WO2012013126A1 - 主机间的访问方法、设备及系统 - Google Patents

主机间的访问方法、设备及系统 Download PDF

Info

Publication number
WO2012013126A1
WO2012013126A1 PCT/CN2011/077351 CN2011077351W WO2012013126A1 WO 2012013126 A1 WO2012013126 A1 WO 2012013126A1 CN 2011077351 W CN2011077351 W CN 2011077351W WO 2012013126 A1 WO2012013126 A1 WO 2012013126A1
Authority
WO
WIPO (PCT)
Prior art keywords
address
ipv6
client device
packet
ipv4
Prior art date
Application number
PCT/CN2011/077351
Other languages
English (en)
French (fr)
Inventor
崔勇
董江
吴鹏
郭大勇
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2012013126A1 publication Critical patent/WO2012013126A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/09Mapping addresses
    • H04L61/25Mapping addresses of the same type
    • H04L61/2503Translation of Internet protocol [IP] addresses
    • H04L61/251Translation of Internet protocol [IP] addresses between different IP versions

Definitions

  • IPv4 networks and IPv6 networks will coexist for a long time.
  • IPv4/IPv6 interconnected network some routers running only the IPv6 protocol stack form a pure IPv6 backbone. Since the IPv4 network and the IPv6 network will coexist for a long time, the pure IPv6 backbone network needs to provide IPv4 protocol stack access services to the border network.
  • Dual-stack lite is a tunneling technology that provides a way for a private IPv4 network or host to access an IPv4 network across an IPv6 access network.
  • the packets sent by the HI to the IPv4 network are first passed through the Customer Premises Equipment (CPE), which is the IPv6 of the CPE1.
  • the IPv6 address of the packet is the IPv6 address of the CPE1.
  • the destination IPv6 address is the IPv6 address of the Carrier Grade NAT (CGN). Then, through the IPv4-over-IPv6 tunnel between CPE1 and CGN, the CGN is reached.
  • CPE Customer Premises Equipment
  • the CGN After receiving the IPv6 packet, the CGN decapsulates the IPv6 packet and converts the source private IPv4 address and port in the IPv6 packet to the public IPv4 address and port. Then, the IPv6 packet is sent to the CPE2 through the tunnel between the CGN and the CPE2, and forwarded to the H2 of the IPv4 network through the CPE2.
  • the inventors have found that at least the following problems exist in the prior art: For example, when the host HI accesses the host H2, the packet sent by the HI to the H2 needs to pass through the tunnel between the CPE and the CGN twice, which causes the network traffic of the CGN to increase, thereby increasing the network load.
  • the embodiments of the present invention provide a method, a device, and a system for accessing between hosts, which reduce network traffic and implement the purpose of forwarding packets through a tunnel between CPEs.
  • the embodiment of the invention provides a method for accessing between hosts, including:
  • the source host receives, by the source host, the first IPv4 address, where the source address of the first IPv4 packet is a private IPv4 address of the source host, and the destination address of the first IPv4 packet is a public IPv4 address of the destination host;
  • the source host and the destination host are located on different IPv4 networks, and are connected through an IPv6 network.
  • the public IPv4 address of the destination host the public IPv4 address corresponding to the destination host is obtained from the packet forwarding address information table.
  • the IPv6 address of the client device; the packet forwarding address information table is used to record a mapping entry between the public IPv4 address and the IPv6 address of the client device; the second client device is the client to which the destination host belongs.
  • the address mapping table Converting, according to the address mapping table, the private IPv4 address of the source host in the first IPv4 packet to a public IPv4 address of the source host, and the IPv6 address of the first client device and the second client
  • the IPv6 address of the device is encapsulated into the first IPv4 packet to form a first IPv6 packet;
  • the address mapping table is used to record a mapping entry between the private IPv4 address and the public IPv4 address;
  • the source address of the first IPv6 packet is an IPv6 address of the first client device
  • the destination address of the first IPv6 packet is The IPv6 address of the second client device.
  • the embodiment of the invention further provides a method for accessing between hosts, including:
  • the second IPv6 packet of the source host accessing the destination host, where the source address of the second IPv6 packet is an IPv6 address of the first client device, and the second IPv6 packet
  • the destination address is the IPv6 address of the network address translation device, and the second IPv6 packet includes the private IPv4 address of the source host and the public IPv4 address of the destination host.
  • the second IPv6 packet is used according to the network address translation table. Converting the private IPv4 address of the source host to the public IPv4 address of the source host, and searching for the IPv6 address of the second client device according to the public IPv4 address of the destination host, and the IPv6 address of the second client device and the network
  • the IPv6 address of the address translation device is encapsulated into the second IPv6 packet to form a third IPv6 packet;
  • the mapping table entry is used to record an IPv6 address of a client device that supports tunneling packets between client devices.
  • the embodiment of the invention further provides a client device, including:
  • a first IPv4 packet receiving module configured to receive a first IPv4 packet sent by the source host, where a source address of the first IPv4 packet is a private IPv4 address of the source host, and a destination of the first IPv4 packet The address is the public IPv4 address of the destination host; the source host and the destination host are located in different IPv4 networks, and are connected through an IPv6 network;
  • An address obtaining module configured to obtain, according to the public IPv4 address of the destination host, an IPv6 address of the second client device corresponding to the public IPv4 address of the destination host from the packet forwarding address information table; the packet forwarding address The information table is used to record a mapping entry between the public IPv4 address and the IPv6 address of the client device; the second client device is a client device to which the destination host belongs;
  • An address conversion module configured to convert, according to the address mapping table, the private IPv4 address of the source host in the first IPv4 packet to a public IPv4 address of the source host;
  • the address mapping table includes a private IPv4 address and a public address Mapping entries of IPv4 addresses;
  • An address encapsulating module configured to encapsulate an IPv6 address of the first client device and an IPv6 address of the second client device into the first IPv4 packet to form a first IPv6 packet;
  • a first IPv6 packet sending module configured to send the first IPv6 packet to the second client device;
  • the source address of the first IPv6 packet is an IPv6 address of the first client device,
  • the first The destination address of the IPv6 packet is the IPv6 address of the second client device.
  • the embodiment of the invention further provides a network address translation device, including:
  • a second IPv6 packet receiving module configured to receive a second IPv6 packet that is forwarded by the first client device, and the source host accesses the destination host, where the source address of the second IPv6 packet is the first client device
  • the IPv6 address, the destination address of the second IPv6 packet is the IPv6 address of the network address translation device, and the second IPv6 packet includes the private IPv4 address of the source host and the public IPv4 address of the destination host.
  • the third IPv6 packet is encapsulated.
  • a module configured to: after decapsulating the second IPv6 packet, convert the private IPv4 address of the source host in the second IPv6 packet to a public IPv4 address of the source host according to the network address translation table, and according to the destination host
  • the public IPv4 address is used to find the IPv6 address of the second client device, and the IPv6 address of the second client device and the IPv6 address of the network address translation device are encapsulated into the second IPv6 packet to form a third IPv6 packet.
  • a third IPv6 packet sending module configured to send the third IPv6 packet to the second client device
  • An address information sending module configured to send a source host to the first client device when the IPv6 address of the second client device and the IPv6 address of the first client device are recorded in the client device address table a mapping entry between the private IPv4 address and the public IPv4 address of the source host, and a mapping entry between the public IPv4 address of the destination host and the IPv6 address of the second client device; the client device address table Used to record the IPv6 address of a client device that supports tunneling packets between client devices.
  • the embodiment of the invention further provides an access system between hosts, including:
  • a source host a destination host, a first client device, and a second client device
  • the source host is configured to send, to the first client device, the first IPv4 packet that is used to access the destination host; the source address of the first IPv4 packet is a private IPv4 address of the source host, The host is located on a different IPv4 network and connected through an IPv6 network;
  • the first client device is configured to obtain a destination host according to the packet forwarding address information table.
  • the IPv6 address of the second client device corresponding to the public IPv4 address; and converting the private IPv4 address of the source host in the first IPv4 packet to the public IPv4 address of the source host according to the address mapping table, and
  • the IPv6 address of the first client device and the IPv6 address of the second client device are encapsulated into the first IPv4 packet to form a first IPv6 packet and sent to the second client device;
  • the second client device is configured to receive the first IPv6 packet sent by the first client device, and send the first IPv6 packet to the destination host.
  • the method, device, and system for accessing between hosts in the embodiment of the present invention are located on the IPv4 network to which the source host belongs and the CPE at the edge of the IPv6 network, and receive the first IPv4 packet of the IPv4 network when the source host accesses the IPv4 network through the IPv6 access network.
  • the saved packet forwarding address information table obtains the IPv6 address of the second CPE corresponding to the public IPv4 address of the destination host in the first IPv4 packet, so that the source CPE sends the packet to the destination through the IPv6 address of the second CPE.
  • the second CPE to which the host is connected.
  • the private IPv4 address of the source host in the first IPv4 packet is translated into the public IPv4 address of the source host according to the locally saved address mapping table. Therefore, in the embodiment of the present invention, when the source host traverses the IPv6 access network to access the destination host in the IPv4 network, the tunnel between the source CPE and the second CPE does not need to pass through the tunnel between the CPE and the CGN. Therefore, the access traffic to the CGN is reduced, thereby reducing the network load.
  • FIG. 1 is a flowchart of an embodiment of an access method between hosts according to the present invention
  • FIG. 1B is a schematic diagram of an application scenario of an access method between hosts according to the present invention
  • FIG. 2A is a flowchart of another method for accessing between hosts according to the present invention
  • FIG. 2B is a schematic diagram of an application scenario of another method for accessing between hosts according to the present invention
  • FIG. 3 is a flowchart of another method for accessing between hosts according to the present invention
  • FIG. 4 is a schematic structural diagram of Embodiment 1 of a client device according to the present invention
  • FIG. 5 is a schematic structural diagram of Embodiment 2 of a client device according to the present invention
  • FIG. 6 is a schematic structural diagram of Embodiment 1 of a network address translation device according to the present invention.
  • FIG. 7 is a schematic structural diagram of Embodiment 2 of a network address translation device according to the present invention.
  • FIG. 8 is a schematic structural diagram of Embodiment 1 of an access system between hosts according to the present invention
  • FIG. 9 is a schematic structural diagram of Embodiment 2 of an access system between hosts according to the present invention.
  • the embodiment of the present invention provides an optimization method for inter-host communication in a dual-stack lite scenario, in which a packet is directly forwarded through a tunnel between CPEs, and the tunnel is not required to be forwarded through a tunnel between the CPE and the CGN, thereby reducing the network. flow.
  • the embodiment of the present invention is also applicable to multicast packets, and is also applicable to packet forwarding between a source end and a destination end with mobility.
  • FIG. 1A is a flowchart of an embodiment of a method for accessing between hosts according to the present invention.
  • FIG. 1B is a schematic diagram of an application scenario of an access method between hosts according to an embodiment of the present invention.
  • the host source host HI accesses the destination host H2 located in the IPv4 network through the IPv6 network
  • the first CPE (CPE1) and the second CPE (CPE2) are sent to send the HI packet to H2.
  • the execution body of this embodiment is the CPE1 shown in Fig. 1B, that is, the first CPE.
  • the packet forwarding address information table and the address mapping table are saved in the first CPE.
  • the entries in the message forwarding address information table and the address mapping table may be preset by the CGN in the first CPE, or may be sent to the CPE in real time by the CGN.
  • the mapping entry of the IPv6 address of the public IPv4 address and the CPE is recorded in the packet forwarding address information table.
  • the address mapping table is used to record mapping entries between private IPv4 addresses and public IPv4 addresses.
  • Table 1 shows the packet forwarding address information table.
  • the destination IPv6 address corresponding to the public IPv4 address of the destination is the IPv6 address of the CGN by default.
  • the CPE processes the IPv4 packet according to the existing method: the IPv4 packet is forwarded to the CGN through the tunnel between the CPE and the CGN.
  • Table 2 is the address mapping table. As shown in FIG. 1A, this embodiment includes:
  • Step 11 Receive the first IPv4 packet sent by the source host, where the destination host is located in the IPv4 network, the source address of the first IPv4 packet is the private IPv4 address of the source host, and the destination address of the first IPv4 packet is the public address of the destination host. IPv4 address;
  • the source and destination hosts are on different IPv4 networks and connected through an IPv6 network.
  • the source host traverses the IPv6 network to access the destination host in the other IPv4 network
  • the first IPv4 packet is sent to the router between the local IPv4 network and the IPv6 network.
  • the CPE1 is called the first CPE in this embodiment.
  • the first IPv4 packet also includes the port number of the source host and the port number of the destination host. Because the number of IP addresses is limited, the port number can be used for multiplexing.
  • Step 12 Obtain an IPv6 address of the second CPE corresponding to the public IPv4 address of the destination host from the packet forwarding address information table according to the public IPv4 address of the destination host.
  • the packet forwarding address information table includes the public IPv4 address and the second CPE.
  • Step 13 Convert the private IPv4 address of the source host in the first IPv4 packet to the public IPv4 address of the source host according to the address mapping table, and the IPv6 address of the first CPE and the second CPE IPv6 The address is encapsulated into the first IPv4 packet to form a first IPv6 packet.
  • the private IPv4 address and port of the source host in the packets sent to the second CPE must be translated into the source public IPv4 address and port.
  • the destination host can directly send packets to the source host using the source public IPv4 address and port.
  • the first CPE After receiving the first IPv4 packet sent by the source host, the first CPE obtains the IPv6 address of the second CPE corresponding to the public IPv4 address of the destination host from the packet forwarding address information table (the IPv6 address of the second CPE is the destination host)
  • the local CPE, and the IPv6 address of the first CPE and the IPv6 address of the second CPE are encapsulated into the first IPv4 packet.
  • the private IPv4 address of the source host in the first IPv4 packet is translated into the public IPv4 address of the source host to form the first IPv6 packet.
  • Step 14 Send the first IPv6 packet to the second CPE.
  • the source address of the first IPv6 packet is the IPv6 address of the first CPE
  • the destination address of the first IPv6 packet is the IPv6 address of the second CPE.
  • the second CPE converts the public IPv4 address of the first IPv6 packet to the destination private IPv4 address according to the local address mapping table to form a second IPv4 packet. Then, the second IPv4 packet is sent to the destination host in the IPv4 grid according to the destination private IPv4 address.
  • the first CPE is located on the IPv4 network to which the source host belongs and is at the edge of the IPv6 network.
  • the first CPE source host After receiving the first IPv4 packet of the host in the other IPv4 network, the first CPE source host obtains the second IPv4 address corresponding to the destination host in the first IPv4 packet according to the locally saved packet forwarding address information table.
  • the IPv6 address of the CPE so that the first CPE sends the packet to the second CPE connected to the destination host through the IPv6 address of the second CPE.
  • the private IPv4 address of the source host in the first IPv4 packet is translated into the public IPv4 address of the source host according to the locally saved address mapping table.
  • FIG. 2A is a flow chart of another embodiment of an access method between hosts according to the present invention.
  • FIG. 2B is a schematic diagram of an application scenario of another method for accessing between hosts according to the present invention.
  • the execution subject of this embodiment is CGN.
  • the main difference between this embodiment and the prior art is that after receiving the second IPv6 packet sent by the first CPE, the CGN performs step 24 in addition to step 21 to step 23.
  • this embodiment includes:
  • Step 21 The CGN receives the second IPv6 packet sent by the first CPE.
  • the first CPE receives the first IPv4 address sent by the source host (HI in FIG. 2B) and the destination host (H2 in FIG. 2B) for the first time, and encapsulates the IPv6 address of the first CPE and the IPv6 address of the CGN to the first CPE.
  • a second IPv6 packet is formed in the first IPv4 packet, and the second IPv6 packet is sent to the CGN.
  • the source address of the first IPv4 packet is the private IPv4 address of the source host, and the destination address is the public IPv4 address of the destination host.
  • the source address of the second IPv6 packet is the IPv6 address of the first CPE, and the second IPv6 packet is The destination address is the IPv6 address of the CGN.
  • the second IPv6 packet includes the private IPv4 address of the source host and the public IPv4 address of the destination host.
  • Step 22 The CGN converts the private IPv4 address of the source host in the second IPv6 packet to the public IPv4 address of the source host according to the network address translation table, and searches for the IPv6 address of the second CPE according to the public IPv4 address of the destination host.
  • the IPv6 address of the CPE and the IPv6 address of the CGN are encapsulated into the second IPv6 packet to form a third IPv6 packet.
  • the CGN searches for an address mapping entry in the network address translation table, and translates the private IPv4 address of the source host in the second IPv6 packet into a corresponding public IP address. If there is no related mapping entry in the network address translation table.
  • the CGN allocates a public IP address (including a port) to the private IPv4 address of the source host, and saves the mapping entry to the address mapping table.
  • the CGN searches for the IPv6 address of the CPE to which the destination host belongs, that is, the IPv6 address of the second CPE, and encapsulates the IPv6 address of the second CPE and the IPv6 address of the CGN into the second IPv6 packet, according to the public IP address of the destination host.
  • the third IPv6 packet The source address of the third IPv6 packet is the IPv6 address of the CGN, and the destination address is the IPv6 address of the second CPE.
  • Step 23 The CGN sends a third IPv6 packet to the second CPE.
  • Step 24 When the IPv6 address of the second CPE and the IPv6 address of the first CPE are recorded in the CPE address table, the mapping entry of the private IPv4 address of the source host and the public IPv4 address of the source host, and the destination are sent to the first CPE. A mapping entry between the public IPv4 address of the host and the IPv6 address of the second CPE.
  • the above CPE address table (the client device ground table) is used to record the IPv6 address of the CPE that supports tunnel forwarding between CPEs.
  • Step 23 is executed in synchronization with step 24.
  • the first CPE When the first CPE receives the first IPv4 packet sent by the source host, the first CPE forwards the first IPv4 packet to the second CPE through the tunnel between the CPEs without going through the first CPE and the CGN. Inter- tunnel (sending a second IPv6 message), and a tunnel between the CGN and the second CPE (sending a third IPv6 message). Therefore, the CGN needs to send the mapping entry of the address mapping entry (the mapping between the private IPv4 address and the public IP address) and the mapping between the public IP address of the destination host and the IPv6 address of the second CPE to the first CPE. , so that the first CPE is saved locally.
  • the first CPE When receiving the first IPv4 packet sent by the source host, the first CPE searches for the public IPv4 address corresponding to the source private IPv4 address in the first IPv4 packet, and searches for the corresponding local IPv4 address according to the destination host.
  • the IPv6 address of the second CPE The IPv6 address of the first CPE and the IPv6 address of the second CPE are encapsulated into the first IPv4 packet to form a first IPv6 packet to be sent to the second CPE.
  • the CGN When the CGN sends the address mapping entry used in the step 23 and the IPv6 address of the second CPE to the first CPE, it is determined whether the first CPE and the second CPE support the forwarding of the packet through the tunnel between the CPEs.
  • the CGN locally searches for the record information in the CPE address table.
  • the CGN sends the address mapping entry and the IPv6 of the CPE corresponding to the public IPv4 address of the destination host to the first CPE. address. As shown in Table 3, the CPE address table holds the IPv6 address of the CPE.
  • Table 3 shows the CPE address table.
  • IPv6 address of CPE2 The process of establishing a CPE address table is as follows:
  • the CGN receives the first registration information sent by the second CPE and the second registration information sent by the first CPE, where the first registration information includes an IPv6 address of the first CPE, and the second registration information includes an IPv6 address of the first CPE;
  • the IPv6 address of the first CPE and the IPv6 address of the second CPE are saved to the CPE address table.
  • the destination host when the destination host sends the packet to the source host for the first time, the packet is sent in the same manner as in the previous embodiment to prepare for subsequent packet forwarding between the CPE tunnels.
  • the source host, the first CPE, the destination host, and the second CPE are relative concepts.
  • the CGN converts the source private IPv4 address in the second IPv6 packet into a public IPv4 address, and searches according to the public IPv4 address of the destination host.
  • the third IPv6 service message is sent to the second CPE, and the mapping entry between the private IPv4 address and the public IPv4 address and the public IPv4 address of the destination host are also sent to the first CPE.
  • the first CPE when receiving the IPv4 packet sent by the source host, forwards the IPv4 packet to the second CPE through the CPE tunnel according to the mapping entry sent by the CGN, without passing through the tunnel between the CPE and the CGN. . Therefore, this embodiment reduces the network traffic of the CGN and reduces the network load.
  • FIG. 3 is a flowchart of still another embodiment of an access method between hosts according to the present invention.
  • Step 30 The CPE1 sends the first registration information of the IPv6 address of the CPE1 to the CGN.
  • the CPE2 sends the second registration information including the IPv6 address of the destination CPE to the CGN.
  • the CPE1 sends the CGN1 to the CGN. registration message.
  • the CGN establishes a CPE address table locally. The table records the IPv6 addresses of the CPEs that forward packets in the tunnel between the CPEs.
  • Step 32 The CPE1 receives the first IPv4 packet sent by the source host.
  • the HI source host
  • the HI source host
  • the H2 destination host
  • the source address and port of the first IPv4 packet are the private IPv4 address and private port of the source host.
  • the destination address and port are the public IPv4 address and private port of the destination host.
  • Table 3 The main contents of the first IPv4 packet are shown in Table 3.
  • Step 33 CPE1 encapsulates the IPv6 address of the CPE1 and the IPv6 address of the CGN into the first IPv4 packet to form a second IPv6 packet, and sends the packet to the CGN.
  • the source address of the second IPv6 packet is the IPv6 address of the CPE1, and the destination address of the second IPv6 packet is the IPv6 address of the CGN.
  • the main contents of the second IPv6 packet are shown in Table 4.
  • Table 4 shows the main contents of the second IPv6 packet.
  • CPE1 receives the IPv4 packet from H2 that is sent by HI for the first time, the IPv6 address of CPE2 corresponding to the H2 public address and the port is not saved in the address mapping table of CPE1. It cannot be directly between CPE1 and CPE2.
  • the second IPv6 packet is sent to the CPE2 on the tunnel.
  • the second IPv6 packet is sent to the CGN through the default route.
  • the destination IPv6 address in Table 1 defaults to the IPv6 address of the CGN.
  • Step 34 After decapsulating the second IPv6 packet, the CGN converts the private IPv4 address of the HI in the second IPv6 packet to the public IP address of the HI according to the network address translation table, according to the publicity of the H2 in the second IPv6 packet. Find the IPv6 address of CPE2 by using the IPv4 address.
  • the CGN After receiving the second IPv6 packet, the CGN removes the source address and the destination address in the second IPv6 packet, and then encapsulates the source address and the destination address for the packet sent to the CPE2.
  • the CGN queries the network address translation table for the corresponding option according to the CPE1 IPv6 address + the source private IPv4 address + the source private port. If not, the CGN allocates a public IPv4 address and the public end to the private IPv4 address and the source private right port. Create an entry and modify the source private IPv4 address and port in the packet to the corresponding public IPv4 address and public port.
  • Step 35 The CGN encapsulates the IPv6 address of the CPE2 and the IPv6 address of the CGN into the second IPv6 packet, and forms a third IPv6 packet and sends a third IPv6 packet to the CPE2.
  • the main content of the third IPv6 packet is as shown in Table 5. Show.
  • Step 36 If the IPv6 address of the CPE1 and the IPv6 address of the CPE2 are recorded in the CPE address table of the CGN, the CGN sends a mapping entry between the private IPv4 address of the HI and the public IPv4 address of the HI to the CPE1, and the public IPv4 address of the H2. Mapping entry of the IPv6 address of the CPE2;
  • the CPE1 stores the mapping entries of the private IPv4 address of the HI and the public IPv4 address of the HI, and the mapping entries of the public IPv4 address of the H2 and the IPv6 address of the CPE2, respectively, to the packet forwarding address information table and the address mapping table. in.
  • Step 35 is performed in synchronization with step 36.
  • Step 37 CPE2 decapsulates the third IPv6 packet and converts the public address and the private address to form a second IPv4 packet and sends it to H2.
  • the public IPv4 address and port of the H2 are translated into the private IPv4 address and port of the H2. .
  • the main contents of the second IPv4 packet are shown in Table 6.
  • Table 6 shows the main contents of the second IPv4 packet. It should be noted that, in this embodiment, when H2 is used as the source end to send packets to the HI for the first time, The packet is forwarded in the method of step 32 to step 37 in this embodiment to prepare for packet forwarding between subsequent CPE tunnels.
  • step 38 to step 311 are performed.
  • Step 38 The CPE1 receives the first IPv4 packet that is sent by the HI and accesses the H2.
  • Step 39 The CPE1 obtains the IPv6 address of the CPE2 corresponding to the public IPv4 address of the H2 from the packet forwarding address information table according to the public IPv4 address of the H2 in the first IPv4 packet.
  • Step 310 According to the address mapping table, CPE1 converts the private IPv4 address of the HI in the first IPv4 packet to the public IPv4 address of the HI, and encapsulates the IPv6 address of the CPE1 and the IPv6 address of the CPE2 into the first IPv4 packet.
  • An IPv6 message
  • Step 311 CPE1 sends the first IPv6 packet to CPE2.
  • Step 312 The CPE2 decapsulates the first IPv6 packet and converts the public address and the private address to form a second IPv4 packet.
  • mapping of the private address port and the public address port of the H2 maintained in the local address mapping table of the second CPE may be formed before the beginning of the interaction process, and may also be implemented in various other manners, such as static configuration or NAT UDP simple traversal ( Simple Traversal of User Datagram Protocol through Network Address Translators (STUN), etc., will not be described here.
  • Step 313 CPE2 sends the second IPv4 packet to H2.
  • the packets are forwarded to the H2 by the CPE1, the CGN, and the CPE2.
  • the CGN sends the address mapping table and the packet forwarding address information table to the first CPE and the second CPE according to the locally saved CPE address table.
  • the packet forwarding address information table includes an IPv6 address of the second CPE or an IPv6 of the first CPE. The address is such that subsequent packets are forwarded directly to each other through the CPE without going through a tunnel between the CPE and the CGN.
  • Embodiment 4 is a schematic structural diagram of Embodiment 1 of a client device according to the present invention. As shown in FIG. 4, this embodiment includes: a first IPv4 packet receiving module 41, an address obtaining module 42, an address converting module 43, and an address encapsulating module. 44 and a first IPv6 message sending module 45.
  • the first IPv4 packet receiving module 41 is configured to receive the first IPv4 packet sent by the source host, where the source address of the first IPv4 packet is a private IPv4 address of the source host, and the destination address of the first IPv4 packet is the destination host. Public IPv4 address;
  • the source and destination hosts are on different IPv4 networks and connected through an IPv6 network.
  • the address obtaining module 42 is configured to obtain, according to the public IPv4 address of the destination host, the IPv6 address of the second client device corresponding to the public IPv4 address of the destination host from the packet forwarding address information table; the packet forwarding address information table includes the public IPv4 address. A mapping entry between the address and the IPv6 address of the second client device.
  • the address translation module 43 is configured to convert the private IPv4 address of the source host in the first IPv4 packet to the public IPv4 address of the source host according to the address mapping table.
  • An address encapsulating module 44 configured to: use an IPv6 address of the first client device and a second client device
  • the IPv6 address is encapsulated into the first IPv4 packet to form a first IPv6 packet.
  • the address mapping table includes a mapping entry between the private IPv4 address and the public IPv4 address.
  • the first IPv6 packet sending module 45 is configured to send the first IPv6 packet to the second client device.
  • the source address of the first IPv6 packet is an IPv6 address of the first client device
  • the destination of the first IPv6 packet is The address is the IPv6 address of the second client device.
  • the functions and relationships of the modules are as follows: After the first IPv4 packet receiving module 41 receives the first IPv4 packet sent by the source host, the address obtaining module 42 forwards the packet according to the public IPv4 address of the destination host in the first IPv4 packet.
  • the IPv6 address of the second client device corresponding to the public IPv4 address of the destination host is obtained in the address information table.
  • the address translation module 43 converts the private IPv4 address of the source host in the first IPv4 packet to the public IPv4 address of the source host according to the address mapping table.
  • the address encapsulating module 44 encapsulates the IPv6 address of the first client device and the IPv6 address of the second client device into the address translation module 43.
  • the first IPv6 packet is formed in the first IPv4 packet.
  • the first IPv6 packet sending module 45 sends the first IPv6 packet formed by the address encapsulating module 44 to the second CPE.
  • the first IPv4 packet receiving module 41 in the client device receives the packet from the source host to the destination host, the first IPv4 packet is processed by the address obtaining module 42, the address converting module 43, and the address encapsulating module 44.
  • the first IPv6 packet is formed.
  • the first IPv6 packet sending module 45 follows the first
  • the destination address of the IPv6 packet directly sends the first IPv6 packet to the second CPE.
  • the tunnel between the CPE and the CGN is forwarded to the second CPE. This reduces the burden of network traffic and CGN.
  • FIG. 5 is a schematic structural diagram of Embodiment 2 of a client device according to the present invention. As shown in Figure 5, in the figure
  • a registration module 47 corresponding to the embodiment, further comprising: a registration module 47, a second IPv6 message sending module 48, an address information receiving module 49, and an address information saving module 410.
  • the registration module 47 is configured to send, to the CGN, registration information including an IPv6 address of the first client device. After receiving the registration information, the CGN saves the IPv6 address of the first client device to the client device address table.
  • the second IPv6 packet sending module 48 is configured to encapsulate the IPv6 address of the first client device and the IPv6 address of the CGN into the first IPv4 packet to form a second IPv6 packet, and send the second IPv6 packet to the CGN.
  • the source address of the second IPv6 packet is the IPv6 address of the first client device
  • the destination address of the second IPv6 packet is the IPv6 address of the CGN.
  • the address information receiving module 49 is configured to: after the CGN processes the second IPv6 packet, receive a mapping entry of the public IPv4 address of the destination host sent by the CGN according to the client device address table and the IPv6 address of the second client device, and A mapping entry between the private IPv4 address of the source host and the public IPv4 address of the source host.
  • the address information saving module 410 is configured to save the mapping entry between the private IPv4 address of the source host and the public IPv4 address of the source host to the packet forwarding address information table, and the public IPv4 address of the destination host and the second client device The mapping entry of the IPv6 address is saved to the address mapping table.
  • the registration module 47 sends registration information to the CGN to Indicates that packets are forwarded in the tunnel between CPEs.
  • the second IPv6 packet sending module 48 sets the IPv6 address of the first client device and the CGN.
  • the IPv6 address is encapsulated into the first IPv4 packet to form a second IPv6 packet, and the second IPv6 packet is sent to the CGN.
  • the CGN forwards the packet through the CPE tunnel, and the CGN sends the first IPv4 packet to the first client device.
  • the address information used.
  • the address information receiving module 49 receives the mapping entry of the public IPv4 address of the destination host and the IPv6 address of the second client device sent by the CGN according to the client device address table, and the source host.
  • the mapping entry is a mapping relationship used by the CGN to process the second IPv6 packet, and the address information saving module 410 saves the information received by the address information receiving module 49 to the packet forwarding address information table and the address mapping. table.
  • the address information saving module 410 has saved the private IPv4 address of the active host and the public IPv4 mapping entry. And the IPv6 address of the second CPE corresponding to the public IPv4 address of the destination host.
  • the first IPv6 packet is processed by the address obtaining module 42, the address translation module 43, and the address encapsulating module 44 to form a first IPv6 packet.
  • the first IPv6 packet sending module 45 directly sends the first IPv6 packet to the second CPE according to the destination address in the first IPv6 packet.
  • the client device receives the mapping entry of the public IPv4 address of the destination host and the IPv6 address of the second client device sent by the CGN, and the private IPv4 of the source host by the address information storage module 410.
  • the mapping entry between the address and the public IPv4 address of the source host is saved in the packet forwarding address information table and the address mapping table. Therefore, when the first IPv4 packet receiving module 41 subsequently receives the first IPv4 packet from the same source host to the same destination host, the first IPv6 packet sending module 45 can directly send the first IPv6 packet to the second CPE. . Therefore, this embodiment reduces Less network traffic.
  • FIG. 6 is a schematic structural diagram of Embodiment 1 of a network address translation device according to the present invention. As shown in FIG. 6, the embodiment includes: a second IPv6 packet receiving module 51, a third IPv6 packet encapsulating module 52, a third IPv6 packet sending module 53, and an address information sending module 54.
  • the second IPv6 packet receiving module 51 is configured to receive the second IPv6 packet sent by the first client device, where the source address of the second IPv6 packet is an IPv6 address of the first client device, and the destination of the second IPv6 packet is The address is the IPv6 address of the CGN.
  • the second IPv6 packet includes the private IPv4 address of the source host and the public IPv4 address of the destination host.
  • the third IPv6 packet encapsulating module 52 is configured to: after decapsulating the second IPv6 packet, convert the private IPv4 address of the source host in the second IPv6 packet to the public IPv4 address of the source host according to the network address translation table, and The IPv6 address of the second client device is searched according to the public IPv4 address of the destination host, and the IPv6 address of the second client device and the IPv6 address of the CGN are encapsulated into the second IPv6 packet to form a third IPv6 packet.
  • the third IPv6 packet sending module 53 is configured to send a third IPv6 packet to the second client device.
  • the address information sending module 54 is configured to: when the IPv6 address of the second client device and the IPv6 address of the first client device are recorded in the client device address table, send the private IPv4 address of the source host to the first client device.
  • the client device address table is used to record and support the tunnel forwarding of packets between the client devices.
  • the IPv6 address of the client device is used to record and support the tunnel forwarding of packets between the client devices.
  • the second IPv6 packet receiving module 51 receives the second IPv6 packet sent by the first client device
  • the third IPv6 packet encapsulating module 52 receives the second IPv6 packet receiving module 51.
  • the second IPv6 packet is decapsulated and processed to form a third IPv6 packet.
  • the address information sending module 54 searches for the IPv6 address of the first CPE and the IPv6 address of the second CPE in the locally saved CPE address table, the mapping used by the third IPv6 packet encapsulating module 52 to process the second IPv6 packet is used.
  • the entry is sent to the first CPE.
  • the foregoing solution base further includes: a registration information receiving module 55 and registration information storage Module 56.
  • the registration information receiving module 55 is configured to receive first registration information sent by the first client device and second registration information sent by the second client device, where the first registration information includes an IPv6 address of the first client device, and second The registration information includes the IPv6 address of the second client device.
  • the registration information saving module 56 is configured to save the IPv6 address of the first client device and the IPv6 address of the second client device to the CPE address table, respectively.
  • the third IPv6 packet sending module 53 when the third IPv6 packet sending module 53 sends the third IPv6 packet to the second client device, the third IPv6 packet encapsulating module 52 reports the second IPv6 packet to the second IPv6 packet by the address information sending module 54.
  • the mapping entry used by the text processing is sent to the first CPE, so that when the first CPE receives the first IPv4 packet, the first CPE can process the first IPv4 packet by using the foregoing mapping entry, and the IPv4 address is public according to the destination host.
  • the mapping with the IPv6 address of the second CPE directly sends the processed packet to the second CPE.
  • FIG. 8 is a schematic structural diagram of Embodiment 1 of an access system between hosts according to the present invention. As shown in FIG. 8, the embodiment includes: a source host 81, a destination host 82, a first client device 83, and a second client device 84.
  • the source host 81 is configured to send a first IPv4 packet to the first client device to access the destination host.
  • the source address of the first IPv4 packet is a private IPv4 address of the source host 81, and the destination address of the first IPv4 packet is a destination.
  • the public IPv4 address of the host 82; the source host and the destination host are located on different IPv4 networks, and are connected through an IPv6 network;
  • the first client device 83 is configured to obtain an IPv6 address of the second client device corresponding to the public IPv4 address of the destination host according to the packet forwarding address information table, and source the first IPv4 packet according to the address mapping table.
  • the private IPv4 address of the host is translated into the public IPv4 address of the source host, and the IPv6 address of the first client device and the IPv6 address of the second client device 84 are encapsulated into the first IPv4 packet to form a first IPv6 packet.
  • Second client device; The second client device 84 is configured to receive the first IPv6 packet sent by the first client device 83, and send the first IPv6 packet to the destination host 82.
  • the first client device 83 After receiving the first IPv4 packet sent by the source host, the first client device 83 obtains the public IPv4 address of the destination host in the first IPv4 packet according to the packet forwarding address information table. And corresponding to the IPv6 address of the second client device; and converting the private IPv4 address of the source host in the first IPv4 packet to the public IPv4 address of the source host according to the address mapping table, and the IPv6 address of the first client device and The IPv6 address of the second client device is encapsulated into the first IPv4 packet to form a first IPv6 packet and sent to the second client device 84. Therefore, the first IPv4 packet does not need to pass through the tunnel between the CPE and the CGN twice, which reduces the burden of the CGN.
  • FIG. 9 is a schematic structural diagram of Embodiment 2 of an access system between hosts according to the present invention. As shown in FIG. 9, on the basis of the technical solution corresponding to FIG. 8, the embodiment further includes: a network address translation device 85.
  • the first client device 83 is further configured to send, to the network address translation device, registration information including an IPv6 address of the first client device, before receiving the first IPv4 packet sent by the source host, where the first client device is The IPv6 address and the IPv6 address of the network address translation device are encapsulated into the first IPv4 packet to form a second IPv6 packet, which is sent to the network address translation device.
  • the network address translation device 85 is configured to convert the private IPv4 address of the source host in the second IPv6 packet to the public IPv4 address of the source host, and search for the IPv6 address of the second client device according to the public IPv4 address of the destination host,
  • the IPv6 address of the client device and the IPv6 address of the network address translation device are encapsulated into the second IPv6 packet to form a third IPv6 packet, which is sent to the second client device; and the second client is recorded in the client device address table.
  • the mapping between the private IPv4 address of the source host and the public IPv4 address of the source host, and the public IPv4 address of the destination host and the second host are sent to the first client device. Mapping entry of the IPv6 address of the client device.
  • the first client device 83 is further configured to receive the network address translation device according to the client device address table.
  • the mapping entry between the public IPv4 address of the destination host and the IPv6 address of the second client device is saved to the packet forwarding address information table, and the mapping entry between the private IPv4 address of the source host and the public IPv4 address of the source host is received. And save to the address mapping table.
  • the second client device 84 is configured to receive a third IPv6 packet sent by the network address translation device, and send a third IPv6 packet to the destination host.
  • the network address translation device 85 sends a mapping entry between the private IPv4 address of the source host and the public IPv4 address of the source host to the first client device 83, and the public IPv4 address of the destination host and the second Mapping entry of the IPv6 address of the client device. Therefore, when the first source device 83 receives the first IPv4 packet from the same source host, the first client device 83 processes the first IP v4 packet according to the mapping entry, and sends the processed packet to the first IPv4 packet.
  • the second client device 84 achieves the purpose of reducing network traffic.
  • the steps of implementing the above method embodiments may be performed by hardware related to program instructions, and the foregoing program may be stored in a computer readable storage medium, and when executed, the program includes The foregoing steps of the method embodiment; and the foregoing storage medium includes: a medium that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

本发明实施例提供一种主机间的访问方法、设备及系统,该方法包括:接收源主机发送的第一IPv4报文,第一IPv4报文的源地址为源主机的私有IPv4地址;根据目的主机的公有IPv4地址,从报文转发地址信息表中获取目的主机的公有IPv4地址对应的第二客户端设备的IPv6地址;根据地址映射表,将第一IPv4报文中源主机的私有IPv4地址转换为源主机的公有IPv4地址,并将第一客户端设备的IPv6地址和第二客户端设备的IPv6地址封装到第一IPv4报文中形成第一IPv6报文发送给第二客户端设备。本发明实施例减少了网络流量。

Description

主机间的访问方法、 设备及系统 本申请要求于 2010年 7月 30日提交中国专利局、申请号为 201010244166.X、 发明名称为 "主机间的访问方法、 设备及系统" 的中国专利申请的优先权, 其 全部内容通过引用结合在本申请中。 技术领域 本发明涉及通信技术, 尤其涉及一种主机间的访问方法、 设备及系统。 背景技术 随着 IPv6技术的快速发展并逐步成熟和广泛应用, IPv6 网络规模逐步扩 大。 然而, 大量互联网应用和月良务仍然存在于 IPv4网络中, 短期内难以将基于 IPv4网络大量应用和服务移植到 IPv6网络上。 从而, IPv4网络和 IPv6网络将 长期共存。 在 IPv4/IPv6 互连的网络中, 一些只运行 IPv6 协议栈的路由器构 成了纯 IPv6 骨干网。 由于 IPv4网络和 IPv6网络将长期共存, 因此纯 IPv6 骨 干网需要向边界网络提供 IPv4协议栈接入服务。
Dual-stack lite是一种隧道过渡技术, 它提供了私有 IPv4 网络或主机穿越 IPv6接入网访问 IPv4 网络的方法。 例如, 来自私有 IPv4 网络的主机 HI穿越 IPv6接入网访问 IPv4 网络的主机 H2时, HI发往 IPv4 网络的报文, 首先经本 地客户端设备( Customer Premises Equipment, 简称: CPE ) 即 CPE1的 IPv6报 头封装生成 IPv6报文, 其中, 源 IPv6地址是 CPE1的 IPv6地址, 目的 IPv6地 址是运营商级网络地址转换器( Carrier Grade NAT , 简称: CGN )的 IPv6地址。 然后, 通过 CPE1与 CGN之间的 IPv4-over-IPv6隧道, 到达 CGN。 CGN接收 到 IPv6报文后, 将 IPv6报文解封装, 并将 IPv6报文中的源私有 IPv4地址和端 口, 转换为公有 IPv4地址和端口。 之后, 经 CGN与 CPE2之间的隧道将 IPv6 报文发往 CPE2, 经 CPE2转发给 IPv4网络的 H2。
在实现本发明过程中, 发明人发现现有技术中至少存在如下问题: 根据上 述方法, 主机 HI访问主机 H2时, 由于 HI发往 H2的报文需两次通过 CPE与 CGN之间的隧道, 导致 CGN的网络流量增加, 从而使网络负担增加。 发明内容 本发明实施例提供一种主机间的访问方法、 设备及系统, 减少了网络流量, 实现了经 CPE之间的隧道转发报文的目的。
本发明实施例提供一种主机间的访问方法, 包括:
接收源主机发送的第一 IPv4报文,所述第一 IPv4报文的源地址为所述源主 机的私有 IPv4地址, 所述第一 IPv4报文的目的地址为目的主机的公有 IPv4地 址; 所述源主机和所述目的主机位于不同的 IPv4网络, 并通过 IPv6网络连接; 根据所述目的主机的公有 IPv4地址, 从报文转发地址信息表中获取所述目 的主机的公有 IPv4地址对应的第二客户端设备的 IPv6地址;所述报文转发地址 信息表用于记录公有 IPv4地址与客户端设备的 IPv6地址的映射表项;所述第二 客户端设备为所述目的主机所属的客户端设备;
根据地址映射表,将所述第一 IPv4报文中所述源主机的私有 IPv4地址转换 为所述源主机的公有 IPv4地址,并将第一客户端设备的 IPv6地址和所述第二客 户端设备的 IPv6地址封装到所述第一 IPv4报文中形成第一 IPv6报文; 所述地 址映射表用于记录私有 IPv4地址与公有 IPv4地址的映射表项;
将所述第一 IPv6报文发送给所述第二客户端设备;所述第一 IPv6报文的源地 址为第一客户端设备的 IPv6地址,所述第一 IPv6报文的目的地址为所述第二客户 端设备的 IPv6地址。
本发明实施例还提供一种主机间的访问方法, 包括:
接收第一客户端设备转发的、 源主机访问目的主机的第二 IPv6报文, 所述 第二 IPv6报文的源地址为所述第一客户端设备的 IPv6地址, 所述第二 IPv6报 文的目的地址为网络地址转换设备的 IPv6地址,所述第二 IPv6报文包括源主机 的私有 IPv4地址和目的主机的公有 IPv4地址;
将第二 IPv6报文解封装后,根据网络地址转换表,将所述第二 IPv6报文中 所述源主机的私有 IPv4地址转换为源主机的公有 IPv4地址,并根据目的主机的 公有 IPv4地址查找第二客户端设备的 IPv6地址,将所述第二客户端设备的 IPv6 地址和所述网络地址转换设备的 IPv6地址封装到所述第二 IPv6报文,形成第三 IPv6才艮文;
向所述第二客户端设备发送所述第三 IPv6报文,并在客户端设备地址表中记 录有所述第二客户端设备的 IPv6地址和所述第一客户端设备的 IPv6地址时,向所 述第一客户端设备发送源主机的私有 IPv4地址与所述源主机的公有 IPv4地址的 映射表项、以及所述目的主机的公有 IPv4地址与所述第二客户端设备的 IPv6地址 的映射表项; 所述客户端设备地址表用于记录支持在客户端设备间隧道转发报 文的客户端设备的 IPv6地址。
本发明实施例还提供一种客户端设备, 包括:
第一 IPv4报文接收模块, 用于接收源主机发送的第一 IPv4报文, 所述第一 IPv4报文的源地址为所述源主机的私有 IPv4地址,所述第一 IPv4报文的目的地 址为目的主机的公有 IPv4地址; 所述源主机和所述述目的主机位于不同的 IPv4 网络, 并通过 IPv6网络连接;
地址获取模块, 用于根据所述目的主机的公有 IPv4地址, 从报文转发地址 信息表中获取所述目的主机的公有 IPv4地址对应的第二客户端设备的 IPv6地 址;所述报文转发地址信息表用于记录公有 IPv4地址与客户端设备的 IPv6地址 的映射表项; 所述第二客户端设备为所述目的主机所属的客户端设备;
地址转换模块, 用于根据地址映射表, 将所述第一 IPv4报文中所述源主机 的私有 IPv4地址转换为所述源主机的公有 IPv4地址;所述地址映射表包括私有 IPv4地址与公有 IPv4地址的映射表项;
地址封装模块, 用于将第一客户端设备的 IPv6地址和所述第二客户端设备 的 IPv6地址封装到所述第一 IPv4报文中形成第一 IPv6报文;
第一 IPv6报文发送模块,用于将所述第一 IPv6报文发送给所述第二客户端设 备; 所述第一 IPv6报文的源地址为所述第一客户端设备的 IPv6地址, 所述第一 IPv6报文的目的地址为所述第二客户端设备的 IPv6地址。
本发明实施例还提供一种网络地址转换设备, 包括:
第二 IPv6报文接收模块, 用于接收第一客户端设备转发的、 源主机访问目 的主机的第二 IPv6报文,所述第二 IPv6报文的源地址为所述第一客户端设备的 IPv6地址,所述第二 IPv6报文的目的地址为网络地址转换设备的 IPv6地址,所 述第二 IPv6报文包括源主机的私有 IPv4地址和目的主机的公有 IPv4地址; 第三 IPv6报文封装模块, 用于将第二 IPv6报文解封装后,根据网络地址转 换表,将所述第二 IPv6报文中所述源主机的私有 IPv4地址转换为源主机的公有 IPv4地址, 并根据目的主机的公有 IPv4地址查找第二客户端设备的 IPv6地址, 将所述第二客户端设备的 IPv6地址和所述网络地址转换设备的 IPv6地址封装到 所述第二 IPv6报文, 形成第三 IPv6报文;
第三 IPv6报文发送模块,用于向所述第二客户端设备发送所述第三 IPv6报 文;
地址信息发送模块, 用于在客户端设备地址表中记录有所述第二客户端设 备的 IPv6地址和所述第一客户端设备的 IPv6地址时,向所述第一客户端设备发送 源主机的私有 IPv4地址与所述源主机的公有 IPv4地址的映射表项、以及所述目的 主机的公有 IPv4地址与所述第二客户端设备的 IPv6地址的映射表项;所述客户端 设备地址表用于记录支持在客户端设备间隧道转发报文的客户端设备的 IPv6地 址。
本发明实施例还提供一种主机间的访问系统, 包括:
源主机、 目的主机、 第一客户端设备以及第二客户端设备;
所述源主机, 用于向所述第一客户端设备发送访问目的主机的所述第一 IPv4报文;所述第一 IPv4报文的源地址为所述源主机的私有 IPv4地址,所述第 主机位于不同的 IPv4网络, 并通过 IPv6网络连接;
所述第一客户端设备, 用于根据从报文转发地址信息表中获取目的主机的 公有 IPv4地址对应的第二客户端设备的 IPv6地址; 并根据地址映射表,将所述 第一 IPv4报文中所述源主机的私有 IPv4地址转换为所述源主机的公有 IPv4地 址,并将第一客户端设备的 IPv6地址和第二客户端设备的 IPv6地址封装到所述 第一 IPv4报文中形成第一 IPv6报文发送给所述第二客户端设备;
所述第二客户端设备, 用于接收所述第一客户端设备发送的所述第一 IPv6 报文, 并向所述目的主机发送所述第一 IPv6报文。
本发明实施例主机间的访问方法、设备及系统,位于源主机所属的 IPv4网络 与 IPv6网络边缘的 CPE, 接收到源主机通过 IPv6接入网访问 IPv4网络的第一 IPv4 报文时,根据本地保存的报文转发地址信息表,获取第一 IPv4报文中目的主机的 公有 IPv4地址对应的第二 CPE的 IPv6地址, 从而使源 CPE通过第二 CPE的 IPv6地 址, 将报文发送给与目的主机连接的第二 CPE。 同时, 根据本地保存的地址映射 表, 将第一 IPv4报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4地址。 因 此,本发明实施例中,源主机穿越 IPv6接入网访问位于 IPv4网络中的目的主机时, 只需经源 CPE与第二 CPE之间的隧道, 不需经过 CPE与 CGN之间的隧道, 因此, 减少了对 CGN的访问流量, 从而减轻了网络负担。 附图说明 为了更清楚地说明本发明实施例或现有技术中的技术方案, 下面将对实施 例或现有技术描述中所需要使用的附图作简单介绍, 显而易见地, 下面描述中 的附图是本发明的一些实施例, 对于本领域普通技术人员来讲, 在不付出创造 性劳动性的前提下, 还可以根据这些附图获得其他的附图。
图 1 A为本发明提供的一种主机间的访问方法实施例流程图;
图 1B为本发明提供的一种主机间的访问方法实施例的应用场景图; 图 2A为本发明提供的另一种主机间的访问方法实施例流程图;
图 2B为本发明提供的另一种主机间的访问方法实施例的应用场景图; 图 3为本发明提供的又一种主机间的访问方法实施例流程图;
图 4为本发明提供的客户端设备实施例一的结构示意图; 图 5为本发明提供的客户端设备实施例二的结构示意图;
图 6为本发明提供的网络地址转换设备实施例一的结构示意图;
图 7为本发明提供的网络地址转换设备实施例二的结构示意图;
图 8为本发明提供的一种主机间的访问系统实施例一的结构示意图; 图 9为本发明提供的一种主机间的访问系统实施例二的结构示意图。 具体实施方式 下面将结合本发明实施例中的附图, 对本发明实施例中的技术方案进行清 楚、 完整地描述, 显然, 所描述的实施例是本发明一部分实施例, 而不是全部 的实施例。 基于本发明中的实施例, 本领域普通技术人员在没有做出创造性劳 动前提下所获得的所有其他实施例, 都属于本发明保护的范围。
本发明实施例提出一种了 Dual-stack lite场景下主机间互访的优化方法, 通 过 CPE间隧道直接转发报文, 而不需要两次经过 CPE与 CGN之间隧道转发报 文, 从而减少网络流量。 本发明实施例还可以适用于组播报文, 还适用于在具 有移动性的源端和目的端之间进行报文转发。
图 1A为本发明提供的一种主机间的访问方法实施例流程图, 图 1B为本发 明提供的一种主机间的访问方法实施例的应用场景图。 如图 1B所示, 主机源主 机 HI通过 IPv6网络访问位于 IPv4网络中的目的主机 H2时, 需经过第一 CPE ( CPE1 )和第二 CPE ( CPE2 ) , 将 HI发往 H2的报文发送给 H2。
本实施例的执行主体为图 1B中所示的 CPE1即第一 CPE。 本实施例中第一 CPE 中保存有报文转发地址信息表和地址映射表。 报文转发地址信息表和地址 映射表中的表项,可由 CGN在第一 CPE中预置,也可由 CGN向 CPE实时发送。 其中,如表 1所示,报文转发地址信息表中用于记录公有 IPv4地址与 CPE的 IPv6 地址的映射表项。 如表 2所示, 地址映射表用于记录私有 IPv4地址与公有 IPv4 地址的映射表项。
表 1为报文转发地址信息表 目的公有 IPv4 目的公有端口 目的 IPv6
x.x.x.x Μ CPE IPv6
Y.Y.Y.Y Ν CGN IPv6 在第一 CPE没有接收到 CGN发送的与目的公有 IPv4地址对应的第二 CPE 的 IPv6地址时,该目的公有 IPv4地址对应的目的 IPv6地址默认为 CGN的 IPv6 地址, 即在第一 CPE接收到源主机发送的、 访问目的主机的 IPv4报文时, 按照 现有方法处理该 IPv4报文:通过 CPE与 CGN之间的隧道将该 IPv4报文转发给 CGN。 表 2为地址映射表
Figure imgf000009_0001
如图 1A所示, 本实施例包括:
步骤 11 : 接收源主机发送的第一 IPv4报文, 目的主机位于 IPv4网络中, 第一 IPv4报文的源地址为源主机的私有 IPv4地址, 第一 IPv4报文的目的地址 为目的主机的公有 IPv4地址;
如图 1B所示, 源主机和目的主机位于不同的 IPv4网络, 并通过 IPv6网络 连接。源主机穿越 IPv6网络访问其他 IPv4网络中的目的主机时,首先将第一 IPv4 报文发送给本地 IPv4网络与 IPv6网络之间的路由器: CPE1, 在本实施例中称 为第一 CPE。 第一 IPv4报文中还包括源主机的端口号和目的主机的端口号, 因 为 IP地址数量有限, 可使用端口号来复用。
步骤 12: 根据目的主机的公有 IPv4地址, 从报文转发地址信息表中获取目 的主机的公有 IPv4地址对应的第二 CPE的 IPv6地址; 报文转发地址信息表包 括公有 IPv4地址和第二 CPE的 IPv6地址的映射表项; 步骤 13: 根据地址映射表, 将第一 IPv4报文中源主机的私有 IPv4地址转 换为源主机的公有 IPv4地址, 并将第一 CPE的 IPv6地址和第二 CPE的 IPv6 地址封装到第一 IPv4报文中形成第一 IPv6报文;
由于不同的私有 IPv4网络中, 可能会存在私有 IPv4地址相同的两台主机, 因此, 发送给第二 CPE的报文中源主机的私有 IPv4地址和端口, 需转换为源公 有 IPv4地址和端口。 另夕卜, 目的主机可直接使用源公有 IPv4地址和端口向源主 机发送报文。
第一 CPE接收到源主机发送的第一 IPv4报文后,从报文转发地址信息表中 获取目的主机的公有 IPv4地址对应的第二 CPE的 IPv6地址(该第二 CPE的 IPv6 地址为目的主机所属的本地 CPE ) , 并将第一 CPE的 IPv6地址和第二 CPE的 IPv6地址封装到第一 IPv4报文中。 同时, 根据地址映射表中的地址映射关系, 将第一 IPv4报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4地址, 形 成第一 IPv6报文。
步骤 14: 将第一 IPv6报文发送给第二 CPE; 第一 IPv6报文的源地址为第 一 CPE的 IPv6地址, 第一 IPv6报文的目的地址为第二 CPE的 IPv6地址。
根据第一 IPv6报文中的第二 CPE的 IPv6地址, 将第一 IPv6报文发送给第 二 CPE。 第二 CPE根据本地地址映射表,将解析后的第一 IPv6报文中目的公有 IPv4地址转换为目的私有 IPv4地址, 形成第二 IPv4报文。之后,根据目的私有 IPv4地址, 将第二 IPv4报文发送给 IPv4网格中的目的主机。
本实施例第一 CPE位于源主机所属的 IPv4网络并处于 IPv6网络边缘。 在 接收到第一 CPE源主机访问其他 IPv4网络中主机的第一 IPv4报文时, 根据本 地保存的报文转发地址信息表,获取第一 IPv4报文中目的主机的公有 IPv4地址 对应的第二 CPE的 IPv6地址, 从而使第一 CPE通过第二 CPE的 IPv6地址,将 报文发送给与目的主机连接的第二 CPE。 同时, 根据本地保存的地址映射表, 将第一 IPv4报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4地址。 因 此, 本实施例中, 源主机穿越 IPv6接入网访问位于其他 IPv4网络中的目的主机 时, 只需经第一 CPE与第二 CPE之间的隧道, 不需经过 CPE与 CGN之间的隧 道, 因此, 减少了 CGN的访问流量, 从而也减少了网络流量。 图 2A为本发明提供的另一种主机间的访问方法实施例流程图, 图 2B为本 发明提供的另一种主机间的访问方法实施例的应用场景图。 本实施例的执行主 体为 CGN。 本实施例与现有技术的主要区别在于, CGN在接收到第一 CPE发 送的第二 IPv6报文后,除执行步骤 21至步骤 23之外,还执行步骤 24。如图 2A 所示, 本实施例包括;
步骤 21 : CGN接收第一 CPE发送的第二 IPv6报文;
第一 CPE第一次接收到源主机(图 2B中 HI )发送的、 访问目的主机(图 2B中 H2 ) 的第一 IPv4报文后, 将第一 CPE的 IPv6地址和 CGN的 IPv6地址 封装到第一 IPv4报文中形成第二 IPv6报文, 并将第二 IPv6报文发送给 CGN。 其中, 第一 IPv4报文的源地址为源主机的私有 IPv4地址, 目的地址为目的主机 的公有 IPv4地址; 第二 IPv6报文的源地址为第一 CPE的 IPv6地址, 第二 IPv6 报文的目的地址为 CGN的 IPv6地址,第二 IPv6报文包括源主机的私有 IPv4地 址和目的主机的公有 IPv4地址。
步骤 22: CGN根据网络地址转换表,将第二 IPv6报文中源主机的私有 IPv4 地址转换为源主机的公有 IPv4地址,并根据目的主机的公有 IPv4地址查找第二 CPE的 IPv6地址,将第二 CPE的 IPv6地址和 CGN的 IPv6地址封装到第二 IPv6 报文, 形成第三 IPv6报文;
CGN查找网络地址转换表中的地址映射表项,将第二 IPv6报文中源主机的 私有 IPv4地址转换为相应的公有 IP地址。若网络地址转换表中没有相关的映射 表项。 CGN则为该源主机的私有 IPv4地址分配一个公有 IP地址(还可包括端 口) , 建立映射表项后保存至地址映射表中。 之后, CGN根据目的主机的公有 IP地址查找目的主机所属的 CPE的 IPv6 地址, 即第二 CPE的 IPv6地址,将该 第二 CPE的 IPv6地址和 CGN的 IPv6地址封装到第二 IPv6报文,形成第三 IPv6 报文。其中,第三 IPv6报文的源地址为 CGN的 IPv6地址, 目的地址为第二 CPE 的 IPv6地址。
步骤 23: CGN向第二 CPE发送第三 IPv6报文; 步骤 24:在 CPE地址表中记录有第二 CPE的 IPv6地址和第一 CPE的 IPv6 地址时, 向第一 CPE发送源主机的私有 IPv4地址与源主机的公有 IPv4地址的 映射表项、 以及目的主机的公有 IPv4地址与第二 CPE的 IPv6地址的映射表项。
上述 CPE地址表(客户端设备地地表)用于记录支持 CPE 间隧道转发的 CPE的 IPv6地址。
步骤 23与步骤 24同步执行。
为使第一 CPE下次接收到源主机发送的第一 IPv4报文时, 直接通过 CPE 之间的隧道将该第一 IPv4报文转发给第二 CPE, 而不需经过第一 CPE与 CGN 之间的隧道(发送第二 IPv6报文) , 以及 CGN与第二 CPE之间的隧道(发送 第三 IPv6报文) 。 因此, CGN需将步骤 23中用到的地址映射表项 (私有 IPv4 地址与公有 IP地址的映射关系 )和目的主机的公有 IP地址与第二 CPE的 IPv6 地址的映射表项发送给第一 CPE,使第一 CPE保存于本地。 第一 CPE下次接收 到源主机发送的第一 IPv4报文时,直接从本地查找第一 IPv4报文中源私有 IPv4 地址对应的公有 IPv4地址,并根据目的主机公有 IPv4地址在本地查找对应的第 二 CPE的 IPv6地址。 将第一 CPE的 IPv6地址和第二 CPE的 IPv6地址封装到 第一 IPv4报文中形成第一 IPv6报文发送给第二 CPE。
CGN将步骤 23中用到的地址映射表项和查找到的第二 CPE的 IPv6地址发 送给第一 CPE时, 为判断第一 CPE和第二 CPE是否均支持通过 CPE之间的隧 道转发报文, CGN在本地查找 CPE地址表中的记录信息。只有第一 CPE的 IPv6 地址和第二 CPE的 IPv6地址均存在于 CPE地址表中时, CGN才向第一 CPE发 送上述地址映射表项、以及与上述目的主机的公有 IPv4地址对应的 CPE的 IPv6 地址。 如表 3所示, CPE地址表中保存有 CPE的 IPv6地址。
表 3 为 CPE地址表
CPE1的 IPv6地址
CPE2的 IPv6地址 CPE地址表的建立过程如下:
CGN分别接收第二 CPE发送的第一注册信息和第一 CPE发送的第二注册 信息, 第一注册信息包括第一 CPE的 IPv6地址, 第二注册信息包括第一 CPE 的 IPv6地址; CGN分别将第一 CPE的 IPv6地址和第二 CPE的 IPv6地址, 保 存至 CPE地址表。
需要说明的是, 在本实施例中目的主机作为源端第一次向源主机发送报文 时, 需先采用本实施例中相同的方法发送报文, 为后续 CPE隧道间报文转发做 准备。 本实施例中源主机、 第一 CPE、 目的主机和第二 CPE为相对概念。
本实施例主机间的访问方法, CGN在接收到第一 CPE发送的第二 IPv6报 文后, 将第二 IPv6报文中源私有 IPv4地址转换成公有 IPv4地址, 并根据目的 主机公有 IPv4地址查找到对应的第二 CPE的 IPv6地址后, 在向第二 CPE发送 第三 IPv6服文时, 还向第一 CPE发送上述私有 IPv4地址与公有 IPv4地址的映 射表项,以及目的主机公有 IPv4地址与第二 CPE的 IPv地址的映射表项。从而, 第一 CPE接收到源主机发送的 IPv4报文时, 根据上述 CGN发送的映射表项, 将 IPv4报文经 CPE间隧道转发给第二 CPE,而不需经过 CPE与 CGN之间的隧 道。 因此, 本实施例减少了 CGN的网络流量, 减少了网络负担。
图 3 为本发明提供的又一种主机间的访问方法实施例流程图。 本实施例主 要说明第一 CPE保存的地址映射表中表项和报文转发地址信息表中表项的获取 方式, 以及在第一 CPE还未保存地址映射表中表项和报文转发地址信息表中表 项时主机间的访问方法。 如图 3所示, 本实施例包括:
步骤 30: CPE1向 CGN发送包括 CPE1的 IPv6地址的第一注册信息; 步骤 31 : CPE2向 CGN发送包括目 CPE的 IPv6地址的第二注册信息; 在 CPE1或 CPE2支持隧道技术时, 分别向 CGN发送注册信息。 CGN接收 到注册信息后, 在本地建立 CPE地址表, 该表中记录在 CPE间隧道转发报文的 各 CPE的 IPv6地址。
步骤 32: CPE1接收源主机发送的第一 IPv4报文; HI (源主机 )通过 CPEl向 IPv4网络的 H2 (目的主机 )发送第一 IPv4报 文。 第一 IPv4报文的源地址和端口为源主机的私有 IPv4地址和私有端口, 目的 地址和端口为目的主机的公有 IPv4地址和私有端口。第一 IPv4报文的主要内容 如表 3所示。
表 3为第一 IPv4报文的主要内容
Figure imgf000014_0001
步骤 33: CPE1将 CPE1的 IPv6地址和 CGN的 IPv6地址封装到第一 IPv4 报文中形成第二 IPv6报文, 并发送给 CGN;
第二 IPv6报文的源地址为 CPE1的 IPv6地址, 第二 IPv6报文的目的地址 为 CGN的 IPv6地址。 第二 IPv6报文的主要内容如表 4所示。
表 4为第二 IPv6报文的主要内容
Figure imgf000014_0002
在 CPE1第一次接收到 HI发送的访问 H2的 IPv4报文时, CPE1的地址映 射表中还没有保存 H2公有地址和端口所对应的 CPE2的 IPv6地址, 还不能直 接在 CPE1与 CPE2之间的隧道上向 CPE2发送第二 IPv6报文,而是通过默认路 由将第二 IPv6报文发往 CGN(表 1中目的 IPv6地址默认为 CGN的 IPv6地址)。
步骤 34: CGN将第二 IPv6报文解封装后, 根据网络地址转换表, 将第二 IPv6报文中 HI的私有 IPv4地址转换为 HI的公有 IP地址,根据第二 IPv6报文 中 H2的公有 IPv4地址查找 CPE2的 IPv6地址;
CGN接收到第二 IPv6报文后,去掉第二 IPv6报文中的源地址和目的地址, 之后再为发往 CPE2的 ^艮文封装源地址和目的地址。 CGN根据 CPE1 IPv6地址 + 源私有 IPv4地址 +源私有端口, 查询网络地址转换表是否有对应选项, 若没有 查到则 CGN为该私有 IPv4地址和源私右端口分配一个公有 IPv4地址和公有端 口并建立表项, 若找到则直接将报文中的源私有 IPv4地址和端口修改为相应的 公有 IPv4地址和公有端口。
步骤 35: CGN将 CPE2的 IPv6地址和 CGN的 IPv6地址封装到第二 IPv6 报文, 形成第三 IPv6报文并向 CPE2发送第三 IPv6报文; 第三 IPv6报文的主 要内容如表 5所示。
表 5为第三 IPv6报文的主要内容
Figure imgf000015_0001
步骤 36: 若在 CGN的 CPE地址表中记录有 CPE1的 IPv6地址和 CPE2的 IPv6地址, CGN向 CPE1发送 HI的私有 IPv4地址与 HI的公有 IPv4地址的映 射表项、 以及 H2的公有 IPv4地址与 CPE2的 IPv6地址的映射表项;
CPE1将 CGN发送的 HI的私有 IPv4地址与 HI的公有 IPv4地址的映射表 项、 以及 H2的公有 IPv4地址与 CPE2的 IPv6地址的映射表项, 分别保存到报 文转发地址信息表和地址映射表中。
步骤 35与步骤 36同步进行。
步骤 37: CPE2将第三 IPv6报文解封装并进行公有地址与私有地址的转换 后, 形成第二 IPv4报文并发送给 H2;
由于在 CPE22的本地私有 IPv4网络中, 是靠私有 IPv4地址和端口来寻址, 因此第三 IPv6报文解封装后, 需将 H2的公有 IPv4地址和端口, 转换为 H2的 私有 IPv4地址和端口。 第二 IPv4报文的主要内容如表 6所示。
表 6为第二 IPv4报文的主要内容
Figure imgf000015_0002
需要说明的是, 在本实施例中 H2作为源端第一次向 HI发送报文时, 需先 采用本实施例中步骤 32至步骤 37中的方法转发报文, 为后续 CPE隧道间的报 文转发做准备。
在 CPE1再次接收到 HI发送的、访问 H2的第一 IPv4报文时,执行步骤 38 至步骤 311。
步骤 38: CPE1接收 HI后续发送的、 访问 H2的第一 IPv4报文;
步骤 39: CPE1根据第一 IPv4报文中 H2的公有 IPv4地址, 从报文转发地 址信息表中获取 H2的公有 IPv4地址对应的 CPE2的 IPv6地址;
步骤 310: 根据地址映射表, CPE1将第一 IPv4报文中 HI的私有 IPv4地址 转换为 HI的公有 IPv4地址, 并将 CPE1的 IPv6地址和 CPE2的 IPv6地址封装 到第一 IPv4报文中形成第一 IPv6报文;
步骤 311 : CPE1将第一 IPv6报文发送给 CPE2;
表 7为第一 IPv6报文的主要内容
Figure imgf000016_0001
步骤 312: CPE2将第一 IPv6报文解封装并进行公有地址与私有地址的转换 后, 形成第二 IPv4报文;
第二 CPE的本地地址映射表中所维护的 H2的私有地址端口和公有地址端 口的映射可在交互过程开始前形成, 也由其它多种方式来实现, 例如静态配置 或 NAT的 UDP简单穿越 ( Simple Traversal of User Datagram Protocol through Network Address Translators, 简称 STUN )等, 在此不赘述。
步骤 313: CPE2将第二 IPv4报文发送给 H2。
本实施例,在 HI初次穿越 IPv6网访问 IPv4网络时,经 CPE1、CGN和 CPE2 向 H2转发报文。 不同之处在于: CGN向第二 CPE发送报文时, 根据本地保存 的 CPE地址表, 分别向第一 CPE和第二 CPE发送地址映射表和报文转发地址 信息表。报文转发地址信息表中包括有第二 CPE的 IPv6地址或第一 CPE的 IPv6 地址, 以使后续的报文直接经 CPE相互转发, 而不需经过 CPE与 CGN之间的 隧道。
图 4为本发明提供的客户端设备实施例一的结构示意图, 如图 4所示, 本 实施例包括: 第一 IPv4报文接收模块 41、 地址获取模块 42、 地址转换模块 43 和地址封装模块 44以及第一 IPv6报文发送模块 45。
第一 IPv4报文接收模块 41, 用于接收源主机发送的第一 IPv4报文, 第一 IPv4报文的源地址为源主机的私有 IPv4地址,第一 IPv4报文的目的地址为目的 主机的公有 IPv4地址; 源主机和目的主机位于不同的 IPv4网络, 并通过 IPv6 网络连接。
地址获取模块 42, 用于根据目的主机的公有 IPv4地址, 从报文转发地址信 息表中获取目的主机的公有 IPv4地址对应的第二客户端设备的 IPv6地址;报文 转发地址信息表包括公有 IPv4地址与第二客户端设备的 IPv6地址的映射表项。
地址转换模块 43, 用于根据地址映射表, 将第一 IPv4报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4地址。
地址封装模块 44,用于将第一客户端设备的 IPv6地址和第二客户端设备的
IPv6地址封装到第一 IPv4报文中形成第一 IPv6报文;地址映射表包括私有 IPv4 地址与公有 IPv4地址的映射表项。
第一 IPv6报文发送模块 45, 用于将第一 IPv6报文发送给第二客户端设备; 第一 IPv6报文的源地址为第一客户端设备的 IPv6地址, 第一 IPv6报文的目的 地址为第二客户端设备的 IPv6地址。
各模块的功能和关系如下:第一 IPv4报文接收模块 41接收源主机发送的第 一 IPv4报文后,地址获取模块 42根据第一 IPv4报文中目的主机的公有 IPv4地 址, 从报文转发地址信息表中获取目的主机的公有 IPv4地址对应的第二客户端 设备的 IPv6地址。 地址转换模块 43根据地址映射表, 将第一 IPv4报文中源主 机的私有 IPv4地址转换为源主机的公有 IPv4地址。 地址封装模块 44将第一客 户端设备的 IPv6地址和第二客户端设备的 IPv6地址封装到地址转换模块 43转 换后的第一 IPv4报文中形成第一 IPv6报文。第一 IPv6报文发送模块 45将地址 封装模块 44形成的第一 IPv6报文发送给第二 CPE。
本实施例中各模块的工作机理参见图 1对应实施例描述, 在此不再赘述。 本实施例客户端设备中第一 IPv4报文接收模块 41在接收到源主机访问目的 主机的报文时, 第一 IPv4报文经地址获取模块 42、 地址转换模块 43和地址封 装模块 44的处理后形成第一 IPv6报文。由第一 IPv6报文发送模块 45按照第一
IPv6报文中目的地址, 直接将第一 IPv6报文发送给第二 CPE, 而不需两次经过
CPE与 CGN之间的隧道转发给第二 CPE。从而减少了网络流量和 CGN的负担。
图 5为本发明提供的客户端设备实施例二的结构示意图。 如图 5所示, 在图
4对应实施例的基础上, 还包括: 注册模块 47、 第二 IPv6报文发送模块 48、 地 址信息接收模块 49和地址信息保存模块 410。
注册模块 47, 用于向 CGN发送包括第一客户端设备的 IPv6地址的注册信 息。 CGN接收到注册信息后, 将第一客户端设备的 IPv6地址保存至客户端设备 地址表。
第二 IPv6报文发送模块 48,用于将第一客户端设备的 IPv6地址和 CGN的 IPv6地址封装到第一 IPv4报文中形成第二 IPv6报文, 并将第二 IPv6报文发送 给 CGN; 第二 IPv6报文的源地址为第一客户端设备的 IPv6地址, 第二 IPv6报 文的目的地址为 CGN的 IPv6地址。
地址信息接收模块 49,用于在 CGN对第二 IPv6报文处理后,接收 CGN根 据客户端设备地址表发送的目的主机的公有 IPv4地址与第二客户端设备的 IPv6 地址的映射表项,以及源主机的私有 IPv4地址与源主机的公有 IPv4地址的映射 表项。
地址信息保存模块 410,用于将源主机的私有 IPv4地址与源主机的公有 IPv4 地址的映射表项保存至报文转发地址信息表, 并将目的主机的公有 IPv4地址与 第二客户端设备的 IPv6地址的映射表项保存至地址映射表。
具体地各模块的功能和关系如下: 注册模块 47向 CGN发送注册信息, 以 表明支持在 CPE间隧道转发报文。 在第一 IPv4报文接收模块 41第一次接收到 源主机发送的、 访问目的主机的第一 IPv4报文时, 第二 IPv6报文发送模块 48 将第一客户端设备的 IPv6地址和 CGN的 IPv6地址封装到第一 IPv4报文中形成 第二 IPv6报文, 并将第二 IPv6报文发送给 CGN。 为使第一 IPv4报文接收模块 41后续接收到同一源主机发送的访问同一目的主机的报文时, 通过 CPE间隧道 转发报文, CGN向第一客户端设备发送在处理第一 IPv4报文使用到的地址信息。 地址信息接收模块 49在 CGN对第二 IPv6报文处理后, 接收 CGN根据客户端 设备地址表发送的目的主机的公有 IPv4地址与第二客户端设备的 IPv6地址的映 射表项, 以及源主机的私有 IPv4地址与源主机的公有 IPv4地址的映射表项。 上 述映射表项为 CGN在对第二 IPv6报文处理时使用到的映射关系, 地址信息保 存模块 410, 将地址信息接收模块 49接收到的信息, 分别保存至报文转发地址 信息表和地址映射表。
在第一 IPv4报文接收模块 41后续接收到同一源主机访问同一目的主机的 第一 IPv4报文时,由于地址信息保存模块 410已保存有源主机的私有 IPv4地址 与公有 IPv4的映射表项,以及目的主机的公有 IPv4地址对应的第二 CPE的 IPv6 地址。可通过地址获取模块 42、地址转换模块 43和地址封装模块 44对第一 IPv4 报文进行处理后, 形成第一 IPv6报文。 由第一 IPv6报文发送模块 45按照第一 IPv6报文中目的地址, 直接将第一 IPv6报文发送给第二 CPE,
本实施例中各模块的工作机理参见图 1和图 3对应实施例的描述。 在此不 再赘述。
本实施例客户端设备, 通过地址信息保存模块 410将地址信息接收模块 49 接收到 CGN发送的目的主机的公有 IPv4地址与第二客户端设备的 IPv6地址的 映射表项, 以及源主机的私有 IPv4地址与源主机的公有 IPv4地址的映射表项, 分别保存至报文转发地址信息表和地址映射表。 从而, 在第一 IPv4报文接收模 块 41后续接收到同一源主机访问同一目的主机的第一 IPv4报文时, 第一 IPv6 报文发送模块 45可直接将第一 IPv6报文发送给第二 CPE。 因此, 本实施例减 少了网络流量。
图 6为本发明提供的网络地址转换设备实施例一的结构示意图。 如图 6所 示, 本实施例包括: 第二 IPv6报文接收模块 51、 第三 IPv6报文封装模块 52和 第三 IPv6报文发送模块 53以及地址信息发送模块 54。
第二 IPv6报文接收模块 51, 用于接收第一客户端设备发送的第二 IPv6报 文, 第二 IPv6报文的源地址为第一客户端设备的 IPv6地址, 第二 IPv6报文的 目的地址为 CGN的 IPv6地址,第二 IPv6报文包括源主机的私有 IPv4地址和目 的主机的公有 IPv4地址。
第三 IPv6报文封装模块 52, 用于将第二 IPv6报文解封装后, 根据网络地 址转换表,将第二 IPv6报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4 地址, 并根据目的主机的公有 IPv4地址查找第二客户端设备的 IPv6地址,将第 二客户端设备的 IPv6地址和 CGN的 IPv6地址封装到第二 IPv6报文,形成第三 IPv6才艮文。
第三 IPv6报文发送模块 53, 用于向第二客户端设备发送第三 IPv6报文。 地址信息发送模块 54, 用于在客户端设备地址表中记录有第二客户端设备的 IPv6地址和第一客户端设备的 IPv6地址时, 向第一客户端设备发送源主机的私 有 IPv4地址与源主机的公有 IPv4地址的映射表项、 以及目的主机的公有 IPv4 地址与第二客户端设备的 IPv6地址的映射表项; 客户端设备地址表用于记录支 持在客户端设备间隧道转发报文的客户端设备的 IPv6地址。
各模块的功能和关系如下:第二 IPv6报文接收模块 51接收第一客户端设备 发送的第二 IPv6报文,第三 IPv6报文封装模块 52将第二 IPv6报文接收模块 51 接收到第二 IPv6报文解封装并处理后形成第三 IPv6报文。 地址信息发送模块 54在本地保存的 CPE地址表中查找到第一 CPE的 IPv6地址和第二 CPE的 IPv6 地址时, 将第三 IPv6报文封装模块 52对第二 IPv6报文处理时使用的映射表项 发送给第一 CPE。
如图 7所示, 上述方案基础还包括: 注册信息接收模块 55和注册信息保存 模块 56。
注册信息接收模块 55, 用于分别接收第一客户端设备发送的第一注册信息 和第二客户端设备发送的第二注册信息, 第一注册信息包括第一客户端设备的 IPv6地址, 第二注册信息包括第二客户端设备的 IPv6地址。 注册信息保存模块 56, 用于分别将第一客户端设备的 IPv6地址和第二客户端设备的 IPv6地址,保 存至 CPE地址表。
本实施例中各模块的工作机理参见图 2和图 3对应实施例的描述。 在此不 再赘述。
本实施例网络地址转换设备,第三 IPv6报文发送模块 53向第二客户端设备 发送第三 IPv6报文时, 通过地址信息发送模块 54将第三 IPv6报文封装模块 52 对第二 IPv6报文处理使用的映射表项发送给第一 CPE,使得第一 CPE在后续接 收到第一 IPv4报文时, 可通过上述映射表项对第一 IPv4报文进行处理, 并按照 目的主机公有 IPv4地址与第二 CPE的 IPv6地址的映射, 直接将处理的报文发 送到第二 CPE。
图 8为本发明提供的一种主机间的访问系统实施例一的结构示意图。如图 8 所示, 本实施例包括: 源主机 81、 目的主机 82、 第一客户端设备 83以及第二 客户端设备 84。
源主机 81, 用于向第一客户端设备发送访问目的主机的第一 IPv4报文; 第 一 IPv4报文的源地址为源主机 81的私有 IPv4地址,第一 IPv4报文的目的地址 为目的主机 82的公有 IPv4地址; 源主机和目的主机位于不同的 IPv4网络, 并 通过 IPv6网络连接;
第一客户端设备 83, 用于根据从报文转发地址信息表中获取目的主机的公 有 IPv4地址对应的第二客户端设备的 IPv6地址;并根据地址映射表,将第一 IPv4 报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4地址,并将第一客户端 设备的 IPv6地址和第二客户端设备 84的 IPv6地址封装到第一 IPv4报文中形成 第一 IPv6报文发送给第二客户端设备; 第二客户端设备 84, 用于接收第一客户端设备 83发送的第一 IPv6报文, 并向目的主机 82发送第一 IPv6报文。
本实施例中各设备的工作机理参见图 4和图 6对应实施例的说明, 在此不 再赘述。
本实施例主机间的访问系统, 第一客户端设备 83接收到源主机发送的第一 IPv4报文后, 根据从报文转发地址信息表中获取第一 IPv4报文中目的主机的公 有 IPv4地址对应的第二客户端设备的 IPv6地址;并根据地址映射表,将第一 IPv4 报文中源主机的私有 IPv4地址转换为源主机的公有 IPv4地址,并将第一客户端 设备的 IPv6地址和第二客户端设备的 IPv6地址封装到第一 IPv4报文中形成第 一 IPv6报文发送给第二客户端设备 84。从而第一 IPv4报文不需要两次经过 CPE 与 CGN之间的隧道, 减少了 CGN的负担。
图 9为本发明提供的一种主机间的访问系统实施例二的结构示意图。如图 9 所示, 在图 8对应技术方案的基础上, 本实施例还包括: 网络地址转换设备 85。
其中, 第一客户端设备 83, 还用于在接收源主机发送的第一 IPv4报文之前 向网络地址转换设备发送包括第一客户端设备的 IPv6地址的注册信息; 将第一 客户端设备的 IPv6地址和网络地址转换设备的 IPv6地址封装到第一 IPv4报文 中形成第二 IPv6报文发送给网络地址转换设备。
网络地址转换设备 85, 用于将第二 IPv6报文中源主机的私有 IPv4地址转 换为源主机的公有 IPv4地址,并根据目的主机的公有 IPv4地址查找第二客户端 设备的 IPv6地址, 将第二客户端设备的 IPv6地址和网络地址转换设备的 IPv6 地址封装到第二 IPv6报文形成第三 IPv6报文发送给第二客户端设备;并在客户 端设备地址表中记录有第二客户端设备的 IPv6地址和第一客户端设备的 IPv6地 址时,向第一客户端设备发送源主机的私有 IPv4地址与源主机的公有 IPv4地址 的映射表项、以及目的主机的公有 IPv4地址与第二客户端设备的 IPv6地址的映 射表项。
第一客户端设备 83, 还用于接收网络地址转换设备根据客户端设备地址表 发送的目的主机的公有 IPv4地址与第二客户端设备的 IPv6地址的映射表项并保 存至报文转发地址信息表, 以及接收源主机的私有 IPv4 地址与源主机的公有 IPv4地址的映射表项并保存至地址映射表。
第二客户端设备 84, 用于接收网络地址转换设备发送的第三 IPv6报文, 并 向目的主机发送第三 IPv6报文。
本实施例中各设备的工作机理参见图 5和图 7对应实施例的说明, 在此不 再赘述。
本实施例主机间的访问系统, 网络地址转换设备 85 向第一客户端设备 83 发送源主机的私有 IPv4地址与源主机的公有 IPv4地址的映射表项、以及目的主 机的公有 IPv4地址与第二客户端设备的 IPv6地址的映射表项。从而第一客户端 设备 83在后续接收到同一源主机访问同一目的主机的第一 IPv4报文时,根据上 述映射表项对第一 IP v4报文进行处理, 并将处理后的报文发送给第二客户端设 备 84, 达到了减少网络流量的目的。
本领域普通技术人员可以理解: 实现上述方法实施例的部或部分步骤可以 通过程序指令相关的硬件来完成, 前述的程序可以存储于计算机可读取存储介 质中, 该程序在执行时, 执行包括上述方法实施例的步骤; 而前述的存储介质 包括: ROM、 RAM, 磁碟或者光盘等各种可以存储程序代码的介质。
最后应说明的是: 以上实施例仅用以说明本发明的技术方案, 而非对其限 制; 尽管参照前述实施例对本发明进行了详细的说明, 本领域的普通技术人员 应当理解: 其依然可以对前述各实施例所记载的技术方案进行修改, 或者对其 中部分技术特征进行等同替换; 而这些修改或者替换, 并不使相应技术方案的 本质脱离本发明各实施例技术方案的精神和范围。

Claims

权利要求
1、 一种主机间的访问方法, 其特征在于, 包括:
接收源主机发送的第一 IPv4报文,所述第一 IPv4报文的源地址为所述源主 机的私有 IPv4地址, 所述第一 IPv4报文的目的地址为目的主机的公有 IPv4地 址; 所述源主机和所述目的主机位于不同的 IPv4网络, 并通过 IPv6网络连接; 根据所述目的主机的公有 IPv4地址, 从报文转发地址信息表中获取所述目 的主机的公有 IPv4地址对应的第二客户端设备的 IPv6地址;所述报文转发地址 信息表用于记录公有 IPv4地址与客户端设备的 IPv6地址的映射表项;所述第二 客户端设备为所述目的主机所属的客户端设备;
根据地址映射表,将所述第一 IPv4报文中所述源主机的私有 IPv4地址转换 为所述源主机的公有 IPv4地址,并将第一客户端设备的 IPv6地址和所述第二客 户端设备的 IPv6地址封装到所述第一 IPv4报文中形成第一 IPv6报文; 所述地 址映射表用于记录私有 IPv4地址与公有 IPv4地址的映射表项;
将所述第一 IPv6报文发送给所述第二客户端设备;所述第一 IPv6报文的源 地址为第一客户端设备的 IPv6地址,所述第一 IPv6报文的目的地址为所述第二 客户端设备的 IPv6地址。
2、 根据权利要求 1所述的主机间的访问方法, 其特征在于:
在所述接收源主机发送的第一 IPv4报文之前, 还包括:
向网络地址转换设备发送包括所述第一客户端设备的 IPv6 地址的注册信 息。
在所述接收源主机发送的第一 IPv4报文之后, 还包括:
将所述第一客户端设备的 IPv6地址和所述网络地址转换设备的 IPv6地址封 装到所述第一 IPv4报文中形成第二 IPv6报文, 并将所述第二 IPv6报文发送给 所述网络地址转换设备; 所述第二 IPv6报文的源地址为所述第一客户端设备的 IPv6地址,所述第二 IPv6报文的目的地址为所述网络地址转换设备的 IPv6地址; 在所述网络地址转换设备对所述第二 IPv6报文处理后, 接收所述网络地址 转换设备根据所述客户端设备地址表发送的所述目的主机的公有 IPv4地址与所 述第二客户端设备的 IPv6地址的映射表项,以及所述源主机的私有 IPv4地址与 所述源主机的公有 IPv4地址的映射表项;
将所述源主机的私有 IPv4地址与所述源主机的公有 IPv4地址的映射表项保 存至所述报文转发地址信息表, 并将所述目的主机的公有 IPv4地址与所述第二 客户端设备的 IPv6地址的映射表项保存至所述地址映射表。
3、 一种主机间的访问方法, 其特征在于, 包括:
接收第一客户端设备转发的、 源主机访问目的主机的第二 IPv6报文, 所述 第二 IPv6报文的源地址为所述第一客户端设备的 IPv6地址, 所述第二 IPv6报 文的目的地址为网络地址转换设备的 IPv6地址,所述第二 IPv6报文包括源主机 的私有 IPv4地址和目的主机的公有 IPv4地址;
将第二 IPv6报文解封装后,根据网络地址转换表,将所述第二 IPv6报文中 所述源主机的私有 IPv4地址转换为源主机的公有 IPv4地址,并根据目的主机的 公有 IPv4地址查找第二客户端设备的 IPv6地址,将所述第二客户端设备的 IPv6 地址和所述网络地址转换设备的 IPv6地址封装到所述第二 IPv6报文,形成第三 IPv6才艮文;
向所述第二客户端设备发送所述第三 IPv6报文, 并在客户端设备地址表中 记录有所述第二客户端设备的 IPv6地址和所述第一客户端设备的 IPv6地址时, 向所述第一客户端设备发送源主机的私有 IPv4地址与所述源主机的公有 IPv4地 址的映射表项、 以及所述目的主机的公有 IPv4地址与所述第二客户端设备的 IPv6 地址的映射表项; 所述客户端设备地址表用于记录支持在客户端设备间隧 道转发报文的客户端设备的 IPv6地址。
4、 根据权利要求 3所述的主机间的访问方法, 其特征在于, 还包括: 接收所述第一客户端设备发送的第一注册信息和所述第二客户端设备发送 的第二注册信息, 所述第一注册信息包括所述第一客户端设备的 IPv6地址, 所 述第二注册信息包括所述第二客户端设备的 IPv6地址;
将所述第一客户端设备的 IPv6地址和所述第二客户端设备的 IPv6地址,保 存至所述客户端设备地址表。
5、 一种客户端设备, 其特征在于, 包括;
第一 IPv4报文接收模块, 用于接收源主机发送的第一 IPv4报文, 所述第一 IPv4报文的源地址为所述源主机的私有 IPv4地址,所述第一 IPv4报文的目的地 址为目的主机的公有 IPv4地址; 所述源主机和所述述目的主机位于不同的 IPv4 网络, 并通过 IPv6网络连接;
地址获取模块, 用于根据所述目的主机的公有 IPv4地址, 从报文转发地址 信息表中获取所述目的主机的公有 IPv4地址对应的第二客户端设备的 IPv6地 址;所述报文转发地址信息表用于记录公有 IPv4地址与客户端设备的 IPv6地址 的映射表项; 所述第二客户端设备为所述目的主机所属的客户端设备;
地址转换模块, 用于根据地址映射表, 将所述第一 IPv4报文中所述源主机 的私有 IPv4地址转换为所述源主机的公有 IPv4地址;所述地址映射表包括私有 IPv4地址与公有 IPv4地址的映射表项;
地址封装模块, 用于将第一客户端设备的 IPv6地址和所述第二客户端设备 的 IPv6地址封装到所述第一 IPv4报文中形成第一 IPv6报文;
第一 IPv6报文发送模块,用于将所述第一 IPv6报文发送给所述第二客户端 设备; 所述第一 IPv6报文的源地址为所述第一客户端设备的 IPv6地址,所述第 一 IPv6报文的目的地址为所述第二客户端设备的 IPv6地址。
6、 根据权利要求 5所述的客户端设备, 其特征在于, 还包括:
注册模块, 用于向网络地址转换设备发送包括所述第一客户端设备的 IPv6 地址的注册信息;
第二 IPv6报文发送模块,用于将所述第一客户端设备的 IPv6地址和所述网 络地址转换设备的 IPv6地址封装到所述第一 IPv4报文中形成第二 IPv6报文, 并将所述第二 IPv6报文发送给所述网络地址转换设备;所述第二 IPv6报文的源 地址为所述第一客户端设备的 IPv6地址,所述第二 IPv6报文的目的地址为所述 网络地址转换设备的 IPv6地址;
地址信息接收模块, 用于在所述网络地址转换设备对所述第二 IPv6报文处 理后, 接收所述网络地址转换设备根据所述客户端设备地址表发送的所述目的 主机的公有 IPv4地址与所述第二客户端设备的 IPv6地址的映射表项,以及所述 源主机的私有 IPv4地址与所述源主机的公有 IPv4地址的映射表项;
地址信息保存模块, 用于将所述源主机的私有 IPv4地址与所述源主机的公 有 IPv4地址的映射表项保存至所述报文转发地址信息表, 并将所述目的主机的 公有 IPv4地址与所述第二客户端设备的 IPv6地址的映射表项保存至所述地址映 射表。
7、 一种网络地址转换设备, 其特征在于, 包括:
第二 IPv6报文接收模块, 用于接收第一客户端设备转发的、 源主机访问目 的主机的第二 IPv6报文,所述第二 IPv6报文的源地址为所述第一客户端设备的 IPv6地址,所述第二 IPv6报文的目的地址为网络地址转换设备的 IPv6地址,所 述第二 IPv6报文包括源主机的私有 IPv4地址和目的主机的公有 IPv4地址; 第三 IPv6报文封装模块, 用于将第二 IPv6报文解封装后,根据网络地址转 换表,将所述第二 IPv6报文中所述源主机的私有 IPv4地址转换为源主机的公有 IPv4地址, 并根据目的主机的公有 IPv4地址查找第二客户端设备的 IPv6地址, 将所述第二客户端设备的 IPv6地址和所述网络地址转换设备的 IPv6地址封装到 所述第二 IPv6报文, 形成第三 IPv6报文;
第三 IPv6报文发送模块,用于向所述第二客户端设备发送所述第三 IPv6报 文;
地址信息发送模块, 用于在客户端设备地址表中记录有所述第二客户端设 备的 IPv6地址和所述第一客户端设备的 IPv6地址时,向所述第一客户端设备发 送源主机的私有 IPv4地址与所述源主机的公有 IPv4地址的映射表项、以及所述 目的主机的公有 IPv4地址与所述第二客户端设备的 IPv6地址的映射表项;所述 客户端设备地址表用于记录支持在客户端设备间隧道转发报文的客户端设备的
IPv6地址。
8、 根据权利要求 7所述的网络地址转换设备, 其特征在于, 还包括: 注册信息接收模块, 用于接收所述第一客户端设备发送的第一注册信息和 所述第二客户端设备发送的第二注册信息, 所述第一注册信息包括所述第一客 户端设备的 IPv6地址,所述第二注册信息包括所述第二客户端设备的 IPv6地址; 注册信息保存模块, 用于将所述第一客户端设备的 IPv6地址和所述第二客 户端设备的 IPv6地址, 保存至所述客户端设备地址表。
9、 一种主机间的访问系统, 其特征在于, 包括: 源主机、 目的主机、 第一 客户端设备以及第二客户端设备;
所述源主机, 用于向所述第一客户端设备发送访问目的主机的所述第一 IPv4报文;所述第一 IPv4报文的源地址为所述源主机的私有 IPv4地址,所述第 主机位于不同的 IPv4网络, 并通过 IPv6网络连接;
所述第一客户端设备, 用于根据从报文转发地址信息表中获取目的主机的 公有 IPv4地址对应的第二客户端设备的 IPv6地址; 并根据地址映射表,将所述 第一 IPv4报文中所述源主机的私有 IPv4地址转换为所述源主机的公有 IPv4地 址,并将第一客户端设备的 IPv6地址和第二客户端设备的 IPv6地址封装到所述 第一 IPv4报文中形成第一 IPv6报文发送给所述第二客户端设备;
所述第二客户端设备, 用于接收所述第一客户端设备发送的所述第一 IPv6 报文, 并向所述目的主机发送所述第一 IPv6报文。
10、 根据权利要求 9所述的主机间的访问系统, 其特征在于, 还包括网络 地址转换设备:
所述第一客户端设备, 还用于在所述接收源主机发送的第一 IPv4报文之前 向网络地址转换设备发送包括所述第一客户端设备的 IPv6地址的注册信息; 将 所述第一客户端设备的 IPv6地址和所述网络地址转换设备的 IPv6地址封装到所 述第一 IPv4报文中形成第二 IPv6报文发送给所述网络地址转换设备; 所述网络地址转换设备, 用于将所述第二 IPv6报文中所述源主机的私有 IPv4地址转换为源主机的公有 IPv4地址,并才艮据目的主机的公有 IPv4地址查找 第二客户端设备的 IPv6地址,将所述第二客户端设备的 IPv6地址和所述网络地 址转换设备的 IPv6地址封装到所述第二 IPv6报文形成第三 IPv6报文发送给所 述第二客户端设备; 并在客户端设备地址表中记录有所述第二客户端设备的 IPv6地址和所述第一客户端设备的 IPv6地址时, 向所述第一客户端设备发送源 主机的私有 IPv4地址与所述源主机的公有 IPv4地址的映射表项、以及所述目的 主机的公有 IPv4地址与所述第二客户端设备的 IPv6地址的映射表项;
所述第一客户端设备, 还用于接收所述网络地址转换设备根据所述客户端 设备地址表发送的所述目的主机的公有 IPv4地址与所述第二客户端设备的 IPv6 地址的映射表项燕保存至所述报文转发地址信息表, 以及接收所述源主机的私 有 IPv4地址与所述源主机的公有 IPv4地址的映射表项并保存至所述地址映射 表;
所述第二客户端设备, 还用于接收所述网络地址转换设备发送的所述第三 IPv6报文, 并向所述目的主机发送所述第三 IPv6报文。
PCT/CN2011/077351 2010-07-30 2011-07-20 主机间的访问方法、设备及系统 WO2012013126A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201010244166.X 2010-07-30
CN201010244166.XA CN102143241B (zh) 2010-07-30 2010-07-30 主机间的访问方法、设备及系统

Publications (1)

Publication Number Publication Date
WO2012013126A1 true WO2012013126A1 (zh) 2012-02-02

Family

ID=44410453

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2011/077351 WO2012013126A1 (zh) 2010-07-30 2011-07-20 主机间的访问方法、设备及系统

Country Status (2)

Country Link
CN (1) CN102143241B (zh)
WO (1) WO2012013126A1 (zh)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103297336B (zh) * 2012-03-02 2017-06-06 华为技术有限公司 转发网际协议分组的方法及设备
CN103780492B (zh) * 2012-10-25 2017-09-26 华为技术有限公司 报文转发的方法和相应设备
CN103796191B (zh) * 2014-03-05 2017-09-26 大唐移动通信设备有限公司 向用户终端发送数据的方法、装置及终端
CN105323326B (zh) * 2014-06-30 2018-07-24 中国电信股份有限公司 一种终端间通信的通用转换平台、服务器、系统及其方法
CN104468202B (zh) * 2014-11-26 2018-03-27 迈普通信技术股份有限公司 一种用户端设备的管理方法及装置
CN105812499B (zh) * 2014-12-31 2018-12-28 中国电信股份有限公司 通信方法和通信系统及虚拟客户终端设备
CN106657120A (zh) * 2016-12-31 2017-05-10 王旸 一种wifi安全体系架构

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2006053856A1 (en) * 2004-11-18 2006-05-26 International Business Machines Corporation Tunneling ipv6 packets
CN101094155A (zh) * 2007-08-02 2007-12-26 杭州华三通信技术有限公司 建立IPv6隧道的方法、IPv6隧道通信方法及IPv4边缘设备
CN101447935A (zh) * 2008-11-20 2009-06-03 华为技术有限公司 数据包转发方法、系统及设备

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100803273B1 (ko) * 2005-12-27 2008-02-13 삼성전자주식회사 패킷 터널링하는 isatap 라우터 및 그 방법

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2006053856A1 (en) * 2004-11-18 2006-05-26 International Business Machines Corporation Tunneling ipv6 packets
CN101094155A (zh) * 2007-08-02 2007-12-26 杭州华三通信技术有限公司 建立IPv6隧道的方法、IPv6隧道通信方法及IPv4边缘设备
CN101447935A (zh) * 2008-11-20 2009-06-03 华为技术有限公司 数据包转发方法、系统及设备

Also Published As

Publication number Publication date
CN102143241A (zh) 2011-08-03
CN102143241B (zh) 2014-07-09

Similar Documents

Publication Publication Date Title
WO2012013126A1 (zh) 主机间的访问方法、设备及系统
JP5335886B2 (ja) ローカル・ネットワーク間でデータ・パケットを通信するための方法および装置
KR101399002B1 (ko) 가상 사설 네트워크의 실현 방법 및 시스템
WO2009111977A1 (zh) 一种映射信息的发送方法、系统和装置
WO2009094928A1 (fr) Procédé et équipement de transmission d'un message basé sur le protocole de tunnel de niveau 2
JP2006050626A (ja) ネットワークアドレス変換方法および装置
WO2011160367A1 (zh) 网络地址转换转发方法及装置
WO2010108431A1 (zh) 实现IPv6主机访问IPv4主机的方法、获取IPv6地址前缀的方法和转换装置
WO2012106935A1 (zh) 数据通信网络配置方法、网关网元及数据通信系统
WO2011140843A1 (zh) 一种报文转发的方法、装置及系统
WO2011098039A1 (zh) Ipv6过渡网络中获取ipv6配置信息的方法、系统以及装置
WO2012034456A1 (zh) 一种获取dns的方法和隧道网关设备
WO2012083657A1 (zh) 报文处理方法、系统和用户前端设备
WO2012119390A1 (zh) 虚拟机迁移通知方法和系统
WO2012149839A1 (zh) 发送因特网协议分组的方法及装置
WO2011137842A1 (zh) 一种基于cgn实体的数据传输方法、cgn实体、网关及系统
WO2010111962A1 (zh) 运营商级网络地址转换设备发现方法、设备和系统
WO2011131088A1 (zh) 数据报文处理方法、入口隧道路由器及系统
KR101901341B1 (ko) 사용자 장치의 이동성을 지원하는 네트워크 접속 방법 및 장치
EP2675117A1 (en) Routing method and device for host in multi-homing site
WO2014114058A1 (zh) 一种数据报文转发方法、用户驻地设备和系统
WO2011107052A2 (zh) 一种防止地址冲突的方法及接入节点
US8547998B2 (en) Tunneling IPv6 packet through IPv4 network using a tunnel entry based on IPv6 prefix and tunneling IPv4 packet using a tunnel entry based on IPv4 prefix
WO2009082896A1 (fr) Procédé et convertisseur pour la transmission de messages de données
WO2012109864A1 (zh) 报文转发方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11811827

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 11811827

Country of ref document: EP

Kind code of ref document: A1