T-NATPT - A novel proposal for NAT-PT/IPSec traversing

During the IPv6/v4 transition, we are faced with the challenge to ensure the security of interconnections between heterogeneous IP nodes or networks. Unfortunately, the IPSec can not be applied in NAT-PT environment due to the conflict lies between their intrinsic functionalities. In this paper, we propose a novel solution, namely T-NATPT, for ensuring the effective and efficient NAT-PT/IPSec traversal. Inspired by existing NAT-traversal solution, we adopt a UDP-ESP-encapsulated traversing way and improve the process of IKE negotiation accordingly. Two novel schemes for interconnection between different IP protocol domains to support both transport and tunnel modes are also introduced in our solution. Experimental results show that our proposal is feasible, and its performance is efficient to meet general requirements in practice.