Ipv6 Security Mechanisms (ipsec)

IPv6 is also known as Next Generation Internet Protocol(IPng).As a significant evolution of IPv4,it increases the number of available addresses,provides the function of "plug and play",enables the format of simpler header,extend the features of ID and privacy and better the support for mobile IP.IPv6 strengthens the security concept in design.It performs the security mechanisms of authentication and encryption by IPSec which is the only security protocol for Internet.IPSec is defined as a mandatory feature in IPv6 and supports protections on IP layer.It includes a set of facilities that support security services including integrity, authentication,confidentiality and anti-replay-attack.Thus,research on security technologies in IPv6 is of great importance.This paper begins with the overview of IPv6 development. After brief introduction of IPv6 features,the author firstly analyzes the configuration of IPSec.Three mechanisms of AH,ESP and IKE are discussed.AH and ESP are the main protocols for IPSec,which are also respectively used in transport mode or tunnel mode meet diverse security needs.Secondly, the paper presents cancellation of AH on the basis of the above comprehensive analysis and improvement on ESP with authentication of packets.The reason that IKE is vulnerable in a switching course is also discussed and the improving suggestions are made.Then,the author sets up IPSec under Win2000 to establish security links and constitutes VPN under Linux to validate the capability of VPN.The impact of IPSec on transmission is subsequently is evaluated.Finally,proposals and trends on security technologies of IPv6 are given.