增强的NAT-PT和IPSec兼容解决方案  

Enhanced Compatibility Solution Between NAT-PT and IPSec

作　　者：张志龙[1] 杜学绘[1] 钱雁斌[1] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004

出　　处：《计算机工程》2008年第22期148-149,152,共3页Computer Engineering

摘　　要：分析IPv4/IPv6过渡时期NAT-PT和IPSec协议的兼容性解决方案,并基于此提出一种增强的IPSec分段保护方案,通过对IKE协议的适当改进增加了发起方对NAT-PT转换网关的发现和自动处理机制,提高了NAT-PT转换网关的透明性。性能分析显示该方案具有较好的安全性和适应性,便于过渡网络安全策略的实施。This paper analyzes the solution about the compatibility between IPSec and Network Address Translation-Protocol Translation（NAT-PT） in IPv4/IPv6 interim, and puts forward an enhanced IPSec application solution In segments. It increases the discovery and automatic mechanism through the improvement to IKE protocol, and improves the transparence of the NAT-PT translation gateway. The performance analysis shows that it is more secure and flexible, and is convenient for the implement of security strategy in transition network.

关 键 词：协议转换 分段协商 转换网关 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]