Technology Of Fire Wall And Network Security Study On IPV6-Based

With the actualization of CERNET2, which is the core net of CNGI, the all kinds of application based on Ipv6 has become hotspot in academic and commerce fields. As the Net security protector based on Ipv4—firewall, whether it is suitable for the applications based on Ipv6 and how to apply are the critical topic of this papers.By the comparing between the function and development of firewall with the function of Ipsec, the author conclude the necessary of firewall based on Ipv6 and bring forward a strategy of firewall combing IPSec. This strategy setup port information in the IP header, which can make the firewall filtrate the IP address, port and package based on Ipv6.The author build the Ipv6 local network environment in lab and complete the main function of firewall.In the experiment:1. Testing firewall Filter-delay, and computing throughput using this firewall.2. Testing the ability of the firewall against the virus by simulating virus package.Proving the practicality value of this strategy by the experiment.