TWI365651B - Preventing duplicate sources from clients served by a network address port translator - Google Patents

Preventing duplicate sources from clients served by a network address port translator

Info

Publication number
TWI365651B
TWI365651B TW095112554A TW95112554A TWI365651B TW I365651 B TWI365651 B TW I365651B TW 095112554 A TW095112554 A TW 095112554A TW 95112554 A TW95112554 A TW 95112554A TW I365651 B TWI365651 B TW I365651B
Authority
TW
Taiwan
Prior art keywords
network address
address port
preventing duplicate
clients served
port translator
Prior art date
Application number
TW095112554A
Other languages
English (en)
Other versions
TW200708009A (en
Inventor
Patricia A Jakubik
Linwood Hugh Overby Jr
Joyce Anne Porter
David John Wierbowski
Original Assignee
Ibm
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ibm filed Critical Ibm
Publication of TW200708009A publication Critical patent/TW200708009A/zh
Application granted granted Critical
Publication of TWI365651B publication Critical patent/TWI365651B/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2517—Translation of Internet protocol [IP] addresses using port numbers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272—Virtual private networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/164—Implementing security features at a particular protocol layer at the network layer

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)
TW095112554A 2005-04-11 2006-04-07 Preventing duplicate sources from clients served by a network address port translator TWI365651B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US10/907,661 US7656795B2 (en) 2005-04-11 2005-04-11 Preventing duplicate sources from clients served by a network address port translator

Publications (2)

Publication Number Publication Date
TW200708009A TW200708009A (en) 2007-02-16
TWI365651B true TWI365651B (en) 2012-06-01

Family

ID=36636455

Family Applications (1)

Application Number Title Priority Date Filing Date
TW095112554A TWI365651B (en) 2005-04-11 2006-04-07 Preventing duplicate sources from clients served by a network address port translator

Country Status (8)

Country Link
US (1) US7656795B2 (zh)
EP (1) EP1872561B1 (zh)
JP (1) JP4766574B2 (zh)
CN (1) CN101156420B (zh)
BR (1) BRPI0607515B1 (zh)
CA (1) CA2602778C (zh)
TW (1) TWI365651B (zh)
WO (1) WO2006108805A1 (zh)

Families Citing this family (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030158959A1 (en) * 2002-02-15 2003-08-21 Jay Jayapalan Establishment of communications using point to point protocols such that duplicate negotiations are avoided
US8787393B2 (en) * 2005-04-11 2014-07-22 International Business Machines Corporation Preventing duplicate sources from clients served by a network address port translator
JP4709583B2 (ja) * 2005-05-31 2011-06-22 株式会社東芝 データ送信装置およびデータ送信方法
CN1937531B (zh) * 2006-08-28 2010-05-12 华为技术有限公司 检测维护组完整性的方法及装置和增加端点的方法及装置
JP2009111437A (ja) * 2007-10-26 2009-05-21 Hitachi Ltd ネットワークシステム
CN101631113B (zh) * 2009-08-19 2011-04-06 西安西电捷通无线网络通信股份有限公司 一种有线局域网的安全访问控制方法及其系统
CN101635710B (zh) * 2009-08-25 2011-08-17 西安西电捷通无线网络通信股份有限公司 一种基于预共享密钥的网络安全访问控制方法及其系统
WO2012111222A1 (ja) 2011-02-17 2012-08-23 日本電気株式会社 ネットワークシステム、及びネットワークフロー追跡方法
CN102984068B (zh) * 2012-11-23 2016-08-03 汉柏科技有限公司 实现报文穿越网络地址转换设备的方法
US9525627B2 (en) 2014-05-27 2016-12-20 Google Inc. Network packet encapsulation and routing
CN106210095B (zh) * 2016-07-18 2020-01-24 新华三技术有限公司 一种端口处理方法和装置
US11095617B2 (en) 2017-12-04 2021-08-17 Nicira, Inc. Scaling gateway to gateway traffic using flow hash
US11245697B2 (en) * 2019-11-29 2022-02-08 Juniper Networks, Inc. Application-based network security
US11902264B2 (en) * 2020-06-22 2024-02-13 Vmware, Inc. Path selection for data packets encrypted based on an IPSEC protocol
CN112242943B (zh) * 2020-11-26 2022-08-16 迈普通信技术股份有限公司 IPSec隧道建立方法及装置、分支设备、中心端设备
TWI793904B (zh) * 2021-12-08 2023-02-21 中華電信股份有限公司 為本地服務進行訊務轉址的行動邊緣運算裝置和方法
CN114465755B (zh) * 2021-12-15 2024-02-23 广西电网有限责任公司电力科学研究院 基于IPSec传输异常的检测方法、装置及存储介质
US11863514B2 (en) 2022-01-14 2024-01-02 Vmware, Inc. Performance improvement of IPsec traffic using SA-groups and mixed-mode SAs
US11956213B2 (en) 2022-05-18 2024-04-09 VMware LLC Using firewall policies to map data messages to secure tunnels

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6615357B1 (en) 1999-01-29 2003-09-02 International Business Machines Corporation System and method for network address translation integration with IP security
US7684317B2 (en) * 2001-06-14 2010-03-23 Nortel Networks Limited Protecting a network from unauthorized access
US7747758B2 (en) * 2001-10-29 2010-06-29 International Business Machines Corporation Dynamic port assignment
US20030154306A1 (en) * 2002-02-11 2003-08-14 Perry Stephen Hastings System and method to proxy inbound connections to privately addressed hosts
US7143137B2 (en) * 2002-06-13 2006-11-28 Nvidia Corporation Method and apparatus for security protocol and address translation integration
KR100479261B1 (ko) 2002-10-12 2005-03-31 한국전자통신연구원 네트워크 주소 변환 상에서의 데이터 전송 방법 및 장치
US7346770B2 (en) 2002-10-31 2008-03-18 Microsoft Corporation Method and apparatus for traversing a translation device with a security protocol
US7386881B2 (en) * 2003-01-21 2008-06-10 Swander Brian D Method for mapping security associations to clients operating behind a network address translation device
CN100505634C (zh) * 2003-06-23 2009-06-24 腾讯科技（深圳）有限公司 数字信息穿透nat/fw的方法和系统
US20050166206A1 (en) * 2004-01-26 2005-07-28 Parson Dale E. Resource management in a processor-based system using hardware queues
JP4489008B2 (ja) * 2005-11-16 2010-06-23 株式会社東芝 通信装置、通信方法および通信プログラム

Also Published As

Publication number Publication date
BRPI0607515A2 (pt) 2016-10-25
CA2602778C (en) 2014-04-01
JP2009532919A (ja) 2009-09-10
US20060227807A1 (en) 2006-10-12
CA2602778A1 (en) 2006-10-19
EP1872561B1 (en) 2012-11-07
BRPI0607515B1 (pt) 2020-04-22
CN101156420A (zh) 2008-04-02
WO2006108805A1 (en) 2006-10-19
JP4766574B2 (ja) 2011-09-07
CN101156420B (zh) 2011-07-20
US7656795B2 (en) 2010-02-02
TW200708009A (en) 2007-02-16
EP1872561A1 (en) 2008-01-02

Similar Documents

Publication Publication Date Title
TWI365651B (en) Preventing duplicate sources from clients served by a network address port translator
EP2127250A4 (en) OFF-BAND MAINTENANCE MECHANISM FOR CUSTOMERS ASSOCIATED WITH NETWORK ADDRESS TRANSLATION SYSTEMS
EP1878179A4 (en) GATEWAYS FOR PRIVATE NETWORKS FOR CONNECTING PRIVATE NETWORKS UNDER ONE ACCESS NETWORK
EP2408146B8 (en) Zigbee/IP gateway
EP1832069B8 (en) Voip network infrastructure components
EP1904930A4 (en) BASIC NETWORK BAND WIDTH SHARING AT THE BACK OF GATEWAY DEVICES
EP1929655A4 (en) PROTOCOL EXTENSION FOR HIGH DENSITY NETWORK
EP1932264A4 (en) CONVERGENT NETWORK HIERARCHIQUE, DISTRIBUTED AND SECURE
EP1932082A4 (en) ROUTING ON NETWORK
GB2439195B8 (en) Self-managed distributed mediation networks.
GB2432494B (en) Resilient network
EP1899842A4 (en) NETWORK MEETINGS TYPE 'PEOPLE NEAR ME'
EP1920560A4 (en) ADAPT TO DIFFERENT NETWORK PANEL
EP1859645B8 (en) Multiple access service convergence
GB0508491D0 (en) Network service provisioning using DHCP snooping
AU2006311709A8 (en) Service interfacing for telephony
EP2027675A4 (en) Operator managed virtual home network
EP1941648A4 (en) SECURE GATEWAY WITH REDUNDANT SERVER
ZA200401489B (en) Network printer connection update scheme for printer clients.
EP2087654A4 (en) COMPLEX NETWORK MAPPING
EP1949240A4 (en) TRUSTED COMMUNICATION NETWORK
WO2009122294A3 (en) Spatial clustering
GB0719578D0 (en) Resilient network
AU2006902464A0 (en) Network protocol
GB0613684D0 (en) Onload network protocol stack

Legal Events

Date Code Title Description
MM4A Annulment or lapse of patent due to non-payment of fees