| What is NAT-T ? |
| General Info - General Info |
| Tuesday, 23 March 2010 11:10 |
|
NAT-T (NAT Transversal) allows for IP-ESP packets to transverse devices which introduce NAT. The problem with IPSec is that it uses the IP-ESP protocol naively. The ESP protocol doesn't have "port-numbers" like TCP and UDP so NAT does not know how to translate the traffic because NAT/PAT is based on port numbers. With NAT-T the ESP packets are encapsulated within UDP packets (normally UDP/4500). Now that the packets are UDP based the NAT device can correctly NAT the traffic due to being to change the port numbers due to having the required packet headers. |
Latest Articles
- Tool - SSLReport
- Brocade ADX - How to perform an image upgrade
- Cisco ASA reboots/crashes when running the command 'show service-policy interface outside set connection detail'
- Brocade ADX - Persistence
- How to define a port range on a Juniper SRX
- Path MTU Discovery (PMTUD) / Path MTU Black Holes
- Mitigating DoS attacks on a Cisco ASA
- How do I clear the Cisco ASA connection counters ?
- High CPU Usage on a Cisco CSS
- How to clone a MySQL database
- Brocade ADX - Configuring SSL
- Brocade ADX - Content Switching Rewrite
- Joomla - How to add a custom field
- BigIP F5 LTM - How to Create a Sorry Page with Image
- BigIP F5 LTM - TCP Syslog
- Cisco ASA - Traffic blocked when TCP syslog server is unreachable
- Excel - Unable to open file
- Brocade ADX - DoS Protection
- Brocade ADX - LoadBalancing Methods
- Brocade ADX - Healthcheck Elements
Popular
- Proxy ARP – SPLAT
- Check Point Commands
- IPSO - Commands
- ASA 8.3 - How to configure NAT
- vSphere - Creating User and Group Permissions
- PEMU - Free Cisco PIX Firewall Emulator / Simulator
- Juniper Netscreen Commands
- Juniper - NAT Explained
- Configuring Wireless Connectivity within Backtrack 4 r2
- ESX Convertor - The session is not authenticated
- How do I install snmpwalk / snmpget using Yum ?
- Netscreen - NSRP
- ESX - ViClient Cannot connect to host
- Troubleshooting a Netscreen Site 2 Site VPN
- Endpoint Connect Installation / Troubleshooting Guide
- ESXi - Connecting to a named pipe
- Check Point - How to Reset SIC
- ESXi White Box - HP DL140
- DNS / nslookup - How to find the root servers ?
- Netscreen - Routing Basics / Virtual Routers / PBR