ipsec (IP security) protocol, which acts on the TCP/IP layer, thereby realizing the virtual private network routing function. The management module has a built-in web server, and by typing 192.168.10.1 in the IE browser, the device of the present invention can be managed and configured through the web interface. The management content of the management module includes the management of the hardware and the management of the virtual private network routing function. The support module is the basis of the management module, and the management module provides users with convenient management methods through the Web interface.

The device hardware platform of the present invention realizes wireless wide area network access, and the virtual private network routing module realizes the virtual private network routing function through the supporting module. The present invention innovatively connects the hardware platform and the supporting module through the management module in the virtual private network routing module. Therefore, the hardware and the virtual private network routing module become an organic whole, and the wireless wide area network virtual private network router is realized as a whole.

The beneficial effect of the present invention is that, in the application environment of the wireless virtual private network, the present invention replaces the existing two devices with one device, which can not only greatly reduce the cost of the device, but also reduce the points of failure and provide a stable wireless security network access. enter.

Description of drawings

Fig. 1 is the overall block diagram of the present invention.

Fig. 2 is a structural block diagram of the hardware platform of the present invention.

Fig. 3 is a partial configuration management interface diagram of the present invention.

Fig. 4 is a working flowchart of the embodiment of the present invention.

Detailed ways

Figure 1 shows the general frame diagram of the entire wireless VPN router, in which the hardware platform is the foundation, and the VPN routing module works on the hardware platform, which includes a support module and a management module. The support module adopts embedded Linux, including driver layer, file system, protocol layer and application layer. The driver layer includes network driver and serial port driver. The protocol layer includes PPP (point-to-point) protocol and TCP/IP protocol. The file system includes Ramdisk (memory disk file system), JFFS2 (flash file system). The application layer includes Telnet (remote login), web page management, Socket (pipeline) communication, serial port communication and Openswan. The virtual private network routing module implements virtual private network routing through the support module, and the management module configures and manages the hardware platform and the support module through the WEB interface.

Figure 2 shows the block diagram of the hardware platform. The hardware platform adopts an embedded design and consists of a core board and an interface board. The core board is centered on the central processing module, the external crystal provides an off-chip vibration source, the flash memory module realizes the storage of data and programs, and the synchronous dynamic storage module Provide the space for the program to run and ensure the running of the program, in which the flash memory module and the synchronous dynamic memory module are connected through a 32-bit bus. The core board power supply module provides power for the entire core board. The reset module is directly connected with the central processing module to provide necessary and reliable power-on reset. The watchdog module is directly connected with the central processing module to ensure the stable operation of the hardware. The network module in the interface board provides a 10/100M network interface, and the serial port module implements serial port level conversion. The interface board power module provides the power for the entire interface board. The wireless module realizes the function of GPRS/CDMA1x wireless data transmission. The core board and the interface board are connected through a DIP (dual-in-line) connector, and the signals of the core board and the interface board are connected through the dual-in-line connector.

The central processing module can adopt the S3C2410 chip of Samsung Semiconductor Company, which has a real-point arithmetic processing function, and its main technical parameters are: 32-bit data and address interface, and the highest operating frequency is 203Mhz. In the present invention, the function of the coordinating handler is implemented.

Described flash memory module, can adopt the E28F128 chip of Intel Semiconductor Corporation, and this chip has the function of storing data, and its main technical parameter comprises that size is 16Mbit (bit), and operating voltage is 3.3V, realizes the storage unit of program and data.

Described synchronous dynamic memory module, can adopt the K4S561632 of modern semiconductor company, 2 chip design, this chip has the function of dynamic storage data, and its technical parameter is 32Mbits, and working voltage is 3.3V, in the present invention as the running unit of program , to realize the function of running the program and storing zero-time data.

Described external crystal adopts the passive crystal oscillator of Jinya Electronics Co., Ltd., and this chip has the function of starting without power supply. Its technical parameter is that the vibration frequency is 12Mhz. In the present invention, as the source of vibration, it provides the off-chip source of vibration.

The core board power supply module adopts the ON1117-1.8 chip of Ou Senmei Semiconductor Company. This chip has the function of providing a stable 1.8V voltage. Its main technical parameters are that the voltage regulation ripple coefficient is 5%, and the voltage regulation voltage is 1.8 V realizes the function of providing 1.8V stable power supply for the core board in the present invention.

The reset module adopts the cat809 of Crystal Semiconductor Company. The chip has an automatic reset function after power-on, and the main technical parameter is that the reset voltage is 2.93V. In the present invention, a stable and reliable power-on reset function is provided for the central processing module.

The watchdog module adopts the X25045 chip of Ike Company, which has the function of voltage monitoring, and its technical parameters are as follows: the latch voltage is 2.93V. In the present invention, voltage monitoring is realized to ensure the stable operation of the central processing module.

Described wireless module adopts the GTM900/CM320 of Huawei, wherein the GTM900 chip has the function of supporting GPRS (General Packet Radio Service) data transmission, and its main technical parameter is to support triple frequency 850/900/1800MHz, in the present invention Realize the function of GPRS wireless data transmission. The CM320 chip has the function of supporting CDMA1x (Code Division Multiple Access, a data service of China Unicom) data transmission. Its main technical parameters are to provide CDMA 2000 interface and support full-duplex wireless transmission data up to 153Kbps. In the present invention, the function of CDMA1x wireless data transmission is realized. Since the GTM900/CM320 needs a large current at the moment of surfing the Internet, the present invention uses the high-current low-drop power chip MIC29302BT of Mikel Company, which has the function of low price and adjustable output voltage, and its main technical parameter is the instantaneous current It can support up to 3A, and this chip can ensure stable operation of GTM900/CM320 when dialing.

The network module adopts the DM9000E chip of Daweikang Company, which has the function of 10/100M network connection, and its technical parameters are that the voltage is 3.3V, and the network connection speed is up to 100M. In the present invention, the network connection is realized, and the function of configuring the network port is provided.

The interface board power supply module adopts the ON1117-3.3 chip of OSEMI, which has the function of providing a stable 3.3V voltage, and its main technical parameter is that the ripple coefficient of the voltage regulation is 5%. The regulated voltage is 3.3V. In the present invention, the function of providing 3.3V stable voltage for the interface board is realized.

Described serial port module adopts the MAX232 chip of Maxim Semiconductor Corporation, and this chip has the function of level conversion, and its main technical parameter is that working voltage is 3.3V, and maximum speed is 115Kbps (bit/second), and this chip in the present invention Complete the function of serial port level conversion.

In the present invention, the circuit board of the core board is designed with 6 layers, and the circuit board of the interface board is designed with 2 layers.

Figure 3 shows part of the configuration management interface diagram. The configuration items allowed on the web page are divided into the following modules according to their functions. Each module corresponds to a page, which can be accessed through the navigation bar on the upper part of the panel:

●MENU LIST: Display all available items and brief introduction.

●DEVICE STATUS: Display the basic status and configuration of the system.

●BASIC SETTINGT: configure the basic parameters of the system.

●SERIAL MODE SETTING: Connection settings to the remote central server.

●SYSTEM TOOLS: Advanced settings for local terminals

●APPLYALL: Restart the system.

Fig. 4 is a working flowchart of the embodiment of the present invention. This figure clearly describes the workflow of the present invention. Turn on the power supply, the core board power supply module provides voltage for the system, the reset module is powered on and resets, the crystal oscillator starts to oscillate, and the central processing module starts to work. The central processing module reads programs from the flash memory module and transfers part of the programs to the synchronous dynamic storage module. The power module on the interface board provides 3.3V voltage when the power is turned on. The wireless module starts working. The serial port module completes level conversion. At this time, the network module completes the initialization and waits for further coordinated use of the software. After the virtual private network routing module is transferred to the synchronous dynamic memory, the supporting module starts to work. Firstly, the network driver and serial port driver are completed, so that the hardware and software can work together normally. Then call the file system, including disk memory file system and flash memory management file system. The disk memory file system can be read and written, but the data cannot be saved after power-on. It is used to save the temporary data generated when the program is running. The flash memory management file system can be read and written, but the data can be saved after power failure to store configuration files and programs. The virtual private network routing module calls and starts the protocol layer program from the file system. First, point-to-point dial-up, and the device dials successfully Afterwards, the support module obtains IP from the GPRS/CDMA1x network operator. At this time, the support module will coordinate and run TCP/IP to establish TCP/IP. The support module automatically runs the application layer program, establishes processes such as remote login, web page management, and pipeline communication on the basis of TCP/IP. While establishing the communication process, the support module automatically runs FreeSwan to establish a virtual private network. The management module starts working at the same time as the support module starts. When the virtual private network is successfully established, the management module takes over in an all-round way, and users can manage, coordinate and control the hardware platform and virtual private network routing functions through the management module.

Claims (5)

1. A wireless virtual private network router, comprising: hardware platform, virtual private network routing module, it is characterized in that, described hardware platform adopts embedded design, is made up of core board and interface board, and core board and interface board pass through double Connected with a vertical plug connector, the virtual private network routing module is composed of a support module and a management module. The virtual private network routing module directly works on the hardware platform. The virtual private network routing function is realized by automatic operation on the Internet, and at the same time, the wireless WAN access is managed by outputting control signals to the interface board. The virtual private network routing module realizes virtual private network routing through the support module, and the management module controls the hardware platform and the support module through the WEB interface. Configuration and management. 2. The wireless virtual private network router according to claim 1, characterized in that: the core board includes a core board power supply module, a central processing module, an external crystal, a reset module, a watchdog module, a flash memory module, a synchronization Dynamic storage module, wherein the core board power supply module is directly connected to the central processing module, external crystal, reset module, watchdog module, flash memory module, and synchronous dynamic storage module to supply power to the entire core board, with the central processing module as the center and external The crystal, reset module, and watchdog module are directly connected to the central processing module. The external crystal provides an off-chip vibration source. The reset module provides power-on reset. The watchdog module is used to ensure the stable operation of the hardware. The flash memory module communicates with the The central processing unit is connected, and the synchronous dynamic storage module is connected to the central processing unit through a 32-bit bus. At the same time, the flash memory module and the synchronous dynamic storage module are also connected through a 32-bit bus. The flash memory module realizes the storage of data and programs, and the synchronous dynamic storage module provides the program The running space ensures the running of the program. 3. wireless virtual private network router according to claim 1, it is characterized in that: described interface board comprises interface board power supply module, network module, serial port module, wireless module, interface board power supply module is directly connected with network module, serial port module , wireless module connection, power supply for the entire interface board, in which the network module, serial port module, and wireless module are directly connected to the core board through dual-in-line connectors, the network module provides a 10/100M network interface, and the serial port module realizes serial port level conversion. The wireless module realizes GPRS/CDMA1x wireless data transmission. 4. wireless virtual private network router according to claim 1, is characterized in that: described support module adopts embedded Linux, and this module directly provides TCP/IP support simultaneously, and support module adopts Openswan to realize IP security agreement, The protocol acts on the TCP/IP layer to realize the virtual private network routing function. 5. The wireless virtual private network router according to claim 1, characterized in that: said management module has a built-in Web server, and the management content of the management module includes management of hardware and management of virtual private network routing functions.

Images