针对虚拟专用网络中IP安全协议规则制定和配置繁杂、易出现冲突等问题,提出对IP安全协议规则集中的保护访问规则表和保护传输规则表进行形式化,进而采用图形管理的方法,开发出IP安全协议规则分析管理工具软件.通过对真实的IP安全协议规则进行分析检测,该软件判断出规则集中所存在的各类冲突.实验结果表明这种形式化模型能很好地管理IP安全协议规则. In view of the problems of complicated and complicated configuration of IP security protocol rules in virtual private network, and the conflict of IPSec protocol rules, this paper puts forward the formalization of the table of protection access rules and the table of protection transmission rules in IP security protocol rules, and then uses the method of graphic management to develop IP security protocol rule analysis and management software.Through the analysis and detection of the real IP security protocol rules, the software determines the types of conflicts existing in the rule set.The experimental results show that this formalized model can well manage the IP security protocol rule.