2003•Unpublished venueRequires access
Research on Compatibility of IPSec and NAT
Fang Liu
Open publisher page 0 citations
Abstract
IPSec architecture is based on the concept of keeping data secure while it is being transported across a network. Therefore there are problems when packet headers change in transmission across the network, by virtue of NAT devices such as firewalls. This document discusses the incompatibilities between VPN and NAT,and the requirements for firewall traversal. Then a solution is proposed to make both initial IKE negotiations and subsequent authentication / encoded communications across IPSec AH / ESP SAs work.