METHOD, DEVICE, AND SYSTEM FOR PROCESSING IPV6 PACKET

• US 20120236864A1
• Filed: 05/29/2012
• Published: 09/20/2012
• Est. Priority Date: 12/07/2009
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Zheng, Ruobin, Li, Hongyu
• Granted Patent: US 8,917,723 B2
• Time in Patent Office: Days
• US Class Current: 370/392
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 2101/659 Internet protocol version 6 [IPv6] addresses
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

The present disclosure discloses a method, device, and system for processing an IPv6 packet, and relates to the field of Internet technologies. According to the present disclosure, a secure access, authentication, and authorization can be ensured in an IPv6 network, and different IPv6 address prefixes are allocated to different terminals. Therefore, normal routing in the network is ensured. A method for processing an IPv6 packet provided in an embodiment of the present disclosure includes: an access node adds access line information to an IPv6 packet; and forwards the IPv6 packet that is added with the access line information to an IP edge node. The present disclosure is applicable to a scenario of processing a packet in an IPv6 network.

Claims

1. A method for processing an Internet Protocol version 6 IPv6 packet, comprising:

receiving, by an access node, an IPv6 packet from a terminal;

adding, by the access node, access line information to the IPv6 packet; and

forwarding, by the access node, the IPv6 packet added with the access line information to an IP edge node.

2. The method according to claim 1, wherein adding access line information to the IPv6 packet specifically comprises:

adding, by the access node, at least one IPv6 extension header to the IPv6 packet, wherein the IPv6 extension header carries the access line information.

3. The method according to claim 2, wherein adding at least one IPv6 extension header to the IPv6 packet, wherein the IPv6 extension header carries the access line information specifically comprises:

adding, by the access node, a first IPv6 extension header to the IPv6 packet, wherein the first IPv6 extension header carries an access loop identification, a next header Next Header, and the length of an extension header;

wherein, the Next Header indicates information of a next extension header, and the access line information comprises the access loop identification.

4. The method according to claim 3, wherein adding a first IPv6 extension header to the IPv6 packet comprises:

adding, by a first relay agent at the access node, the upper level IPv6 extension header in the IPv6 packet;

5. The method according to claim 3, wherein after the adding the first IPv6 next header to the IPv6 packet, the method further comprises:

receiving, by the IP edge node, the IPv6 packet that comprises the first IPv6 extension header; and

deleting, by the IP edge node, the first IPv6 extension header from the IPv6 packet, and forwarding the IPv6 packet.

6. The method according to claim 3, wherein when the IPv6 packet comprises a dynamic host configuration protocol DHCP message, after adding, the first IPv6 extension header to the IPv6 packet, the method further comprises:

receiving, by the IP edge node, the IPv6 packet that comprises the first IPv6 extension header; and

extracting, by the IP edge node, the access loop identification according to the first IPv6 extension header, and deleting the first IPv6 extension header;

encapsulating, by the IP edge node, the access loop identification and the DHCP message in the relay message option of a relay agent message;

or directly adding, by the IP edge node, the access loop identification to the IPv6 packet where the DHCP message is located in the form of an option; and

forwarding, by the IP edge node, the IPv6 packet where the DHCP message is located to a network server.

7. The method according to claim 6, wherein after the forwarding, by the IP edge node, the IPv6 packet where the DHCP message is located to the network server, the method further comprises:

receiving, by the IP edge node, the IPv6 packet where the DHCP message sent by the network server is located, wherein the IPv6 packet carries the access loop identification; and

deleting, by the IP edge node, the access loop identification, adding, according to the access loop identification, the first IPv6 extension header to the IPv6 packet, and forwarding the IPv6 packet.

19. The method according to claim 3, wherein after forwarding, by the access node, the IPv6 packet added with the access line information to an IP edge node, a second relay agent at the IP edge node adds a current level IPv6 extension header to the IPv6 packet in at least one of the following modes:

directly adding, by the second relay agent, the current level IPv6 extension header after the upper level IPv6 extension header, wherein the Next Header in the upper level IPv6 extension header indicates the current level IPv6 extension header; and

modifying, by the second relay agent, the upper level IPv6 extension header, and adding the current level access loop identification to the access loop identification of the upper level IPv6 extension header.

8. A method for processing an Internet Protocol version 6 (IPv6) packet, comprising:

receiving, by an IP edge node, an IPv6 packet that carries access line information from an access node;

obtaining, by the IP edge node, the access line information from the IPv6 packet; and

searching for a correspondence according to the access line information, so as to perform a corresponding operation on the IPv6 packet;

wherein the access line information is added to the IPv6 packet by the access node.

9. The method according to claim 8, wherein receiving an IPv6 packet that carries access line information comprises:

receiving an IPv6 packet that has at least one IPv6 extension header, wherein the IPv6 extension header carries the access line information; and

obtaining the access line information or the vendor information according to the IPv6 extension header;

or

receiving an IPv6 packet that bears an Internet Control Message Protocol version 6 ICMPv6 message, wherein the IPv6 packet bears the ICMPv6 message and the access line information in an ICMPv6 relay message; and

extracts the access line information from the ICMPv6 relay message.

10. The method according to claim 8, wherein searching for a correspondence according to the access line information or the vendor information to perform a corresponding operation on the IPv6 packet comprises:

searching for a first correspondence according to the access line information, so as to perform access, authentication, or authorization on the IPv6 packet, wherein the IPv6 extension header carries an access loop identification, a next header Next Header, and the length of an extension header, and the access line information comprises the access loop identification; and

/or

searching for a second correspondence according to the access line information, so as to allocate an IPv6 address prefix to the IPv6 packet.

11. A network device configured to receive an Internet Protocol version 6 (IPv6) packet from a terminal, comprising:

an information adding unit, configured to add access line information to the IPv6 packet; and

a forwarding unit, configured to forward the IPv6 packet to which the information adding unit adds the access line information to an IP edge node.

12. The network device according to claim 11, wherein

the information adding unit is specifically configured to add at least one IPv6 extension header to the IPv6 packet;

and

the access line information is access loop identification, and the added IPv6 extension header comprises an access loop identification, a next header Next Header, and the length of an extension header, wherein, the Next Header indicates information of a next extension header.

13. The network device according to claim 11, wherein

the information adding unit is specifically configured to bear an Internet Control Message Protocol version 6 ICMPv6 message in an IMCPv6 relay message, wherein the IPv6 packet is the ICMPv6 message, the ICMPv6 relay message bears the access loop identification, and the access line information comprises the access loop identification.

14. The network device according to claim 12, wherein the information adding unit comprises a current level adding module and an upper level adding module, wherein the upper level adding module is configured to add an upper level IPv6 extension header to the IPv6 packet, and the current level adding module is configured to add a current level IPv6 extension header to the IPv6 packet in at least one of the following modes:

directly adding the current level IPv6 extension header after the upper level IPv6 extension header, wherein the Next Header in the upper level IPv6 extension header indicates the current level IPv6 extension header;

or,

modifying the upper level IPv6 extension header and adding the current level access loop identification to the access loop identification of the upper level IPv6 extension.

15. A network server, comprising:

a receiving unit, configured to receive an Internet Protocol version 6 (IPv6) packet that carries access line information from an access node and obtain the access line information from the IPv6 packet; and

a processing unit, configured to search for a correspondence according to the access line information, so as to perform a corresponding operation on the IPv6 packet, wherein the access line information is added to the IPv6 packet by the access node.

16. The network server according to claim 15, wherein

the receiving unit is configured to receive the IPv6 packet that has at least one IPv6 extension header, wherein the IPv6 extension header carries the access line information;

and obtain the access line information according to the IPv6 extension header;

or

receive the IPv6 packet that bears an ICMPv6 message, wherein the IPv6 packet bears the ICMPv6 message and the access line information in an ICMPv6 relay message; and

extract the access line information from the ICMPv6 relay message.

17. The network server according to claim 15, wherein

the processing unit is further configured to search for a first correspondence according to the access line information, so as to perform access, authentication, or authorization on the IPv6 packet, wherein the IPv6 extension header carries an access loop identification, a next header Next Header, and the length of the extension header, and the access line information comprises the access loop identification;

and/or

the processing unit is further configured to search for a second correspondence according to the access line information, so as to allocate an IPv6 address prefix to the IPv6 packet.

18. An IPv6 network system comprising:

a terminal communicatively connected to an access node and an IP edge node;

wherein;

the terminal is configured to send an IPv6 packet to the access node;

the access node is configured to add access line information to the IPv6 packet; and

forward the IPv6 packet added with the access line information to the IP edge node; and

the IP edge node is configured to receive the IPv6 packet that carries the access line information; and

search for a correspondence according to the access line information, so as to perform a corresponding operation on the IPv6 packet.