IPSec的NAT穿越技术应用  

Application of NAT Traversal Technology in IPSec

作　　者：郭慧 GUO Hui(Shanxi Vocational University of Engineering Science and Technology,Jinzhong,Shanxi 030619,China)

机构地区：[1]山西工程科技职业大学,山西晋中030619

出　　处：《自动化应用》2024年第10期282-284,共3页Automation Application

基　　金：2022年山西省教育科学“十四五”规划课题“‘新工科’背景下职业本科计算机类实践教学研究”(GH-220313)。

摘　　要：在总部和分部之间建立IPSec隧道,当分部与总部的专线出现故障时,这是一种安全有效的连接方案。但在实际连接过程中,有的分部只能先由网络中的NAT设备进行地址转换才能访问Internet,而IPSec不允许修改数据包。通过分析IPSec协议2种工作模式下数据包封装格式,给出了IPSec的NAT穿越步骤以及具体实例,对IPsec的NAT穿越技术应用具有一定的借鉴意义。Establishing an IPSec tunnel between headquarters and branches is a safe and effective connection solution when the dedicated line between branches fails.However,in the actual connection process,some branches can only access the internet through address translation by NAT devices in the network,while IPSec does not allow packet modification.By analyzing the packet encapsulation formats under two working modes of IPSec protocol,the NAT traversal steps and specific examples of IPSec are provided,which has certain reference significance for the application of NAT traversal technology in IPSec.

关 键 词：IPSec隧道 NAT穿越技术 NAT设备 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]