NAT-T

NAT-T (NAT-Traversal in the IKE) is a mechanism in IPsec for UDP encapsulation of the Encapsulating Security Payload packets in order to better go through firewalls. The negotiation during the IKE phase is defined in RFC 3947 and the UDP encapsulation itself is defined in RFC 3948.

= NAT-T RFCs =

; RFC 3715: IPsec-Network Address Translation (NAT) Compatibility Requirements ; RFC 3947: Negotiation of NAT-Traversal in the IKE ; RFC 3948: UDP Encapsulation of IPsec ESP Packets