基于IPv6的防火墙的关键技术与实现

IPv6是新一代的IP协议。它的提出解决了当今IP地址匮乏的问题,并引入了加密和认证机制,实现了基于网络层的身份认证,确保了数据包的完整性和机密性,因此,可以说IPv6实现了网络层安全。虽然IPv6有很好的安全功能,但它替代不了防火墙。目前的防火墙一般提供的都只是物理上的过滤形式,缺少认证和加密机制,如果在防火墙中加入认证和加密机制,那么防火墙功能将更加完善。

The Key Technology and Realization of Firewall Based on IPv6

IPv6 is the new generation of IP protocol. It has solved now the problem of IP address deficient ,introduced the encryptionand the authentication mechanism, realized status authentication based on the network level, guaranteed the data packet integrity andconfidentiality, therefore, IPv6 has realized the network level security. Although IPv6 has the excellent security function, but it couldnot substitute the firewall. The present firewall provides all only is generally the form of filter in physics, lacks the authenticationand the encryption mechanism, if joins the authentication and the encryption mechanism in the firewall, then the firewall function willbe more perfect.