IPSec的NAT穿越技术应用
Application of NAT Traversal Technology in IPSec
郭慧1
作者信息
- 1. 山西工程科技职业大学,山西晋中 030619
- 折叠
摘要
在总部和分部之间建立IPSec隧道,当分部与总部的专线出现故障时,这是一种安全有效的连接方案.但在实际连接过程中,有的分部只能先由网络中的NAT设备进行地址转换才能访问Internet,而IPSec不允许修改数据包.通过分析IPSec协议 2 种工作模式下数据包封装格式,给出了IPSec的NAT穿越步骤以及具体实例,对IPsec的NAT穿越技术应用具有一定的借鉴意义.
Abstract
Establishing an IPSec tunnel between headquarters and branches is a safe and effective connection solution when the dedicated line between branches fails.However,in the actual connection process,some branches can only access the internet through address translation by NAT devices in the network,while IPSec does not allow packet modification.By analyzing the packet encapsulation formats under two working modes of IPSec protocol,the NAT traversal steps and specific examples of IPSec are provided,which has certain reference significance for the application of NAT traversal technology in IPSec.
关键词
IPSec隧道/NAT穿越技术/NAT设备Key words
IPSec tunnel/NAT traversal technology/NAT devices引用本文复制引用
出版年
2024