The two approaches effectively balanced the overhead of IPsec VPN gateway, speeded up the authentication process and improved the timeliness of CRLs a lot.

这两种方案能有效平衡网关开销、提高认证速度并能较大提高有效CRL的及时性。