IPSec穿越NAT方案研究与改进  

Rearch and improvement on technology of IPSec NAT traversal

作　　者：刘雅辉[1] 张全林[1] 祝跃飞[1] 

机构地区：[1]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2005年第7期1918-1921,共4页Computer Engineering and Design

摘　　要：针对IPSec协议与NAT技术的不兼容性,研究了几种现有的解决方案,论述了UDP封装IPSec应用于IKEv2的解决方案,分析了方案存在的安全隐患,提出了改进措施,并对改进后的方案在解决IPSec与NAT协同工作方面进行了分析描述。Several methods in existence in allusion to imcompatibilities between IPSec and NAT were discussed. The solution of UDP encapsulation was emphrasized based on IKE version2 negotiation and some improvements on the solution were proposed based on analyzing the existent secure hidden determinants, Then, performance of improved method on cooperation between IPSec and NAT were analyzed.

关 键 词：IPSEC协议 NAT技术 IKEV2 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]