摘要
IPSec(IP security protocol)保证数据通过网络安全的传输。网络中的NAT(Network Address Translator)设备改变数据包头中的内容,使用IPSec创建的VPN隧道穿过NAT设备时,产生很多IPSec和NAT之间的不兼容问题。讨论了IPSec和NAT之间的不兼容性,描述了使用IPSec的VPN穿越NAT设备的具体实现方案。这个方案在VPN网关上实现,可以较好地解决IPSec和NAT之间的不兼容问题。
IPSec protocols ensure data secure while it being transported across a network. NAT devices in a network change the data of a package header. There are problems when the VPN tunnel based on IPSec protocols passes through NAT devices. IPSec-NAT incompatibilities are discussed and implement of VPN's NAT traversal is introduced here. It has been implemented in VPN gateways, and solves the IPSec-NAT incompatibilities.
出处
《计算机工程与设计》
CSCD
2004年第10期1800-1801,1823,共3页
Computer Engineering and Design
