IPSec协议与NAT的兼容性研究

Study of IPSec and Network Address Translation (NAT) Compatibility

本文描述了NAT和IPSec之间的不兼容性,并提出解决这些不兼容性问题的方法。IPSec最普通的用途是用于提供虚拟专用网(VPNs)。VPN非常流行的一个用途是为远程工作人员提供与公司网络连接的方法。现在,Nat被广泛的配置于内部网关,以及其他远程工作人员可能工作的场所,比如宾馆。这使得IPSec与NAT之间的不兼容性成为IPSec配置及广泛使用的巨大障碍。

This document describes incompatibilities between Network Address Translation (NAT) and IPSec, and describes the methods for resolve them. Perhaps the most common use of IPSec is in providing virtual private networking capabilities. One very popular use of Virtual Private Networks (VPNs) is to provide telecommuter access to the corporate Intranet. Today, NAT are widely deployed in home gateways, as well as in other locations likely to be used by telecommuters, such as hotels. The result is that IPSec-NAT incompatibilities have become a major barrier in the deployment of IPSec in one of its principal uses.