WO2016202059A1

WO2016202059A1 - Ipv6 network access method and gateway

Info

Publication number: WO2016202059A1
Application number: PCT/CN2016/078721
Authority: WO
Inventors: 翁建祺; 沈莹
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-06-19
Filing date: 2016-04-07
Publication date: 2016-12-22
Also published as: CN106331191A

Abstract

A network access method, comprising: after obtaining address feature information of multiple IPv6 networks, a gateway allocates address feature information of one IPv6 network to a connected device, or allocates an address generated from address feature information of one IPv6 network to a connected device; and after receiving a packet sent by the connected device, analyze a target IPv6 network to which the packet is forwarded, and if address feature information of the target IPv6 network is inconsistent with address feature information of a source address of the packet, replace the address feature information of the source address of the packet with the address feature information of the target IPv6 network, and forward the packet. The foregoing technical solution enables a connected IPv6 host to implement normal access in a multi-network environment without the need of configuring multiple IPv6 addresses for the connected IPv6 host, and avoids the problem of network access failure due to incorrect selection of a source address.

Description

Method and gateway for accessing IPv6 network

Technical field

This document relates to but not limited to the field of data communication, and relates to a method and a gateway for accessing an IPv6 network.

Background technique

With the increasing popularity of IPv6 (Internet Protocol Version 6) networks, problems with the new features of IPv6 have emerged.

In IPv4, the device connected to the gateway can be assigned a private network address. When the gateway accesses multiple network environments, the network address translation (NAT) is used to translate the private network address into the corresponding network. The connected public address can be. However, in the current IPv6 network, the connected device does not connect to the network through the NAT. The IP (Internet Protocol) address of the attached device is derived from the prefix obtained by the gateway on the WAN (Wide Area Network). Come. FIG. 1 is a schematic diagram of a related art network networking. A gateway device accesses two IPv6 networks at the same time, and the connected device accesses the Internet through a gateway device.

In the case of accessing multiple IPv6 network environments, each network environment may assign a prefix to the gateway. When the gateway sends these prefixes to the attached device, the connected device may configure multiple addresses. When the connected device accesses the network, you must select a source address to use. However, when the source address used by the connected device to access the network does not match the prefix assigned by the target network, the network may fail. This is the source network address filtering of the carrier. Request for decision. As shown in Figure 2, the gateway obtains the network address prefix from IPv6 network A and IPv6 network B, and sends the two network address prefixes to the attached PC. The attached device generates two IPv6 addresses. When the device uses the Ping program to access the destination IP address (Internet Protocol) 2300::1, the source address is 2000::200::1, and the source address of the packet enters IPv6 network B. If the network address prefix is not assigned by IPv6 network B, the packet will be discarded by the BRAS (Broadband Remote Access Server) of IPv6 network B, causing the communication to fail.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The embodiments of the present invention provide a method and a gateway for accessing an IPv6 network, which ensure correct forwarding of packets.

The embodiment of the invention provides a method for accessing an IPv6 network, including:

After the gateway obtains the address feature information of the multiple IPv6 networks, the address device information of one of the IPv6 networks is allocated to the attached device, or the address generated by the address feature information of one of the IPv6 networks is allocated to the attached device.

After receiving the packet sent by the device, analyzing the destination IPv6 network of the packet, if the address feature information of the destination IPv6 network is inconsistent with the address feature information of the source address of the packet, After the address feature information of the source address of the packet is replaced with the address feature information of the destination IPv6 network, the packet is forwarded.

Optionally, the method further includes:

After receiving the packet replied by the destination IPv6 network, the gateway replaces the address feature information of the destination address of the packet replied by the destination IPv6 network with the address feature information currently used by the downlink device.

Optionally, the assigning the address feature information of one of the IPv6 networks to the downlink device, or the address generated by the downlink device to the address feature information of one of the IPv6 networks includes:

The gateway uses the neighbor discovery protocol or the dynamic host configuration protocol of the IPV6 to allocate the address feature information of one of the IPv6 networks to the attached device, or assign the address generated by the address feature information of one of the IPv6 networks to the attached device. of.

Optionally, the address feature information includes a network address prefix.

The embodiment of the invention further provides a gateway, including:

The allocation module is configured to allocate the address feature information of one of the IPv6 networks to the attached device after the address feature information of the plurality of IPv6 networks is obtained, or allocate the information to the attached device An address generated by address feature information of an IPv6 network;

The forwarding module is configured to analyze, after receiving the packet sent by the device, the destination IPv6 network that is forwarded by the packet, if the address feature information of the destination IPv6 network and the source address of the packet If the address feature information is inconsistent, the address feature information of the source address of the packet is replaced with the address feature information of the destination IPv6 network, and then the packet is forwarded.

Optionally, the forwarding module is further configured to receive the packet replied by the destination IPv6 network, and replace the address feature information of the destination address of the packet replied by the destination IPv6 network with the current use of the downlink device. Address feature information.

Optionally, the allocation module is configured to:

The neighbor discovery protocol or the dynamic host configuration protocol of the IPV6 is used to allocate the address feature information of one of the networks to the attached device, or to allocate the address generated by the address feature information of one of the networks to the attached device.

Optionally, the address feature information includes a network address prefix.

The embodiment of the present invention further provides a computer readable storage medium, where the computer readable storage medium stores computer executable instructions, and when the computer executable instructions are executed, a method for accessing an IPv6 network is implemented.

The above technical solution can enable the IPv6 host to be accessed normally in a multi-network environment without configuring multiple IPv6 addresses, thereby avoiding the situation that the source address selection error cannot access the network.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

DRAWINGS

1 is a schematic diagram of a network networking of the related art;

2 is a schematic diagram of a problem of multiple network access in an IPv6 network of the related art;

3 is a flowchart of a method for accessing a network according to an embodiment of the present invention;

4 is a schematic diagram of an effect of a method for accessing a network according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a gateway according to an embodiment of the present invention; FIG.

FIG. 6 is a flowchart of a method for accessing a multiple IPv6 network according to an embodiment of the present invention.

detailed description

Embodiments of the present application will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

FIG. 3 is a flowchart of a method for accessing an IPv6 network according to an embodiment of the present invention. As shown in FIG. 3, the method in this embodiment includes:

Step 11: After obtaining the address feature information of the multiple IPv6 networks, the gateway allocates the address feature information of one of the IPv6 networks to the attached device, or allocates the address feature information generated by the IPv6 network of the IPv6 network. address;

Optionally, in the embodiment of the present invention, the address feature information includes a network address prefix.

Optionally, in this embodiment, the address feature information of one of the IPv6 networks is allocated to the downlink device, or the address generated by the address feature information of one of the IPv6 networks is allocated to the downlink device by using the following manner:

Step 12: After receiving the packet sent by the downlink device, analyzing the destination IPv6 network that is forwarded by the packet, if the address feature information of the destination IPv6 network and the address feature of the source address of the packet If the information is inconsistent, the address feature information of the source address of the packet is replaced with the address feature information of the destination IPv6 network, and then the packet is forwarded.

Optionally, the method for accessing an IPv6 network in the embodiment of the present invention further includes:

As shown in Figure 4, when the gateway accesses multiple IPv6 network environments, the gateway can assign a network address prefix to the connected device. When the connected device accesses any of the networks, the network address prefix of the address and the network address assigned by the network are used. If the prefix is inconsistent, the gateway can replace the network address prefix part of the source address of the packet with the network address prefix that matches the currently accessed network, so that the network can be correctly accessed. The reverse response is processed for the reply message, and the prefix part of the destination address is replaced with the network address prefix currently used by the attached device.

FIG. 5 is a schematic diagram of a gateway according to an embodiment of the present invention. As shown in FIG. 5, the gateway in this embodiment includes:

The allocation module is configured to: after obtaining the address feature information of the plurality of IPv6 networks, assign the address feature information of one of the IPv6 networks to the attached device, or allocate the address feature information of the one of the IPv6 networks to the connected device. the address of;

The allocation module is responsible for assigning an IPv6 address to the IPv6 host of the gateway. The module uses the standard ND (Neighbor Discovery) protocol or the DHCPv6 (Dynamic Host Configuration Protocol for IPV6) protocol.

Optionally, in the embodiment of the present invention, the allocation module is configured to: use the neighbor discovery protocol or the dynamic host configuration protocol of the IPV6 to allocate address feature information of one of the networks to the attached device, or allocate the information to the attached device. The address generated by the address feature information of one of the networks.

The address feature information includes a network address prefix.

The forwarding module is configured to: after receiving the packet sent by the device, analyze the destination network of the packet, if the address feature information of the destination network and the address feature information of the source address of the packet If the address feature information of the source address of the packet is replaced with the address feature information of the destination network, the packet is forwarded.

The forwarding module is configured to analyze the forwarding destination of the data packet, and determine whether the network address prefix authorized by the destination network to the gateway is consistent with the network address prefix of the source address of the data packet. If not, the network address prefix is replaced. For the packet replied by the destination network, the network address prefix part of the destination address of the packet is replaced with the network address prefix currently used by the host.

Optionally, in the embodiment of the present invention, the forwarding module is further configured to receive the destination The packet replied by the IPv6 network replaces the address feature information of the destination address of the packet replied by the destination IPv6 network with the address feature information currently used by the hanged device.

The technical solution of the present application will be further described below with reference to specific examples.

The embodiment of the present invention provides a method for accessing a plurality of IPv6 networks based on a gateway device. As shown in FIG. 6, the method in this embodiment includes:

Step 101: The gateway establishes two IPv6 connections, and accesses the IPv6 network A and the IPv6 network B.

Step 102: The gateway obtains a PD (Prefix Delegation) named "PDA" from the network A, and obtains a PD from the network B, and is named "PDB";

For example, the PDA is 2000:200::/64 and the PDB is 3000:300::/64.

Step 103: The gateway address delivery module allocates only one network address prefix to the attached device, or assigns the downlink device to an address generated by one of the network address prefixes.

For example, the "PDA" 2000:200::/64 is sent to the attached device, or the downloaded device is assigned the address generated by the PDA.

Step 104: The attached device generates a GUA (Global Unique Address) according to the received network address prefix configuration.

For example, the generated GUA is 2000:200::1.

Step 105: The connected device starts to access the network, as shown in FIG. 3;

For example, the source IP address of the Ping (Pet Internet Groper) is 2000:200::1 and the destination IP is 2300::1.

Step 106: The gateway performs routing. If network B is selected (if the destination of 2300::1 is out of network B), step 107 is performed, if network A is selected (if the destination of 2300::1 is outgoing from network A) , without changing the message, directly performing step 108;

Step 107: If the destination of 2300::1 goes out from network B, replace the network address prefix part of the source address, and replace the address to become 3000:300::1;

Step 108: Forward the message to the WAN of the wide area network;

Step 109: The gateway receives the network side packet, and checks the network address prefix part of the destination IP, such as If the PDA (2000::200::) is not processed directly, step 111; if it is a PDB, step 110;

Step 110: If it is a PDB (3000:300::), replace the network address prefix portion of the destination address with the PDA;

Step 111: Forward the packet to the LAN (Local Area Network) side.

In summary, this document provides a method for accessing a multi-IPv6 network environment based on a gateway device. This method avoids the difficulty in selecting a source address when a connected device accesses multiple IPv6 networks due to multiple IPv6 addresses. The problem is that the message cannot be correctly forwarded due to incorrect source address selection.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be performed by a program to instruct related hardware, such as a processor, which may be stored in a computer readable storage medium, such as a read only memory, disk or optical disk. Wait. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiment may be implemented in the form of hardware, for example, by implementing an integrated circuit to implement its corresponding function, or may be implemented in the form of a software function module, for example, executing a program stored in the memory by a processor. / instruction to achieve its corresponding function. This application is not limited to any specific combination of hardware and software. A person skilled in the art should understand that the technical solutions of the present application can be modified or equivalent, without departing from the spirit and scope of the technical solutions of the present application, and should be included in the scope of the claims of the present application.

Industrial applicability

The above technology prevents the device from being incorrectly forwarded due to incorrect source address selection.

Claims

A method of accessing an IPv6 network, including:

After the gateway obtains the address feature information of the multiple IPv6 networks, the address device information of one of the IPv6 networks is allocated to the attached device, or the address generated by the address feature information of one of the IPv6 networks is allocated to the attached device.

After receiving the packet sent by the device, analyzing the destination IPv6 network of the packet, if the address feature information of the destination IPv6 network is inconsistent with the address feature information of the source address of the packet, After the address feature information of the source address of the packet is replaced with the address feature information of the destination IPv6 network, the packet is forwarded.
The method of claim 1 further comprising:

After receiving the packet replied by the destination IPv6 network, the gateway replaces the address feature information of the destination address of the packet replied by the destination IPv6 network with the address feature information currently used by the downlink device.
The method according to claim 1 or 2, wherein the assigning address characteristics information of one of the IPv6 networks to the attached device, or assigning the address generated by the address feature information of one of the IPv6 networks to the attached device includes: :

The gateway uses the neighbor discovery protocol or the dynamic host configuration protocol of the IPV6 to allocate the address feature information of one of the IPv6 networks to the attached device, or assign the address generated by the address feature information of one of the IPv6 networks to the attached device. of.
The method of claim 1 or 2 wherein:

The address feature information includes a network address prefix.
A gateway that includes:

The allocation module is configured to allocate the address feature information of one of the IPv6 networks to the attached device after the address feature information of the plurality of IPv6 networks is obtained, or generate the address feature information of the IPv6 network by assigning the address information of the IPv6 network to the attached device. the address of;

a forwarding module, configured to analyze, after receiving the packet sent by the device, the destination IPv6 network that is forwarded by the packet, and the address feature information of the destination IPv6 network and the packet If the address feature information of the source address is inconsistent, the address feature information of the source address of the packet is replaced with the address feature information of the destination IPv6 network, and the packet is forwarded.
The gateway of claim 5:

The forwarding module is further configured to receive the packet replied by the destination IPv6 network, and replace the address feature information of the destination address of the packet replied by the destination IPv6 network with the address feature information currently used by the downlink device. .
The gateway according to claim 5 or 6, wherein the allocation module is configured to:

The neighbor discovery protocol or the dynamic host configuration protocol of the IPV6 is used to allocate the address feature information of one of the networks to the attached device, or to allocate the address generated by the address feature information of one of the networks to the attached device.
A gateway according to claim 5 or 6, wherein

The address feature information includes a network address prefix.