Method for realizing communication between IPv6 private network node and public network node and routing forwarding equipment

Abstract

The application discloses a method for realizing communication between an IPv6 private network node and a public network node. The method comprises the following steps: receiving a message by routing forwarding equipment from the IPv6 private network node, and selecting one IPv6 address from the public IPv6 addresses configured for a corresponding interface of the routing forwarding equipment when the source IP addresses of the message are private network addresses and target IP addresses are public network addresses, wherein the prefix of the IPv6 address is used as the address prefix for the private network node to access to the public network, and the prefix of the IPv6 address is different from the address prefix used for the private network node to access to the public network last time; sending a router announcement (RA) which comprises the address prefix and the effective time to the private network node, wherein the RA is used for triggering the private network node to generate a polymerizable global unicast address with the address prefix in the RA, and the global unicast address is used for the communication between the private network node and the public network node. The application further discloses the routing forwarding equipment. Due to the adoption of the method and the routing forwarding equipment, the private network node can be effectively protected against the attack of the external network during the communication between the IPv6 private network node and the public network node.

Description

technical field [0001] The present application relates to the technical field of network node communication, in particular to a method for realizing communication between an IPv6 private network node and a public network node and a routing and forwarding device. Background technique [0002] IPv6 (Internet Protocol Version 6) is gradually becoming practical due to its huge address space. Although the address space is large, it does not mean that all IPv6 addresses in the network can be disclosed to the public, that is, there are also private network addresses in the IPv6 network. Phenomena such as the use of local site addresses. How to realize the communication between IPv6 private network nodes and public network nodes, and at the same time hide the IP addresses of each node in the IPv6 private network from being known by the public network, and safely use them for data exchange inside the private network, when needed Sometimes it can safely communicate with the public ne...

AI Technical Summary

Problems solved by technology

Therefore, if NAT is applied to an IPv6 network, it will affect the security of data message transmission

[0005] Therefore, the host under a routing and forwarding device with NAT function has not established a real end-to-end connection, and cannot participate in some Internet protocols. If NAT is applied to an IPv6 network, it will affect the convenience of IPv6 end-to-end communication, and also It will affect the security of data packet transmission, so that the method of realizing communication between IPv6 private network nodes and public network nodes through NAT conversion in the existing IPv4 network is not suitable for IPv6 network

[0006] As the IPv6 network becomes more and more mature, when communicating between IPv6 private network nodes and public network nodes, for the sake of private network security, it is necessary to hide the IP addresses of private network nodes, so that attackers on the public network cannot determine the private network. Therefore, it is impossible to launch an effective attack, but there is currently no scheme to realize the communication between IPv6 private network nodes and public network nodes, which can effectively hide the IP addresses of IPv6 private network nodes to protect IPv6 private network nodes Protected from external network attacks

Images