RESEARCH ON IPSEC-BASED NAT-PT TRANSITION MECHANISM

被引：1

作者：

Peng, Weiping ^{[1
]}

Zhou, Yajian ^{[1
]}

Wang, Cong ^{[1
]}

Yang, Yixian ^{[1
]}

机构：

[1] Beijing Univ Posts & Telecommun, Key Lab Network & Informat Attack & Def Technol M, Beijing 100088, Peoples R China

来源：

2009 IEEE INTERNATIONAL CONFERENCE ON NETWORK INFRASTRUCTURE AND DIGITAL CONTENT, PROCEEDINGS | 2009年

关键词：

IPSec; NAT-PT; Transition Mechanism; IKE negotiation;

D O I：

10.1109/ICNIDC.2009.5360823

中图分类号：

TP3 [计算技术、计算机技术];

学科分类号：

0812 ;

摘要：

Similar to conventional NAT technology, NAT-PT gateways break traditional TCP/IP's end-to-end argument property which result in IPSec can not be applied. in NAT-PT environment, and would fall flat when the pool of IPv4 addresses is exhausted. A solution by adding IP transform message, modifying the address mapping tables and session tables, using port transform strategy with inner host computer character in IKE negotiation was proposed which implemented bidirectional communication among the nodes of IPv4 and IPv6, and made NAT-PT compatible with ESP and AH. Performance analysis shows that the proposed scheme is feasible and effective.

引用

页码：222 / 226

页数：5