Abstract: With the increasing popularity of IPSec in encrypted transmission applications at the network layer, its end-to-end characteristics have gradually exposed problems such as low networking efficiency and difficulty in configuration, operation, and maintenance in large-scale networking applications. Currently, the mainstream solutions proposed in the industry can alleviate the above problems to a certain extent, but they all have certain limitations. This paper conducts in-depth research on the establishment mechanisms of IPSec SPDs and SADs, as well as routing access technologies, explores the possibility of integrating them, and finally proposes a new dynamic self-organizing network solution for IPSec entities. This solution can effectively improve the self-organizing efficiency of IPSec entities in large-scale networking applications and reduce the pressure of configuration, operation, maintenance, and support.

Key words: IPSec entity, dynamic ad-hoc network, solution, routing access