| 针对ICMP报文处理问题的IPSec协议改进方案 |
| |
| 引用本文： | 胡少凤,李之棠. 针对ICMP报文处理问题的IPSec协议改进方案[J]. 计算机工程与科学, 2004, 26(2): 11-14 |
| |
| 作者姓名： | 胡少凤 李之棠 |
| |
| 作者单位： | 华中科技大学计算机学院,湖北,武汉,430074;华中科技大学计算机学院,湖北,武汉,430074 |
| |
| 摘 要： | IPSec应用在通道模式下时，对原始IP数据报另外封装了一个外部通道IP头(其中的源、目的地址分别指向实施IPSec的起始、终止端点的地址)，导致报文传输途中的路由器对其封装的IP数据报所产生的ICMP差错报文不能在因特网上进行正确转发。该问题是一个难解决的问题，目前暂无成熟可行的方案。针对此问题，本文提出两种对IPSec协议进行改进的方案，均能保证在不影响原有IPSec实施效率的前提下，解决该难题。
|
| 关 键 词： | IPSec IPIP ESP AH 传输模式 通道模式 ICMP HAPP SII SIIP |
| 文章编号： | 1007-130X(2004)02-0011-04 |
| 修稿时间： | 2002-09-11 |
An Improved IPSec Protocol Scheme for the Problem of ICMP Packet Processing |
| |
| HU Shao-feng,LI Zhi-tang. An Improved IPSec Protocol Scheme for the Problem of ICMP Packet Processing[J]. Computer Engineering & Science, 2004, 26(2): 11-14 |
| |
| Authors: | HU Shao-feng LI Zhi-tang |
| |
| Abstract: | When IPSec is used in the tunneling mode, an additional external tunnel IP header to the initial IP packet is adjoined, in which the source and destination addresses are pointed to the original and final nodes that implement IPSec protocols respectively. This causes the router in packet transferring cannot forward correctly the ICMP error packets generated by its encapsulated IP data packets on the Internet. This is a hard nut to crack and there is now no mature and feasible scheme. The improved IPSec protocol scheme for this problem can give a satisfactory resolution without decreasing the efficiency of the current IPSec. |
| |
| Keywords: | IPSec IPIP ESP AH translating mode tunneling mode ICMP HAPP SII SUP |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与科学》浏览原始摘要信息 |
|
点击此处可从《计算机工程与科学》下载全文 |
