Research On Ipsec-based Nat-pt Transition Mechanism

The theory and the practice all proved that, in basic, the IPv4 network world does not have reversible to the IPv6 network world evolution, but the IPv4 network world evolves to the IPv6 network world is not impossibly between a night, will be one long -term, therefore , the evolution process must develop the IPv4/IPv6 intercommunication technology to guarantee IPv4 can transit steadily IPv6. NAT-PT took one kind of agreement interpreter technology will act an important role in the IPv4/IPv6 transition. IPSec is the IP packet level security to provide protection for IP protocol standards. Cryptography is the basic purpose of the introduction of IP security mechanism. The use of modern methods to support security and password authentication services so that users have a choice to use, and get the desired security services.This paper makes a detailed study and the opportunity to combine of these two areas. How to build a good program based on NAT-PT mutually compatible and can be used in the paper is IPSec The research focus and the main issues that must be resolved. Specifically, the paper introduced the related knowledge of NAT-PT transition technology and the IPSec security protocol, insufficient analysis of the technology itself, the incompatibility analysis of the NAT-PT technical and IPSec security protocol between; Secondly, IKE consultations on the proposed improvement program, provide the basis for future programs; Then, The idea of a global registered IPv4 addresses establishment of a large number of conversation of IPv4-only node to IPv6-only nodes and vice versa. addresses and details of the conversion process;Third, in the NAT-PT transition environment from IPv4 and IPv6 Node compatible AN authentication and ESP encryption certification program, and shows Generation ESP encryption package, test ESP encryption packages and generation AH certification package, AH certification test kits; Finally, a number of network equipment work together NAT-PT model, The relevant data structure, the allocation of IPv6 address prefix, design load balancer strategy.