专用协议栈的防火墙内IPSec与NAT协同工作的研究  

Research on Cooperation Between IPSec and NAT in Firewall Based on Special Protocol StacK

作　　者：蒋琳[1] 张会汀[1] 方俊彬[1] 郑力明[1] 

机构地区：[1]暨南大学信息科学技术学院,广州510632

出　　处：《河南师范大学学报（自然科学版）》2005年第1期33-36,共4页Journal of Henan Normal University(Natural Science Edition)

基　　金：广东省科技计划资助项目(2003C101038)

摘　　要：IP安全协议(IPSec)已成为构建虚拟专用网(VPN)的主要安全协议,而网络地址转换(NAT)作为解决目前IP地址危机的有效方法,通常被集成在防火墙系统内,广泛应用在现有的通信网络中.本文详细分析了IPSec与NAT在协同工作时产生的不兼容问题,比较现有的几种解决方案,并在专用协议栈的防火墙内采用 UDP封装的方法解决两者的兼容性问题.Perhaps IPSec is most commonly used in building virtual private network. NAT is widely deployed in Internet as a method to solve lack of IP addresses, usually integrated in firewall. This paper describes incompatibility between IPSec and NAT when they work together, compares some solutions for it, and chooses the method of UDP encapsulation based on special protocol stack to solve the incompatibility.

关 键 词：虚拟专用网 IP安全协议 网络地址转换 封装安全负载 UDP封装 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]