Research On IPv6-Based CNGI Customer Premises Network Security Technology

IPv6 is called the Next Generation Internet Protocol (IPNG). It's one of the most important upgrade of the network technology. It is gradually developing into the fundamental infrastructure to replace today's IPv4 network, and it makes positive influence to Internet. IPv6 will extend the usable address space; supply the new feature of plug and play for network management. It will simplify packet header, add IPsec which supply authentication and encryption, and provide better support for mobile IP function.The main works in this paper are listed as follows:(1)The threats of IPv6 network are evaluated, and what kinds of security services should be employed in each layer of IPv6 to against the threats are clearly explained. Based on the previous researches, the security architecture of IPv6 networks is introduced, and a set of security techniques matching this architecture is provided.(2)This paper gives a thorough analysis on IPv6 security. It focuses on security problems of IPv6 transition mechanisms, presents active probing based tunnel discovery method.(3)In view of the traditional firewall's lacking authentication and encryption function, the paper studied has realized a kind of firewall technology in IPv6 based on Linux. Owe to the authentication and encryption function of IPv6, the security of firewall has been enormously enhanced, and the function of firewall system is more perfect.