温占考--基于OpenVPN的IPv6overIPv4隧道技术

462200711()JournalofXiamenUniversity(NaturalScience)Vol.46Sup.2Nov.2007:2007208220:,,.Email:[e-mail]6overIPv41,1,1,1,2(1.,2.,110004):IPv4(InternetProtocolVersion4)IPv6(InternetProtocolVersion6):IPv4/IPv6(DualStack)(Tunneling)NAT2PT/,,OpenVPNIPv6overIPv4.:OpenVPN;IPv6overIPv4;;:TP393:A:043820479(2007)S220050204Internet,IPv4,IP,IPv4.,IETF(InternetEngi2neeringTaskForce)IPv6,IPv6IPv4,IPv4,.,IPv6IPv4,,QoS.IPv4IPv6,,IPv6.3:[1][2]NAT2PT[3]/.OpenVPN[4]IPv6overIPv4,OpenVPNHTTPNAT[5],OpenVPNIPv6overIPv4IPv6..1IPv4/IPv6IETFIPv4IPv6,,,NAT2PT.1.1IPv4IPv6.IPv4IPv6,IPv4IPv4,IPv6IPv6.DNS.IPv4IPv6,.,,,,..1.2,.IPv6IPv6IPv4,,IPv6IPv4,IPv6IPv4.IPv4/IPv6,,IPv6,IPv6,.1.3NAT2PT/NAT2PT/IPv6IPv4.IPv6IPv4,NAT2PT,2:OpenVPNIPv6overIPv451NAT2PTIPv4,,IPv6IPv4,NAT2PTIPv6IPv4,.IP,NAT2PT.(ALG).IPv6IPv4,IPv4IPv6.,IPv4,IPv6,.2OpenVPN(1)OpenVPNSSL/TLS[6]OSI23,IPv6OpenVPNIPv4.(2),WindowsLinuxBSDMacOSXSolaris,.(3),.(4)NAT,HTTP,NAT.(5),.OpenVPNIPv6,,;,HTTP,OpenVPN,IPv6.3OpenVPN1.eth0IPv4IPv6,Linux[7],Quagga[8]IPv6BGP4+,:interfacetap0ipv6address2001:da8:9000:a255::1/64noipv6ndsuppress2raipv6ndprefix2001:da8:9000:a255::/64BGP4+IPv6,:routerbgp65403bgprouter2id202.118.11.169nobgpdefaultipv42unicastneighbor2001:da8:9000:f0ff::1:1remote2as65400neighbor2001:da8:9000:f0ff::1:1interfaceeth0neighbor2001:da8:9000:f0ff::1:1descriptionr2neu22bgw!address2familyipv6network2001:da8:9000:a255::/64neighbor2001:da8:9000:f0ff::1:1activateexit2address2familyOpenVPN:local202.118.11.169port8080prototcpdevtap0caca.crtcertserver.crtkeyserver.key#Thisfileshouldbekeptsecretdhdh1024.pem#IPv4,server192.168.254.0255.255.255.0client2to2clientkeepalive10120pluginmisc/openvpn2auth2pam.soopenvpnclient2cert2not2requiredusername2as2common2namecomp2lzousernobodygroupnobodypersist2keypersist2tunverb4OpenVPN:clientdevtapprototcpremotevpnhost.neu.edu.cn8080remote2randomresolv2retryinfiniteifconfig2noexecnobindpersist2keypersist2tun52()20071OpenVPNIPIPv4eth0202.118.11.169IPv4IPv6eth02001:da8:9000:f0ff::1:2IPv6IPv6tap02001:da8:9000:a255::/64IPV61IPv6caca.crtauth2user2passns2cert2typeservercomp2lzoverb4,OpenVPNzebradbgpd,Open2VPNIPv6,1.OpenVPN,OpenVPNIPv6,IPv6overIPv4.4,OpenVPNIPv6,,QoS,:(1)TCP/80TCP/8080TCP/110TCP/25UDP/53TCP/53,,,.(2),UDP,UDP,.(3),remote,,.(4)TCP/443,CONNECT,HTTP.5OpenVPNIPv6overIPv4,,IPv6,IPv6,.:[1]TsuchiyaK,HiguchiH,AtarashiY.RFC2767DualStackHostsusingtheBump2In2the2StackTechnique(BIS)[S].IETF,2000.[2]GilliganR,NordmarkE.RFC2893TransitionMechanismsforIPv6HostsandRouters[S].IETF,2000.[3]TsirtsisG,SrisureshP.RFC2766NetworkAddressTrans2lation2ProtocolTranslation(NAT2PT)[S].IETF,2000.[4]OpenVPNSolutions[EB/OL].[5]SrisureshP,HoldregeM.RFC2663IPNetworkAddressTranslator(NAT)TerminologyandConsiderations[S].IETF,1999.[6]DierksIT.AllenC.RFC2246TheTLSProtocolVersion1.0[S].IETF,1999.2:OpenVPNIPv6overIPv453[7]TheLinuxKernelArchives[EB/OL].[8]QuaggaRoutingSuite[EB/OL].(1.NetworkingCenter,NortheasternUniversity,2.CollegeofInformationScienceandEngineering,NortheasternUniversity,Shenyang110004,China)Abstract:Thereareawiderangeoftechniqueshavebeenidentifiedandimplemented,basicallyfallingintothreecategories:Dual2stacktechniques,Tunnelingtechniques,Translationtechniques.Therearealsomanytunnelingtechniqueshavebeenimplemented,theauthorwillexplainhowtoimplementIPv6overIPv4TunnelingtechniquesuseOpenVPN.Keywords:OpenVPN;IPv6overIPv4;tunnelingtechnology;tunnelconfiguration(36),3,IPv6,VLANVLANIPv6.IPv6,IPv6.:[1]RFC4291,IPVersion6AddressingArchitecture[S].2006.AssignIPv6AddressinCampusNetworkBasedonIPv4/IPv6Dual2stackCHENXiao2chou,SHANGShao2ping3(Information&NetworkCenter,XiamenUniversity,Xiamen361005,China)Abstract:InordertoassignIPv6addresseseasilyanddeployIPv6addressesrapidlyinIPv4/IPv6dual2stackcircumstance,sometransitionpolicieswereproposedbyusingexistingassignmentsolutionofIPv4addressesincampusnetwork.Keywords:IPv6;addressesassign