Interested to Buy Any Domain ? << Click Here >> for more details...
Why Authentication Header (AH) is not compatible with the
network that using NAT??????
Jitu, looking for u specially...!!!! U knw why i m looking
for u..!!!
- 1 Answers
- 8243 Views
- I also Faced
- E-Mail Answers
Answer Posted / jitendera sinha
AH is a protocol that provides authentication.
of either all or part of the contents of a datagram.
through the addition of a header that is calculated,
based on the values in the datagram.
What parts of the datagram are used for the calculation,
and the placement of the header, depends on the mode(tunnelor transport)and the version of IP (IPv4 or IPv6).
tunnel or transport-------
tunel
/\
/ \
/ \
tunel transport
| |
| |
protect all data pkt protect only data portion
now why it is not compatible with nat nat is mechanism.
to hide your personal ip sometime theoretically
it is a mechanism to convert private ip to public ip
___________________________________________________________
*******
The IPsec Authentication Header (AH) is a case in point. AH runs the entire IP packet, including invariant header fields like source and destination address, through a message digest algorithm to produce a keyed hash.
This hash is used by the recipient to authenticate the packet.
If any field in the original IP packet is modified, authentication will fail and the recipient will discard the packet. AH is intended to prevent unauthorized modification, source spoofing, and man-in-the-middle attacks. But NAT, by definition, \
modifies IP packets. Ergo, AH + NAT cannot work.
In the nat Ip filed is modified so some time Ah is not compatible with nat i am again saying SOME time.
Thanku
Hope this will help to understand you the concepts.
Jitendera sinha
| Is This Answer Correct ? | 2 Yes | 0 No |
Post New Answer View All Answers
Explain the types of communication in ipv4?
What is hold down time formula of ospf?
Explain the major types of networks and explain?
On which base switches take decisions?
i have donE B.E. IN COMPUTER SCIENCE AND THEN CCNA CERTIFICATOIN PLEASW LET ME KNOW IF ANY COMPANIES R HIRING FRESHERS PLEASE REPLY ON MY EMAIL ID karnailthakur@gmail.com
What are the differnt memory use in cisco router?
How much internal and external ad of eigrp protocol?
What purpose does aging serve in a link state protocol?
what is Bandwidth capping
What do you understand by poe (power over ethernet)?
What is the usage of service password encryption?
What is topology in ccna?
What are the possible ways of data exchange in ccna?
What is ping? What is the usage of ping?
Mention what is bootp?
