摘要
针对IPSec协议与NAT技术的不兼容性,研究了几种现有的解决方案,论述了UDP封装IPSec应用于IKEv2的解决方案,分析了方案存在的安全隐患,提出了改进措施,并对改进后的方案在解决IPSec与NAT协同工作方面进行了分析描述。
Several methods in existence in allusion to imcompatibilities between IPSec and NAT were discussed. The solution of UDP encapsulation was emphrasized based on IKE version2 negotiation and some improvements on the solution were proposed based on analyzing the existent secure hidden determinants, Then, performance of improved method on cooperation between IPSec and NAT were analyzed.
出处
《计算机工程与设计》
CSCD
北大核心
2005年第7期1918-1921,共4页
Computer Engineering and Design