| 一种新的IPSec穿越NAT方案 |
| |
| 引用本文： | 潘登,徐佩霞.一种新的IPSec穿越NAT方案[J].小型微型计算机系统,2005,26(2):195-198. |
| |
| 作者姓名： | 潘登 徐佩霞 |
| |
| 作者单位： | 中国科学技术大学,电子工程与信息科学系,安徽,合肥,230027 |
| |
| 摘 要： | 网络地址转换技术(NAT)和IP安全体系结构(IPSec)在实际中都是得到广泛应用的技术．而最初设计的IPSec无法穿越NAT通信．为了解决这个问题，IETF提出了UDP封装的草案．但是这个方案在多用户接入时无法支持细粒度的安全服务．提出了一种新的IPSec穿越NAT方案．这个方案易于实现，可以支持各种粒度的安全服务，比原UDP封装方案具有更强的兼容性．
|
| 关 键 词： | 因特网安全协议 网络地址转换 UDP封装 虚拟专用网 |
| 文章编号： | 1000-1220(2005)02-0195-04 |
New IPSec-NAT Traversal Solution |
| |
| Pan Deng,XU Pei-xia.New IPSec-NAT Traversal Solution[J].Mini-micro Systems,2005,26(2):195-198. |
| |
| Authors: | Pan Deng XU Pei-xia |
| |
| Abstract: | Network Address Translator (NAT) technology and IPSec technology are widely used in the Internet today. However, original IPSec design was not able to traverse NAT facilities. The IETF prompt a series of drafts solution based on UDP Encapsulation to solve this problem. But this solution is not perfect. While multiple clients behind NAT trying to establish IPSec communications with a certain host simultaneously, fine IPSec services will not be an option. This paper proposed a new IPSec NAT traversal solution. This solution is easy to realize, also this solution may support all kinds of IPSec services and shows much better compatibility then UDP Encapsulations solution. |
| |
| Keywords: | IPSec NAT UDP encapsulation VPN |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
