Xing Fei,Wu Weiguo,Liu Yi,Qian Depei
(School of Electronics and Information Engineering,Xi'an Jiaotong University, Xi'an 710049, China)
Abstract: An improved scheme of UDP encapsulation is proposed, in which the whole IP package protected by IP security protocol (IPSec) is encapsulated by adding a UDP/IP header. The scheme can solve problems such as AH authentication failure and TCP invalidation resulted from the UDP encapsulation scheme presented by IETF. And the UDP encapsulation scheme is proposed to solve the problem of the incompatibility between network address translation (NAT) and virtual private network (VPN) based on IPSec. The performance detail of the scheme proposed is formulated, and it is easier to be implemented comparing with the original method. The influence of the proposed scheme of UDP encapsulation on the network performance and security in the operation process are discussed.
Keywords:security porotocal;user datagram polotacal encapsulation;network address translation£»virtual private network