可穿越路位址转换器的第六代网际网路通讯协定隧道.docVIP

可穿越網路位址轉換器的第六代網際網路通訊協定隧道 Tunneling IPv6 through NATs Shiang-Ming Huang Quincy Wu Whai-En Chen National Chiao Tung University E-mail: {smhuang, solomon, wechen}@.twTANET2003 TANET研討會論文格式說明 作者一 作者二 作者三 服務單位 E-mail 摘要 在現有的IPv4網路中引入IPv6時，Tunneling是經常被使用到的機制。由於IPv6的網路尚未普及，IPv6網路設備往往需要經由現有的IPv4網路以Tunneling的機制傳送IPv6封包，才能與其他IPv6網路互通。然而，如果IPv6設備在NAT後端，傳統的Tunneling機制完全沒有辦法幫助它連上IPv6網路。本篇文章將就IPv6 Tunneling相關的議題討論，介紹Teredo這個穿越NAT的IPv6 Tunneling機制，同時提出我們在交通大學所發展的Teredo封包分析器，以及所進行的IPv6 Tunneling實驗。 關鍵詞：Tunnel、第六代網際網路協定IPv6、隧道、NAT網路位址轉換器。 Abstract Tunneling is a popular mechanism for adopting IPv6 to existing IPv4 network deployment. Since IPv6 network is not widely spreaddeployed all over the world, network equipment which wants to access IPv6 network often needs to tunnel IPv6 packetstraffic must be transported over existing IPv4 network using the tunneling mechanism. However, if the IPv6 network equipmentdevice islocates behind NAT(s), traditional IPv6 tunneling mechanisms does not workswill fail. This articlepaper will discusses issues related to IPv6 tunneling and related issues. A tunneling mechanism, Teredo, which can successfully tunnels IPv6 packets through NATs,(Teredo) is also introduced here. At the end of the article, we announce the The Teredo protocol dissector implemented by usis also demonstrated, and our IPv6 tunneling experiment performed in NCTU nowis described. Keywords: IPv6, Tunnel, IPv6, NAT. Introduction 為使現有的IPv4網路能平順地轉換到IPv6，IETF NGtrans工作小組所擬定的方針[3]，大致可分為三個方面，分別解決不同的需求： 1. Dual-Stack 目的在使IPv4及IPv6兩個通訊協定可在相同的設備上及相同的網路中共存。如此即無需在導入IPv6時，造成雙倍的硬體投資。目前router廠商如Cisco、Juniper、Nortel、Nokia、Hitachi等，伺服主機作業系統如HP、IBM、Sun、Microsoft Windows、Linux、FreeBSD等，均已支援IPv4/IPv6 Dual-Stack。 2. Tunneling 目的在使未直接相連的IPv6網路彼此間能夠互通。如此即使所有網路導入IPv6的時程先後不一，但依然能維持彼此間的互通。現有做法如Configured Automatic Tunnel (RFC 2893)、6to4 Tunnel (RFC 3056)、Tunnel Broker (RFC 3053)、ISATAP (Intra-Site Automatic Tunnel Addressing Protocol) 等。 3. Translation 使IPv6網路能與現存的IPv4網路互通，以共享現有IPv4網路豐富的網路資