Analyse des fonctions des protocoles ipsec et leur intégration dans un réseau privé virtuel

Many approaches may lead to integrate security functions in the intranet/internet services. These functions may be placed at the application layer or at lower OSI layers. IPsec suite protocols were specified by IETF in order to integrate security functionality at network layer. This paper describes the features of IPESC protocols and identifies the aspects which are not standardized. The network translation address (nat) functionality used by routers and firewalls is not always compatible with IPESC. We describe and discuss some solutions for the compatibility of ipsec and nat. The last part of this paper describes a typical architecture for ip vpn based on IPSec technology.