IPSec的NAT穿越方法的改进研究  

Improvement Study of IPSec NAT-Traversal

作　　者：郭慧[1] 胡艳慧[1] 

机构地区：[1]山西大学商务学院信息学院,太原030031

出　　处：《微计算机应用》2011年第7期38-42,共5页Microcomputer Applications

摘　　要：提出了一种改进的方法,用以解决IPSec和NAT的冲突问题。该方法引入了标识域和会话域。IPSec接收端通过会话域中载荷的TAG_VALUE的后6个字节来识别源IP地址和端口信息,通过标识域识别IKE报文和IPSec报文。报文对NAT是透明的。实验证明该方法能很好地解决在传输模式下多用户接入的问题而且方便实现。The paper put forward an improvement method to solve the conflict between IPSec and NAT.It imports mark and session.The IPSec receiving endpoint recognizes the source IP and port through the last 6 BYTE of TAG_VALUE included in the payload of session.It recognizes the IKE（Internet key exchange） message or IPSec message through mark.The packet is transparent to NAT.The experiment proves that the method can solve the problem that many users insert through transport model well and can be implemented easily.

关 键 词：Internet协议安全 网络地址转换 NAT穿越 INTERNET密钥交换协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]