• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2007, Vol. 29 ›› Issue (3): 27-29.

• 论文 • 上一篇    下一篇

一种改进的ICMP差错报文处理的IPSec协议

陈传波 姜正强 郑运平   

  • 出版日期:2007-03-01 发布日期:2010-05-30

  • Online:2007-03-01 Published:2010-05-30

摘要:

本文分析了IPSec协议在通道模式下对ICMP差错报文不能正确转发的问题,并对原IPSec协议进行改进,提出了一种对SA改进的IPSec解决方案。改进后的方案能够在保持原IPSec特性的基础上解决该问题,并能够与已有的IPSec实施方案兼容。

关键词: IPSec ICMP HII VPN 通道模式

Abstract:

The transfer of ICMP packets cannot forward correctly to the source host when the IPSec protocol is used in the tunnel mode.Based on the SA of the primary IPSec protocol,an improved IPSec protocol is put forward to avoid the problem of ICMP packet processing.The improved protocol can provide a satisfa ctory solution and has a good compatibility with the primary IPSec protocol without reducing its specialities.

Key words: IPSec;ICMP;HII;VPN;tunnel mode