| IPSec与NAT协同工作的一种解决方案 |
| |
| 引用本文： | 刘庆华,林邓伟.IPSec与NAT协同工作的一种解决方案[J].河南科技大学学报(自然科学版),2008,29(4). |
| |
| 作者姓名： | 刘庆华 林邓伟 |
| |
| 作者单位： | 焦作大学,信息工程学院,河南,焦作,454003 |
| |
| 摘 要： | Internet网络层安全协议IPSEC和网络地址协议NAT不兼容,这严重限制了IPSEC的应用范围.解决的方法必须是既能使IPSEC数据流穿越NAT,又不必修改路由器和NAT,部署方便.本文分析了现有解决方案的局限性,对IETF(因特网工程任务组)提出的基于UDP封装的IPSec穿越NAT方案进行了改进,提出了一种新的封装格式,即封装整个IPSec数据报,将主机自身的IP地址一同进行封装,经过UDP封装后,其源地址被更改为原始IP地址,保护了原始IP地址和端口号,了IPSec报文对NAT设备的透明穿越.该方案通过对IPSec协议的扩展,有效地支持了IPSec数据流传输路径中的NAT转换.
|
| 关 键 词： | 因特网安全协议 网络地址转换 用户数据 数据传输 |
Implementation on Coorpertation Between IPSec and NAT |
| |
| LIU Qing-Hua,LIN Deng-Wei.Implementation on Coorpertation Between IPSec and NAT[J].Journal of Henan University of Science & Technology:Natural Science,2008,29(4). |
| |
| Authors: | LIU Qing-Hua LIN Deng-Wei |
| |
| Institution: | LIU Qing-Hua,LIN Deng-Wei(Information Engineering Institute,Jiaozuo University,Jiaozuo 454003,China) |
| |
| Abstract: | The application range of IP security protocol(IPSEC)is restricted due to the incompatibility of IPSEC and network address translator(NAT).The rule that must to be followed by the solutions for IPSEC passing through NAT is that IPSEC passes through NAT without any changes to the routers and NAT on the internet.There are limits to the current solutions.Base on the IETF draft,an encapsulation format of UDP is put forward to avoid the conflict between IPSec and NAT.Because the IP address of the senderis necessa... |
| |
| Keywords: | IPSec protocol suit NAT UDP encapsulation IKE |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
