基于Dynamips平台的IPSEC与NAT技术合成研究
Research on IPSEC and NAT Synthesis Technology based on Dynamips platform
周全 黄标 李旸 汪泉 刘建中 张斌 严小燕
作者信息
摘要
网络安全协议(IPSec)和网络地址转换(NAT)是当前的热点网络技术。然而由于二者功能上的矛盾,IPSec和NAT之间的冲突一直存在。本研究分析了IETF提出的UDP封装方案,并在基于Dynamips仿真平台上,利用Cisco高级路由交换镜像设计方案,实现了IPsec报文对NAT设备的透明穿越。该方案有效地支持了IPSec数据流传输路径中的NAT转换,从而促使IPSec和NAT合成,为进一步的IPSec与NAT的协议合成一体化研究提供了实验依据。Abstract
Security Architecture for IP network (IPSec) and Network Address Translation (NAT) is the current hot spot network technology. However, due to their contradiction on functions, there have always been the conflicts between IPSec and NAT. This research analyzes the UDP encapsulation programmer, making use of the high route-switch CISCO IOS, designs the implementation programmer to make sure the transparent throughout between the IPSEC packet and NAT equipment. The programmer effectively supports the IPSec data transmission path in the NAT conversion, and thereby facilitates the synthesis of IPSec and NAT, providing the basis for the further research on the protocol integration of the IPSec and NAT. 关键词
NAT/IPSec/Dynamips仿真/技术合成Key words
NAT/IPSec/Dynamips Simulation/Synthesis Technology引用本文复制引用
周全,黄标 ,李旸,汪泉,刘建中,张斌,严小燕.基于Dynamips平台的IPSEC与NAT技术合成研究[EB/OL].(2008-05-22)[2025-12-14].http://www.paper.edu.cn/releasepaper/content/200805-634.学科分类
通信
评论