【摘要】 IP安全协议(IPSec)已成为构建虚拟专用网(VPN)的主要安全协议,而网络地址转换(NAT)作为解决目前IP地址危机的有效方法,通常被集成在防火墙系统内,广泛应用在现有的通信网络中.本文详细分析了IPSec与NAT在协同工作时产生的不兼容问题,比较现有的几种解决方案,并在专用协议栈的防火墙内采用 UDP封装的方法解决两者的兼容性问题.更多还原

【Abstract】 Perhaps IPSec is most commonly used in building virtual private network. NAT is widely deployed in Internet as a method to solve lack of IP addresses, usually integrated in firewall. This paper describes incompatibility between IPSec and NAT when they work together, compares some solutions for it, and chooses the method of UDP encapsulation based on special protocol stack to solve the incompatibility.更多还原