基于TCP封装的IPSec和NAT协同方案  

Solution to compatibility between IPSec and NAT based on TCP encapsulation

作　　者：曹利峰[1] 杜学绘[1] 陈性元[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2007年第18期4370-4372,4376,共4页Computer Engineering and Design

基　　金：河南省自然科学基金项目(994060100)。

摘　　要：对IPSec和NAT协同问题进行了研究,并对现有的解决方法进行了分析和比较。在UDP封装方案基础之上,给出了一种基于TCP的安全封装方案。该方案基于TCP协议,采用数字证书和轨迹跟踪技术等解决了IPSec与NAT的兼容性问题。最后,给出了Linux2.6下的一体化设计与实现过程。Compatibility between IPSec and NAT is studied, and the existing solutions to which are made a comparison. Based on the case of UDP encapsulation, a secure solution based TCP encapsulation is put forward. The case which uses many kinds of network security technologies such as digital certificate and protocol connection tracking solve the compatibility of IPSec and NAT. Finally, the project of TCP encapsulation based on the viewpoint of integration design is realized in Linux 2.60S.

关 键 词：TCP封装 网络地址翻译 IP安全协议 轨迹跟踪 一体化 兼容性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]