Zte ZXR10 ZSR V2 Series - Ipsec NAT Traversal

ZXR10 ZSR V2 Series Router Product Description
26 ZTE Confidential & Proprietary
 Authentication: It means confirming the identity of communicating parties.
ZXR10 ZSR V2 supports the pre-shared key authentication. An
authenticator generates a key, and Different authenticators cannot
generate the same key on both sides.
 Identity protection: After a key is generated, identity data is encrypted for
protection in the transport.
 Support AH and ESP protocols and their mixed use.
 Transmit a packet in tunnel mode or transfer mode.
 Provide two general hash algorithms to ensure that no data is modified in the
transport.
 HMAC-MD5: Use 128-bit shared key for hash calculation.
 HMAC-SHA-1: Use 160-bit shared key for hash calculation.
 Support such encryption algorithms as DES-CBC, 3DES-CBC, AES-128-CBC,
AES-192-CBC, and AES-256-CBC.
 Support IPSec DPD detection.
 Support IPSec NAT traversal.
 Support IPSec+GRE networking.
 Support IPSec and VRF association.
3.5.2 IPSec NAT traversal
In network applications, if there is a routing equipment between two IPSec routers, the
IPSec router have to support NAT traversal. The NAT traversal mainly includes NAT-T
negotiation in IKE and using UDP to encapsulate and decapsulate the ESP packet.