RFC 3947

E522223

RFC 3947 is an IETF standard that specifies how to detect and negotiate IPsec NAT Traversal (NAT-T) using IKE.

All labels observed (2)

Label Occurrences
RFC 3947 canonical 2
RFC 3947 (as an Internet-Draft predecessor) 1

How this entity was disambiguated

Statements (44)

Predicate Object
instanceOf IETF Request for Comments
appliesTo IPv4 networks with NAT
area Security
category Standards Track
complements RFC 3948
defines NAT-Discovery (NAT-D) payloads in IKE
NAT-Traversal (NAT-T) capability negotiation in IKE
hash-based NAT discovery method in IKE
mechanism to detect presence of NAT between IPsec peers
mechanism to negotiate use of NAT traversal for IPsec
vendor-independent NAT traversal negotiation
documentType Standards Track RFC
focusesOn operation of IPsec across Network Address Translators
hasIdentifier RFC 3947
intendedProtocol IKE
IPsec
language English
networkLayer Layer 3
obsoletes RFC 3947 (as an Internet-Draft predecessor)
linked to: RFC 3947
publishedBy IETF
Internet Engineering Task Force
publisher RFC Editor
purpose to enable IPsec to function correctly through NAT devices
relatedTo IKE
IKEv1
IPsec
Internet Key Exchange
linked to: IKEv1

NAT Traversal
NAT-T
RFC 3948
scope IKE Phase 1 and Phase 2 exchanges for NAT-T
securityDomain IPsec VPNs
linked to: IPsec

Virtual Private Networks
securityProperty preserves IPsec security semantics when traversing NATs
series Request for Comments
linked to: RFCs
specifies IKE payloads and exchanges for NAT detection
IKE payloads and exchanges for NAT-T negotiation
use of UDP encapsulation for IPsec ESP packets when NAT is detected
standardizes NAT traversal negotiation for IPsec using IKE
status Proposed Standard
stream IETF
title Negotiation of NAT-Traversal in the IKE
updates IPsec NAT traversal behavior for IKEv1
usesTransportProtocol UDP

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

NAT-T definedIn RFC 3947
RFC 3947 obsoletes RFC 3947 (as an Internet-Draft predecessor)
linked to: RFC 3947
RFC 3948 relatedToRFC RFC 3947