期刊文献+

IPsec与NAT兼容性分析与设计 被引量:1

Analysis and design of compatibility between IPsec and NAT
下载PDF
导出
摘要 NAT和IPSEC技术在当前的Internet中得到了广泛的应用,但两者在协议设计时存在的兼容性问题成为了阻碍这两种技术得到进一步应用的关键问题。简要介绍了NAT和IPSEC协议的原理,详细分析了两种协议在兼容性上存在的问题,研究了现有解决此问题的一些技术以及它们各自的优缺点,最后设计并初步实现了一种基于Linux中Netfilter网络框架的支持NAT和IPSEC协同工作的软件模型。 The incompatibility between NAT and IP security protocol has been a major barrier to their application seriously, although they are popular techniques in Internet today. NAT and IP security protocol were introduced briefly. Then the existing incompatibility problems between them were analyzed in detail. ARer researching some known solutions to the barrier, a model supporting interactions between NAT and IP Security based on Linux Netfilter framework was designed and basically realized.
出处 《计算机工程与设计》 CSCD 北大核心 2006年第10期1867-1869,共3页 Computer Engineering and Design
关键词 IPSEC NAT IPSEC-NAT NETFILTER 安全关联 IPsec NAT IPSEC-NAT netfilter security association
  • 相关文献

参考文献9

  • 1Aboba B.IPSEC-NAT Compatibility requirements[EB/OL].http://www.ietf.org/internet-drafts/draft-ietf-ipsec-nat-reqts-00.txt.
  • 2Douglas E.用TCP/IP进行网际互联第1卷[M].北京:电子工业出版社,2001.
  • 3Douglas E.用TCP/IP进行网际互联第3卷[M].北京:电子工业出版社,2001.
  • 4RFC 2709,Security model with tunnel-mode IPSEC for NAT domains[S].
  • 5RFC 2663,IP network address translator terminology and consideration[S].
  • 6Russell R.Llnux netfilter hacking howto[EB/OL].http://Netfilter.samba.org/.
  • 7RFC 2401,Security architecture for the internet protocol[S].
  • 8杨利军.IPSec技术在虚拟专用网中的应用[J].计算机工程与设计,2004,25(8):1289-1290. 被引量:6
  • 9黄治虎,王康,陈丹.基于NAT-PT的IPv6/IPv4转换网关研究[J].计算机工程与设计,2004,25(10):1698-1701. 被引量:2

二级参考文献15

  • 1Kent S,Atkinson R.Security architecture for the internet protocol [S]. RFC2401,1998.
  • 2Glesson G, Lin A. A framework for ip based virtual private networks [S]. RFC2764, 2000.
  • 3NganandDoraswwamy DanHarkins.IPSec新一代因特网安全标准[M].北京:机械工业出版社,2000..
  • 4BruceDavie.多协议标签交换技术与应用[M].北京:机械工业出版社,2001..
  • 5MartinWMurhammer.虚拟私用网络技术[M].北京:清华大学出版社,2000..
  • 6RFC 1883. Internet protocol, version 6 [S].
  • 7RFC 1631.The IP network address translator (NAT) [S].
  • 8RFC 1918. Address allocation for private internets[S].
  • 9RFC 2765. Stateless IP/ICMP translation algorithm (SLIT) [S].
  • 10RFC 2766. Network address translation - protocol translation (NAT-PT) [S].

共引文献6

同被引文献7

  • 1王止戈,彭宇峰,张苏灵,高传善.一种基于预测的Symmetric NAT穿越解决方案[J].计算机工程,2005,31(11):122-123. 被引量:10
  • 2姚志林,刘淑芬,韩正服.IPSec的NAT兼容性改进[J].吉林大学学报(理学版),2005,43(4):450-454. 被引量:4
  • 3魏臻,杨海潮.一种改进的IPSec穿越NAT方案[J].计算机技术与发展,2006,16(8):80-82. 被引量:2
  • 4RFC 3715.IPsec-NAT compatibility requirements[S/OL].http://www.ietf.org/rfc/rfc3715.txt?number371,2004.
  • 5Negotiation of NAT-T in the IKE[EB/OL].http://www3.ietf.org/proceedings/02mar/I-D/draft-ietf-ipsec-nat-t-ike-01.txt,2001.
  • 6RFC3102.Realm specific IP:Framework[S/OL].http://www.ietf.org/rfc/rfc3102.txt?number3102,2001.
  • 7Douglas E Comer.用TCP/IP进行网络互联[M].林瑶,译.4版.北京:电子工业出版社,2001:144-173.

引证文献1

二级引证文献1

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部