NAT-T
E123430
NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
All labels observed (5)
| Label | Occurrences |
|---|---|
| NAT-T canonical | 2 |
| IPsec traversal through NAT devices | 1 |
| NAT | 1 |
| NAT-T (UDP encapsulation for IPsec) | 1 |
| Network Address Translation Traversal | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T1077106 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: NAT-T Context triple: [IPsec, hasExtension, NAT-T]
-
A.
NAT64
NAT64 is a network address translation mechanism that enables IPv6-only clients to communicate with IPv4 servers by translating between the two protocol address spaces and packet formats.
-
B.
Teredo
Teredo is a tunneling protocol that enables IPv6 connectivity for devices on IPv4 networks, particularly those behind NAT.
-
C.
IPsec
IPsec is a suite of protocols that provides secure, encrypted communication over IP networks by authenticating and protecting the integrity and confidentiality of data packets.
-
D.
TUN
TUN is the three-letter ISO 3166-1 alpha-3 country code assigned to Tunisia.
-
E.
SCTP
SCTP (Stream Control Transmission Protocol) is a transport-layer network protocol designed to provide reliable, message-oriented communication with features like multi-streaming and multi-homing, often used for signaling and real-time data transmission.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: NAT-T Target entity description: NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
-
A.
NAT64
NAT64 is a network address translation mechanism that enables IPv6-only clients to communicate with IPv4 servers by translating between the two protocol address spaces and packet formats.
-
B.
Teredo
Teredo is a tunneling protocol that enables IPv6 connectivity for devices on IPv4 networks, particularly those behind NAT.
-
C.
IPsec
IPsec is a suite of protocols that provides secure, encrypted communication over IP networks by authenticating and protecting the integrity and confidentiality of data packets.
-
D.
TUN
TUN is the three-letter ISO 3166-1 alpha-3 country code assigned to Tunisia.
-
E.
SCTP
SCTP (Stream Control Transmission Protocol) is a transport-layer network protocol designed to provide reliable, message-oriented communication with features like multi-streaming and multi-homing, often used for signaling and real-time data transmission.
- F. None of above. chosen
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
IPsec extension
ⓘ
network protocol mechanism ⓘ |
| affectedBy | firewall UDP filtering policies ⓘ |
| alternativeTo |
IPsec over TCP
ⓘ
SSL VPN in some scenarios ⓘ |
| category |
VPN technology
ⓘ
network security technology ⓘ |
| commonlyImplementedIn |
consumer VPN clients
ⓘ
enterprise VPN gateways ⓘ home broadband routers with VPN support ⓘ |
| compatibleWith |
AH (with limitations)
ⓘ
ESP ⓘ |
| definedIn |
RFC 3947
ⓘ
RFC 3948 ⓘ |
| enables | IPsec traffic through NAT devices ⓘ |
| encapsulates | IPsec packets in UDP ⓘ |
| fullName | NAT Traversal ⓘ |
| hasLimitation |
adds encapsulation overhead
ⓘ
may fail if UDP port 4500 is blocked ⓘ |
| improves |
IPsec interoperability with enterprise firewalls
ⓘ
IPsec interoperability with home routers ⓘ |
| mayBeUsedWith | carrier-grade NAT (CGNAT) ⓘ |
| operatesAtLayer |
network layer
ⓘ
transport layer ⓘ |
| performs | NAT keepalive ⓘ |
| primaryGoal | allow IPsec to traverse NAT devices ⓘ |
| relatedTo |
IKE
ⓘ
IKEv1 ⓘ IKEv2 ⓘ |
| requires |
IKE negotiation of UDP encapsulation
ⓘ
NAT detection ⓘ UDP checksum handling by NAT devices ⓘ support on both VPN endpoints ⓘ |
| solves | IPsec and NAT incompatibility ⓘ |
| standsFor |
Network Address Translation Traversal
ⓘ
linked to:
NAT-T
|
| supports | VPN traffic ⓘ |
| usedBy |
IPsec-based remote access clients
ⓘ
IPsec-based site-to-site tunnels ⓘ |
| usedIn |
remote access VPN
ⓘ
road-warrior VPN scenarios ⓘ site-to-site VPN ⓘ |
| usedWith | IPsec ⓘ |
| uses |
NAT-keepalive packets
ⓘ
UDP encapsulation of ESP packets ⓘ |
| usesDefaultPort | 4500 ⓘ |
| usesTransportProtocol | UDP ⓘ |
| worksWith | IPv4 NAT ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: NAT-T Description of subject: NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
Referenced by (6)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: NAT-T
linked to: NAT-T