利索-全球专利检索

  1. 登录
  2. 注册
发明公开
CN103188351A IPv6环境下IPSecVPN通信业务处理方法与系统 有权

IPv6环境下IPSecVPN通信业务处理方法与系统
摘要：
本发明实施例公开了一种IPv6环境下IPSec VPN通信业务处理方法与系统，其中，方法包括：接入设备接收客户端发送的IPv6数据包，根据该IPv6数据包中源IPv6地址中前64位路由前缀中的静态路由标识信息，识别所述源IPv6地址是否为静态地址；若所述源IPv6地址是静态地址，接入设备根据所述前64位路由前缀中的接入类型标识，识别所述IPv6数据包是否为互联网协议安全虚拟专用网IPSecVPN数据包；若所述IPv6数据包为IPSec VPN数据包，则对所述源IPv6地址中后64位中的认证信息进行认证；若认证不通过，则丢弃该IPSec VPN数据包；若认证通过，则根据IPSec VPN数据包中目的地址直接转发给统一接IPSec VPN网关或其它目标VPN网关。本发明实施例可以实现IPv6环境下IPSec VPN流量的监管，同时提升监控效率。
摘要（英）：

The embodiment of the invention discloses an IPSec (Internet Protocol Security) VPN (Virtual Private Network) communication service processing method and a system under an IPv6 (Internet Protocol Version 6) environment. The method comprises the steps that access equipment receives an IPv6 data package sent by a client side; whether a source IPv6 address is a static address is identified according to static route identification information in top 64 route prefixes in the source IPv6 address in the IPv6 data package; if the source IPv6 address is the static address, the access equipment identifies whether the IPv6 data package is an IPSec VPN data package according to access type identification in the top 64 route prefixes; if the IPv6 data package is the IPSec VPN data package, certification information in rear 64 route prefixes in the source IPv6 address is certificated; if certification is not passed, the IPSec VPN data package is discarded; and if the certification is passed, the IPSec VPN data package is forwarded to a unified access IPSec VPN gateway or other targeted VPN gateways according to a destination address in the IPSec VPN data package. According to the IPSec VPN communication service processing method and the system, an IPSec VPN flow under the IPv6 environment can be supervised, and the monitoring efficiency is improved.

公开/授权文献
0/0