摘要： IPSEC与NAT互操作已成为网络技术的一个关键问题。NAT修改了IPSEC包的IP地址及端口,破坏了IPSEC端到端的完整性。分析了IPSEC和NAT的相关原理、IPSEC与NAT协同工作中出现的问题、实现IPSEC-NAT的要点,给出了IPSEC-NAT的实现方案及其优缺点。

关键词: Internet网络层协议安全, 网络地址翻译, 域限定Internet的协议, UDP封装

Abstract: Interoperation between IPSEC and NAT is a key technology of network. NAT breaks the integrality of IPSEC through changing the IP addresses and ports of IPSEC packages. The paper analyzes the theories of IPSEC and NAT , the problems of IPSEC-NAT, the requirements for IPSEC- NAT. In the end, it analyzes some solutions of IPSEC-NAT and their advantages and disadvantages.

中图分类号: 

• TP393