NAT-T
From Wikipedia, the free encyclopedia
(Redirected from NAT transversal)
NAT-T (NAT Traversal in the IKE) is a method of enabling IPsec-protected IP datagrams to pass through a Network address translator (NAT).
An IP packet is modified while passing through a network address translator device in a manner that is incompatible with Internet Protocol Security (IPsec). NAT-T protects the original IPsec encoded packet by encapsulating it with another layer of UDP and IP headers.
The negotiation during the Internet key exchange (IKE) phase is defined in RFC 3947 and the UDP encapsulation itself is defined in RFC 3948.
Most major networking vendors support NAT-T for IKEv1 in their devices. In Microsoft Windows XP with Service Pack 2 the feature can be enabled [1] but is disabled because of security issues [2].
