Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

›› 2004, Vol. 30 ›› Issue (17): 124-.

• Papers • Previous Articles     Next Articles

Analysis of Protocol of Interoperation Between IPSEC and NAT

ZHU Liehuang,WANG Dong   

  1. (Dept. of Computer Science and Engineering, Beijing Institute of Technology, Beijing 100081)
  • Published:2004-09-15

IPSEC与NAT互操作协议分析

祝烈煌,王栋   

  1. 北京理工大学计算机科学与工程系,北京理工大学计算机科学与工程系 北京 100081

Abstract: Interoperation between IPSEC and NAT is a key technology of network. NAT breaks the integrality of IPSEC through changing the IP addresses and ports of IPSEC packages. The paper analyzes the theories of IPSEC and NAT , the problems of IPSEC-NAT, the requirements for IPSEC- NAT. In the end, it analyzes some solutions of IPSEC-NAT and their advantages and disadvantages.

摘要: IPSEC与NAT互操作已成为网络技术的一个关键问题。NAT修改了IPSEC包的IP地址及端口,破坏了IPSEC端到端的完整性。分析了IPSEC和NAT的相关原理、IPSEC与NAT协同工作中出现的问题、实现IPSEC-NAT的要点,给出了IPSEC-NAT的实现方案及其优缺点。

关键词: Internet网络层协议安全, 网络地址翻译, 域限定Internet的协议, UDP封装

CLC Number: