RFC 4302 - IP Authentication Header (IP 认证头)

• 状态: Proposed Standard
• 发布日期: December 2005
• Stream: IETF
• 废弃了: RFC2402
• 勘误: 无勘误

---

Abstract (摘要)

本文档描述了 IP Authentication Header (IP 认证头, AH) 的更新版本, 旨在为 IPv4 和 IPv6 提供认证服务 (authentication services)。本文档废弃了 RFC 2402 (1998年11月)。

Contents

• 1. Introduction (简介)
• 2. Authentication Header Format (认证头格式)
  • 2.1. Next Header (下一个头部)
  • 2.2. Payload Length (载荷长度)
  • 2.3. Reserved (保留字段)
  • 2.4. Security Parameters Index (安全参数索引, SPI)
  • 2.5. Sequence Number (序列号)
    • 2.5.1. Extended (64-bit) Sequence Number (扩展64位序列号)
  • 2.6. Integrity Check Value (完整性校验值, ICV)
• 3. Authentication Header Processing (认证头处理)
  • 3.1. Authentication Header Location (认证头位置)
    • 3.1.1. Transport Mode (传输模式)
    • 3.1.2. Tunnel Mode (隧道模式)
  • 3.2. Integrity Algorithms (完整性算法)
  • 3.3. Outbound Packet Processing (出站数据包处理)
    • 3.3.1. Security Association Lookup (安全关联查找)
    • 3.3.2. Sequence Number Generation (序列号生成)
    • 3.3.3. Integrity Check Value Calculation (完整性校验值计算)
    • 3.3.4. Fragmentation (分片)
  • 3.4. Inbound Packet Processing (入站数据包处理)
    • 3.4.1. Reassembly (重组)
    • 3.4.2. Security Association Lookup (安全关联查找)
    • 3.4.3. Sequence Number Verification (序列号验证)
    • 3.4.4. Integrity Check Value Verification (完整性校验值验证)
• 4. Auditing (审计)
• 5. Conformance Requirements (一致性要求)
• 6. Security Considerations (安全考虑)
• 7. Differences from RFC 2402 (与 RFC 2402 的差异)
• 8. Acknowledgements (致谢)
• 9. References (参考文献)
  • 9.1. Normative References (规范性参考文献)
  • 9.2. Informative References (信息性参考文献)
• Appendix A: Mutability of IP Options/Extension Headers (IP 选项/扩展头的可变性)
  • A1. IPv4 Options (IPv4 选项)
  • A2. IPv6 Extension Headers (IPv6 扩展头)
• Appendix B: Extended (64-bit) Sequence Numbers (扩展64位序列号)
  • B1. Overview (概述)
  • B2. Anti-Replay Window (防重放窗口)
  • B3. Handling Loss of Synchronization (处理同步丢失)

Copyright Notice (版权声明)

Copyright (C) The Internet Society (2005).

Author's Address (作者地址)

Stephen Kent
BBN Technologies
10 Moulton Street
Cambridge, MA 02138
USA

Phone: +1 (617) 873-3988
Email: [email protected]