J. Demerjian, I. Hajjeh, A. Serhrouchni (France), and M. Badra (Canada)
Attribute Certificate, DHCP, IKE, IPsec, NAT, X.509 Identity Certificate
This paper examines the use of NAT with IPsec as a transparent security mechanism. It discusses the security needs and solutions that define how to combine IPsec and NAT. Because of the inherent limitations of current proposed solutions, this paper proposes an end-to-end security architecture using IPsec in the NAT/DHCP environment. This paper is builds upon "E-DHCP: Extended Dynamic Host Configuration Protocol" and "Certificate-Based Access Control and Authentication for DHCP", works previously published.
Important Links:
Go Back