摘要： 基于IPSec的 VPN 是目前应用最广、最有发展前途的一种网络安全解决方案。NAT 则是解决 IPv4 地址短缺问题的主要方法。不幸的是,IPSec 与 NAT 的一些兼容性问题严重限制了 IPSec VPN 的大规模部署。为此,该文在分析 IPSec 与 NAT 兼容性问题的基础上,综合相关 IETF 草案,提出了一个完整的 IPSec-NAT 穿透方案。

关键词: 网络安全, 虚拟专用网, IP安全协议, IPSec-NAT穿透

Abstract: IPSec based VPN is the most promising and widely deployed network security solution. And NAT is the principal answer to the scarcity of IPv4 addresses. Unfortunately, IPSec-NAT incompatibilities have become a major barrier to the wide deployment of IPSec VPN. Therefore, based on the analysis of these incompatibilities and after scrutinizing corresponding IETF drafts, this paper provides a complete solution to this predicament.

中图分类号: 

• TP393.08