RFC 3947: Negotiation of NAT-Traversal in the IKE

This document describes how to detect one or more network address translation devices (NATs) between IPsec hosts, and how to negotiate the use of UDP…

Read RFC 3947 on the RFC Editor

Outgoing relationships (6 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 2409: The Internet Key Exchange (IKE)
Normative reference — RFC 2407: The Internet IP Security Domain of Interpretation for ISAKMP
Normative reference — RFC 3948: UDP Encapsulation of IPsec ESP Packets
Informative reference — RFC 3424: IAB Considerations for UNilateral Self-Address Fixing (UNSAF) Across Network Address Translation
Informative reference — RFC 3715: IPsec-Network Address Translation (NAT) Compatibility Requirements

Incoming relationships (11 related RFCs)

Normatively referenced by — RFC 3948: UDP Encapsulation of IPsec ESP Packets
Normatively referenced by — RFC 5265: Mobile IPv4 Traversal across IPsec-Based VPN Gateways
Normatively referenced by — RFC 7146: Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3
Informatively referenced by — RFC 5925: The TCP Authentication Option
Informatively referenced by — RFC 4380: Teredo: Tunneling IPv6 over UDP through Network Address Translations (NATs)
Informatively referenced by — RFC 6269: Issues with IP Address Sharing
Informatively referenced by — RFC 6407: The Group Domain of Interpretation
Informatively referenced by — RFC 6071: IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap
Informatively referenced by — RFC 4093: Problem Statement: Mobile IPv4 Traversal of Virtual Private Network (VPN) Gateways
Informatively referenced by — RFC 5266: Secure Connectivity and Mobility Using Mobile IPv4 and IKEv2 Mobility and Multihoming (MOBIKE)
Informatively referenced by — RFC 4894: Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec