Study and Implementation of the Multi-exports Campus Network Based on Dual Fusion Protocol of IPv6and IPv4
|School||Central South University|
|Keywords||IPv6 OSPFv3 VPN IPsec Protocol|
Protecting existing investments is a very important issue to make networks smoothly transition to IPv6. IPv6protocol, as the next generation internet protocol, has got some application in the internet. It needs a long period time to implement completely transition from IPv4to IPv6, and different network structures will have their own transition strategies. This paper, which is based on Hunan University CNGI IPv6networks construction application, started with the theoretical analysis of IPv6technology. Compared and analyzed different transition scenarios for IPv6transition technology, discussed the security issues, the next generation of campus network which is based on the deployment of IPv6technology has been planned and designed. IPv6network technology has been comprehensive used to realize the IPv4and IPv6network integration. In this way, different end-user can automatically select the IPv4and IPv6access to resources. In the present situation of the network, it can automatically match optimal export to visit in many exports, according to the purpose of the resources.On the basis of comprehensive analysis of technical principles related to IPv6network and next-generation campus network construction principles and design requirements, Hunan University CNGI CPN(Customer Premises Network) uses three-tier network architecture: Core layer, convergence layer and access layer, formed by four dual-stack core switch,62sets of dual stack aggregation switches. The whole campus network realization IPv4and IPv6double stack operation. The core switches is connected by Gigabit optical loop, using OSPFv3dynamic routing protocol. Between the core layer and aggregation layer switches is connected with Gigabit or10Gigabit Fiber, using IPv6static routing strategy, to ensure rapid routing convergence. Using tunnel technical configuration IPv6/IPv4tunnel in the core layer, south and north Campus are connected with IPv6.And then the cisco12404is used to realize network Unicom of CERNET2and pure IPv6. And the CPN state of IPv6construction of CERNET2. Through in-depth research of the IPsec technology, the solutions of implementation of IPsec over IPv6network security scheme have been determined, and the test in practical applications environment has been passed.