IPV6的嵌入式校园网络防火墙设计

为了解决防火墙对IPv6 协议的兼容及对内部网络之间安全的保障问题，本文设计实
现了基于Intel Xscale IXP425 处理器的嵌入式IPv6 防火墙。该防火墙可以通过WEB 远程加以管理，对IPv6 网络包和IPv4 网络包均可以进行良好的过滤。防火墙能够判断出网络包的协议类型，分别加以处理，实行动态包过滤，并可以解决IPv6 分片攻击问题。防火墙硬件系统基于IXP425 处理器，该处理器具有良好的网络特性，拥有分布式处理架构，并行方式执行其指令流。处理器的高速性保证了嵌入式IPv6 防火墙处理网络数据包的高效性。防火墙软件系统基于Linux 的Netfilter 框架，该框架对网络包的处理体系十分成熟，从而保证了嵌入式IPv6 防火墙运行时的稳定性和准确性。
关键字：IPv6,防火墙，IXP425，网络
Abstract: In order to solve the problem of the firewall's compatibility to IPv6 protocol and the
security among the internal nets, the paper designs and implements the embedded IPv6 firewall based on Intel XScale IXP425 network processor .This firewall can be managed by visting WEB page from remote machine and can filter both Ipv6 packet and IPv4 packet. It can identify the protocol of the net packet and process it in respective ways with the main method of Dynamic Packet Filtering.The firewall also solves the problem of IPv6 fragmentation. The hardware system of the firewall is based on IXP425 network processor with good network characteristic, whose distributed processing framework and parallel implementation of its order flows ensure the embedded IPv6 firewall processes the data packet with high speed. The software system of the firewall is based on the Netfilter framework of the Linux with a sophisticated system to process the network packet .The framework support the embedded IPv6 firewall run with high stability and veracity .
Key word:IPV6,Firewall, IXP425，Network