Research on Collaborative Technology of IPv6 Protocol and Firewall Based on IPSec

Summary: For the data protected by the IPSec protocol supported by IPv6, it is difficult to obtain the required port information when passing through the firewall. This paper proposes to configure SPD on the firewall to realize the IPSec processing of the protocol header by the firewall, thereby reducing the burden on the host; the MAC address plus link prefix information is used as a security verification method to further improve the data forwarding efficiency of general firewalls. The various methods involved in this scheme have a good technical application foundation, and the multiple technical reorganization scheme is highly achievable.