With the development of internal private desktop cloud system in National Meteorological Information Center,more and more urgently,it’ s necessary to improve work efficiency by accessing data and APPs with multiple access devices anywhere anytime. Propose the network solution for the external network to access the intranet desktop cloud system,utilizing the Internet and other external network through mobile terminals and other devices to access the desktop cloud system,satisfying business demand. Due to the complexity of the external network,to ensure the safe transmission is key technology in this project. Describe the principle,applicability and security strategy of L2TP over IPSec technique,by using the L2TP over IPSec security tunneling technology,also provide the thoughts,whole access pro-cedure,configuration methods and the corresponding code to achieve the program,and implement an experiment construction instance of private desktop cloud system in National Meteorological Information Center accordingly. This project obtains significant benefits,which fully indicates the applicability of the L2TP over IPSec technology to access the private network in the desktop cloud.%随着国家气象信息中心内部私有桌面云系统的发展，希望通过多种接入设备随时随地访问业务数据和应用、提高工作效率的需求越来越迫切。文中提出了外部网络访问内网桌面云系统的网络方案，利用Internet等外部网络通过移动终端等多种设备访问桌面云系统，满足业务需求。由于外部网络的复杂性，保障安全传输成为该方案的技术关键。文中阐述了L2TP over IPSec技术的原理、适用性及其安全策略，并给出了利用L2TP over IPSec安全隧道技术实现该网络方案的思路及完整的接入过程、配置方法以及相应的代码，实现了基于此方案的国家气象信息中心私有桌面云系统试点建设的实例，取得了良好的收益，充分表明了L2TP over IPSec技术在外网访问私有桌面云的应用中的适用性。
展开▼
