Ipv6-based Firewall And Ids Research

In order to solve each kind of questions based on the IPv4 network such as the deficiency of the address resources, the inflation of the route table, lack in encryption and authentication for information transmitted, lack of the QoS support and so on.IETF proposed officially Internet Protocol Version 6(IPv6) which in 1994 as the next generation internet protocol. Compared with IPv4, IPv6 takes advantages in many aspects. IPv6 is condomned to be ultimate and will replace IPv4 sooner or later.But some advantages of IPv6, for instance its security mechanism has had huge influence on existing network security tool such as firewall and IDS which based on IPv4. These tools cannot be used directly within new environment. Thus how to make firewall and IDS which are classical network security tools go on to take effect in IPv6 to serve for the security of network emerges as an important problem.Based on such question, this paper studied the attributes of IPv6, the concept and principle of traditional firewall and IDS as well as the essential technology under the existing firewall and IDS based on IPv6, proposed the design for firewall and IDS under IPv6 and provided concrete plans of design, and tested IPv4 and IPv6 double stack firewall simply.Then instructed the mind of coordining firewall and the IDS. Then proposed an system model which could be applied with IPv6 and in which the firewall and the intrution detection system cooperate with each other, and a network model in which the two interacts with each other. In the end the paper studied related technologies of IPS which is hot spot within the domain of network security presently, and offered instructions about the combination of IDS and firewall and whether IDS could be replaced with IPS.