一种改进的ICMP差错报文处理的IPSec协议

Study on an Improved IPSec Protocol Scheme for the Processing of ICMP Packets

本文分析了IPSec协议在通道模式下对ICMP差错报文不能正确转发的问题,并对原IPSec协议进行改进,提出了一种对SA改进的IPSec解决方案。改进后的方案能够在保持原IPSec特性的基础上解决该问题,并能够与已有的IPSec实施方案兼容。

The transfer of ICMP packets cannot forward correctly to the source host when the IPSec protocol is used in the tunnel mode.Based on the SA of the primary IPSec protocol,an improved IPSec protocol is put forward to avoid the problem of ICMP packet processing.The improved protocol can provide a satisfactory solution and has a good compatibility with the primary IPSec protocol without reducing its specialities.