基于IPv6安全性的研究及其防火墙设计-计算机应用技术专业论文.docxVIP

AbstractIPv4 Abstract IPv4 protocol is designed conservative in the resources of address，as a result the crisis in shortage of address appears with the burst of internet’s growing．According to the increasing velocity of computer Iinked into jntemet．the IP address would be exhausted in 2006．IPv6 protocol adopted 128 bit address spaces，which may resolve the problem ofthe address shortage in IPv4 The current network is being transferred from IPv4 to IPv6 IPv6 have Authentication Header(AH)and Encapsulatin Security Payload(ESP)in its expand header．As a result，IPsec which is a choice in IPv4 become one part of ipv6．IPsec enhanced IPv6’s security very much． However，the current Firewall can not do very good in deal with the lPv6 data that is encrypted with ESP．The ways to resolve this problem is a very hot topic in all the world．To nowdays． however,there are not very perfect project to be put forward．I also try a little in this aspect int this dissertation． This dissertation mainly discussed the security of IPv6 and then do some studies and practices to it．The dissertation is divided into four fractions： The first part introduced the technique principle of IPv6 at first，including the address format、the address sort、the quality of serve and so on．Then I analysed the security of IPv6 and detailed the function，structure，principle oflPsec and the key techniques in realizations The second part elaborated the process that I make IPv6 test bed．Firstly,I introduced the structure of IPv6 test bed．Secondly,I elaborated the way of make IPv6 test best in windows and linux．Finally,1 gived the related test results ofthe test bed． The third part introduce the plentifuI experiment and tests in．depth about IPsec based on the IPv6 bed．I designed two kinds ofexperiment projects。One is a kind ofstrategy about Port to Port， which showed the protection of IPsec in Port to Port．The other is a kind of strategy about Gateway to Gateway,which showed the protection of Ipsec in local net．At last，1