IPSec support in NAT-PT scenario for IPv6 transition

被引:0
|
作者
Jung, S
Choi, J
Kim, Y
Kim, S
机构
[1] Soongsil Univ, Sch Elect Engn, Seoul 156743, South Korea
[2] Telecommun R&D Ctr Samsung Elect Co Ltd, Suwon 442600, Gyeonggi Do, South Korea
来源
关键词
NAT-PT; IPSec; IPv6; transition; IKE;
D O I
暂无
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
Applying IPSec in NAT-PT environment for end-to-end security fails due to the problems caused by the IP header conversion in NAT-PT server. The IP header conversion causes the receiver to fail to verify the TCP/UDP checksum and the ICV value of the AH header. This study analyses potential problems in applying the IPSec between the IPv6-only node and an IPv4-only node, and proposes a solution to enable the receiver successfully verify the IPSec packet. We also analyze that why the existing NAT-traversal solutions in IPv4 fails in NAT-PT environment.
引用
收藏
页码:194 / 202
页数:9
相关论文
共 50 条
  • [31] 基于IPv6、NAT-PT与L2TP隧道的公司网络拓展
    李铁兵
    信息技术, 2013, 37 (03) : 176 - 179
  • [32] A comparative performance study of IPv6 transitioning mechanisms - NAT-PT vs. TRT vs. DSTM
    Mackay, Michael
    Edwards, Christopher
    NETWORKING 2006: NETWORKING TECHNOLOGIES, SERVICES, AND PROTOCOLS; PERFORMANCE OF COMPUTER AND COMMUNICATION NETWORKS; MOBILE AND WIRELESS COMMUNICATIONS SYSTEMS, 2006, 3976 : 1125 - 1131
  • [33] 基于NAT-PT的IPv4/IPv6综合组网技术研究与设计
    鹿凯宁
    高磊
    大连理工大学学报, 2005, (S1) : 9 - 12
  • [34] 基于NAT-PT的IPv4/IPv6的转换网关在Netfilter框架中的实现
    王帅
    刘雷
    柴乔林
    山东轻工业学院学报(自然科学版), 2006, (03) : 37 - 40
  • [35] 应用Netfilter框架基于NAT-PT的IPv4/IPv6转换网关的实现
    王帅
    刘雷
    柴乔林
    计算机工程, 2006, (13) : 147 - 149
  • [36] Implementation of IPv4-IPv6 translation gateway based on NAT-PT with netfilter framework
    Department of Computer Science and Technology, Shandong University, Ji'nan 250062, China
    不详
    Jisuanji Gongcheng, 2006, 13 (147-149):
  • [37] 基于NAT-PT的分段IPSec隧道建立技术
    顾欢
    软件, 2012, (02) : 136 - 138
  • [38] T-NATPT - A Novel Proposal for NAT-PT/IPSec Traversing
    Lu Yin
    Shi Jin
    Yu Qifeng
    Me Li
    2008 2ND INTERNATIONAL CONFERENCE ON ANTI-COUNTERFEITING, SECURITY AND IDENTIFICATION, 2008, : 144 - 147
  • [39] On IPSec performance testing of IPv4/IPv6 IPSec gateway
    Barylski, Marcin
    PROCEEDINGS OF THE 2008 1ST INTERNATIONAL CONFERENCE ON INFORMATION TECHNOLOGY, 2008, : 175 - 178
  • [40] 增强的NAT-PT和IPSec兼容解决方案
    张志龙
    杜学绘
    钱雁斌
    计算机工程, 2008, 34 (22) : 148 - 149+152