IPSec VPN的NAT穿透及应用

IPSec NAT Traversal by Practical Application

I PSec通过一套标准的加密算法和转换集以及密钥管理体系保证了数据在网络中的安全传输。由于目前普遍使用的I Pv4地址资源匮乏,人们不得不在I Pv6技术成熟前使用NAT来解决这一问题,NAT的使用增加了网络的复杂性。讨论VPN实现过程中I PSec对NAT的穿透及两种协议间的不兼容性,并对这种不兼容性问题提出了解决方法,在此基础上进一步通过实际应用分析了I PSec对NAT的穿透。

IPSec keeps data secure while it is being transported across a network by a set of standard encryption algorithm and key management system. Because of the scarcity of IPv4 addresses at the moment, NAT technology has to be used to solve the problem before IPv6 technology is mature. However NAT application has increased the complexity of network. This paper discusses the IPSec NAT traversal in VPN implementation and the incompatibilities between two protocols, then it provides a solution to above-mentioned issues. On this basis, the author further analyzes IPSec NAT traversal by practical application.