engleski

Support of NAT Traversal in IKEv2 Implementation

Network Address Translation (NAT) is a mechanism introduced with a primary purpose to postpone the problem of IPv4 addresses shortage, but it also has some other uses, most notably, easier site renumbering. From its introduction in the middle of 90's up until now, usage of NAT solution on the Internet has surged, but in the same time it is a very controversial subject since it introduces many problems into existing protocols. While working on IKEv2 (Internet Key Exchange v2) implementation we had to analyze NAT interrelation with IKEv2 protocol, enumerate problems, analyze them and finally propose appropriate solutions, if they are possible at all. This paper is a result of this analysis and it summarizes our findings. We also describe implementation we've done based on the analysis.

AH; ESP; IKEv2; NAT; tunneling; VPN

nije evidentirano