RESEARCH ON IPSEC-BASED NAT-PT TRANSITION MECHANISM

摘要：

Similar to conventional NAT technology, NAT-PT gateways break traditional TCP/IPs end-to-end argument property which result in IPSec can not be applied in NAT-PT environment, and would fall flat when the pool of IPv4 addresses is exhausted. A solution by adding IP transform message, modifying the address mapping tables and session tables, using port transform strategy with inner host computer character in IKE negotiation was proposed which implemented bidirectional communication among the nodes of IPv4 and IPv6, and made NAT-PT compatible with ESP and AH. Performance analysis shows that the proposed scheme is feasible and effective.

关键词： IPSec NAT-PT Transition Mechanism IKE negotiation

作者: Weiping Peng Yajian Zhou Cong Wang Yixian Yang

作者单位: Key Laboratory of network and information attack & defence technology of MOE,Beijing University of P Key Laboratory of network and information attack & defence technology of MOE,Beijing University of P

会议类型: 国际会议

会议名称: 2009 IEEE International Conference on Network Infrastructure and Digital Content(2009年IEEE网络基础设施与数字内容国际会议 IEEE IC-NIDC2009)

会议地点: 北京

会议语种:英文

页码: 222-226

在线出版日期: 2009-11-06（万方平台首次上网日期，不代表论文的发表时间）