IPSec support in NAT-PT scenario for IPv6 transition

초록

Applying IPSec in NAT-PT environment for end-to-end security fails due to the problems caused by the IP header conversion in NAT-PT server. The IP header conversion causes the receiver to fail to verify the TCP/UDP checksum and the ICV value of the AH header. This study analyses potential problems in applying the IPSec between the IPv6-only node and an IPv4-only node, and proposes a solution to enable the receiver successfully verify the IPSec packet. We also analyze that why the existing NAT-traversal solutions in IPv4 fails in NAT-PT environment.