[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

WO2017161876A1 - Method and device implementing network access - Google Patents

Method and device implementing network access Download PDF

Info

Publication number
WO2017161876A1
WO2017161876A1 PCT/CN2016/103287 CN2016103287W WO2017161876A1 WO 2017161876 A1 WO2017161876 A1 WO 2017161876A1 CN 2016103287 W CN2016103287 W CN 2016103287W WO 2017161876 A1 WO2017161876 A1 WO 2017161876A1
Authority
WO
WIPO (PCT)
Prior art keywords
packet
ipv6
ipv4
address
network
Prior art date
Application number
PCT/CN2016/103287
Other languages
French (fr)
Chinese (zh)
Inventor
高飞
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2017161876A1 publication Critical patent/WO2017161876A1/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/251—Translation of Internet protocol [IP] addresses between different IP versions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/40—Support for services or applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/52—Multiprotocol routers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2542—Translation of Internet protocol [IP] addresses involving dual-stack hosts

Definitions

  • the embodiments of the present invention relate to an IPv4 user traversing the IPv6 field, and specifically relate to a method and apparatus for implementing network access.
  • IPv4 Internet Protocol Version 4
  • IPv6 Internet Protocol Version 6, Internet Protocol Version 6
  • IPv6 IPv6 deployment will be paralyzed by the initial transition services and applications.
  • current mainstream instant messaging software does not support IPv6. Facing the status quo, it is necessary to realize IPv4 users to access network access through IPv6.
  • IPv4v6 dual stack technology BIH (Bump in the host) technology
  • IPv4v6 dual stack technology IPv4v6 dual stack technology
  • the CPE Customer Premise Equipment
  • the CPE needs to obtain the IPv4 address and the IPv6 address from the network side through IPv4v6 dual-stack dialing.
  • the client accessing the CPE communicates with the external IPv4 host through the IPv4 protocol stack. If it is an IPv6 client, it communicates with an external IPv6 host through the IPv6 protocol stack.
  • the device needs to create two protocol stacks. When dialing, the device needs to apply for two addresses (IPv4 address, IPv6 address) to the network side, so the consumption of network resources is increased.
  • the BIH translator intercepts the DNS (Domain Name System) request sent by the client. If the AAAA request is sent to indicate that the client is an IPv6 client, the request is directly sent to the public network DNS-server for resolution, and then The returned DNS resolution result is sent to the IPv6 client. If the A type request is sent, the client is an IPv4 client. In this case, the AAAA request is sent to the public network DNS server for parsing. If the result of the class A analysis is returned, it is sent to the IPv4 client. If the AAAA class request is returned, the virtual IPv4 address is constructed and sent to the client, and the subsequent client interacts with the virtual IPv4 address.
  • DNS Domain Name System
  • the CPE Assume that the current CPE is IPv6 single-stack dialing, and the IPv4 single-stack host that accesses the CPE initiates a Class A DNS resolution request. Because the CPE itself cannot send an IPv4 address to the client, the CPE constructs an AAAA dns request. If the host has only an IPv4 address and no IPv6 address, the client DNS resolution fails and the client cannot access the external IPv4 host. The IPv4 single-stack host cannot access the external IPv4 host when the CPE is IPv6 single-stack dialing. This is also determined by the use of BIH for the transition from IPv4 to IPv6.
  • the embodiments of the present invention provide a method and an apparatus for an IPv4 user to implement mutual access through an IPv6 network, and support an IPv4/IPv6 stateless address translation technology to implement an application/user non-aware and transparent IPv6 transition.
  • a method of implementing network access including:
  • the method further includes: the user side translator checking validity of the first IPv4 message.
  • the method further includes:
  • the dialing status of the user terminal equipment CPE is detected.
  • translating the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet includes:
  • the network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.
  • the method further includes:
  • translating the received second IPv6 packet into the fourth IPv4 packet includes:
  • sending the fourth IPv4 packet to the destination client includes:
  • the method further includes: verifying validity of the second IPv6 packet.
  • translating the received second IPv6 packet into the fourth IPv4 packet includes:
  • the method further includes:
  • the third IPv6 packet obtained according to the received fifth IPv4 packet is transparently transmitted to the network side translator, and the third IPv6 packet is used for the network side translator to translate the sixth IPv4 packet to the network side. IPv4 host.
  • transparently transmitting the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator includes:
  • the third IPv6 packet whose source address is the network maintenance address is sent to the network side translator.
  • verifying the validity of the first IPv4 packet or the second IPv6 packet includes one or more of the following:
  • An embodiment of the present invention further provides an apparatus for implementing network access, including:
  • the network maintenance module is configured to convert the source address of the received first Internet Protocol version 4 IPv4 packet to a network maintenance address of the user side translator by using the source address, and record the IPv4 address and the network maintenance address.
  • the IPv4 module is configured to translate the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet;
  • a communication module configured to send the first IPv6 message to the network side translator.
  • the device further includes:
  • a verification module configured to verify, by the user side translator, the validity of the first IPv4 message.
  • the verification module is further configured to:
  • the dialing status of the user terminal equipment CPE is detected.
  • the IPv4 module translates the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6.
  • the IPv6 packet is:
  • the network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.
  • the device further includes:
  • the IPv6 module is configured to translate the received second IPv6 packet into a fourth IPv4 packet, and send the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a network side translator The received packet of the third IPv4 packet and the packet sent by the IPv6 host.
  • IPv6 module translating the received second IPv6 packet into the fourth IPv4 packet is:
  • the sending, by the IPv6 module, the fourth IPv4 packet to the destination client includes:
  • the verification module is further configured to: check validity of the second IPv6 message.
  • IPv6 module translating the received second IPv6 packet into the fourth IPv4 packet is:
  • the IPv6 module is further configured to:
  • the third IPv6 packet obtained according to the received fifth IPv4 packet is transparently transmitted to the network side translator, and the third IPv6 packet is used for the network side translator to translate the sixth IPv4 packet to the network side. IPv4 host.
  • the transparent transmission of the third IPv6 packet obtained by the IPv6 module according to the received fifth IPv4 packet to the network side translator means:
  • the checking module verifies that the validity of the first IPv4 packet or the second IPv6 packet includes one or more of the following:
  • a computer storage medium is further provided, and the computer storage medium may store an execution instruction for executing the method for implementing network access in the foregoing embodiment.
  • the embodiment of the present invention has the following beneficial effects:
  • the IPv4 user can access the IPv6 network for mutual access.
  • the user-side translator can translate the IPv4 packet into an IPv6 packet and send it to the network-side translator.
  • the network-side translator then receives the received IPv6 packet.
  • the translated text is an IPv4 packet and then sent to the IPv4 host on the network side to implement mutual access between the IPv4 hosts on both ends through the IPv6 single-stack network.
  • the method and device for implementing mutual access by an IPv4 user traversing an IPv6 network can meet the usage scenarios of an IPv4 ocean and an IPv6 isolated island.
  • FIG. 1 is a flowchart of a method for implementing network access according to an embodiment of the present invention
  • FIG. 2 is a flowchart of a method for an IPv4 user to access an IPv6 network to implement mutual access according to an embodiment of the present invention
  • FIG. 3 is a schematic structural diagram of an apparatus for implementing network access according to an embodiment of the present invention.
  • FIG. 4 is a flowchart of an operation of an IPv4 user traversing an IPv6 network to implement mutual access according to Embodiment 1 of the present invention
  • FIG. 5 is a diagram showing an example of a translation process according to Embodiment 2 of the present invention.
  • an embodiment of the present invention provides a method for implementing network access, which includes:
  • the first IPv6 packet is sent to the destination IPv4 host on the network side after being translated into the second IPv4 packet by the network side translator.
  • IPv4 on the basis of non-state translation of IPv4 packets into IPv6 packets and mutual access, a SNAT (source address) conversion is performed, and all intranet IPv4 addresses are converted into a unified IPv4 address, and then unified.
  • the IPv4 address is translated into an IPv6 address, which guarantees that there is only one external IPv6 address, which simplifies processing.
  • the method further includes: the user side translator checking validity of the first IPv4 message; and/or detecting a dialing state of the user terminal device CPE.
  • the embodiment of the present invention is enabled after the IPv6 single stack is successfully succeeded (in this case, two conditions are met: IPv6 single-stack dialing, single-stack dialing is successful), so the dialing state of the CPE needs to be detected before the translation, and the validity of the packet is verified. After the IPv6 single-stack dialing is successful.
  • Translating the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet includes:
  • the network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.
  • the method further includes:
  • Translating the received second IPv6 packet into the fourth IPv4 packet includes:
  • Sending the fourth IPv4 packet to the destination client includes:
  • the method further includes: checking validity of the second IPv6 message.
  • Translating the received second IPv6 packet into the fourth IPv4 packet by the user-side translator includes:
  • the method further includes:
  • the transparent transmission of the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator includes:
  • the validity of the first IPv4 packet or the second IPv6 packet by the user side translator includes one or more of the following:
  • a checksum entry exists in an IPv4 packet or an IPv6 packet. If the value is 0, the packet will not be translated.
  • the embodiment of the invention implements the purpose of the IPv4 host traversing the IPv6 network to achieve mutual access:
  • the technology of the embodiment of the present invention can smoothly transition to IPv6 while ensuring that the terminal user continues to use the related IPv4 terminal product.
  • the user side reduces the processing overhead by address translation before translation:
  • IPv4 address of the client Converts the private IPv4 address of the client to the IPv4 address of the user-side translator through network conversion before performing user-side translation (for example, converting 192.168.0.100 to 192.0.0.4)
  • the source IPv6 address sent to the network side translator after this step is the same IPv6 address, so the processing is simpler for the network side translator, which reduces the processing overhead.
  • receiving the destination IPv6 address sent from the network-side translator is the same IPv6 address, which also reduces the processing overhead.
  • an embodiment of the present invention provides an apparatus for implementing network access, including:
  • the network maintenance module is configured to convert the source address of the received first Internet Protocol version 4 IPv4 packet to a network maintenance address of the user side translator by using the source address, and record the IPv4 address and the network maintenance address.
  • the IPv4 module is configured to translate the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet;
  • a communication module configured to send the first IPv6 message to the network side translator.
  • the device further includes:
  • a verification module configured to verify, by the user side translator, the validity of the first IPv4 message.
  • the verification module is further configured to: detect a dialing state of the user terminal device CPE.
  • the network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.
  • the device further includes:
  • the IPv6 module is configured to translate the received second IPv6 packet into a fourth IPv4 packet, and send the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a network side translator The received packet of the third IPv4 packet and the packet sent by the IPv6 host.
  • the sending, by the IPv6 module, the fourth IPv4 packet to the destination client includes:
  • the verification module is further configured to: verify validity of the second IPv6 message.
  • the IPv6 module is further configured to:
  • the checking module verifies that the validity of the first IPv4 packet or the second IPv6 packet includes one or more of the following:
  • the technical solution provided by the embodiment of the present invention includes two aspects: when receiving the first IPv4 packet sent by the intranet client to the destination IPv4 host, the first IPv4 received by the user-side translator The message is translated into a first IPv6 message, and the first IPv6 message is sent to the network side translator; the network side translator translates the received first IPv6 message into a second IPv4 message; The second IPv4 packet is sent to the destination IPv4 host on the network side.
  • the network side translator When receiving the third IPv4 packet sent by the IPV4 host to the destination client, the network side translator translates the received third IPv4 packet into Transmitting the second IPv6 message to the user-side translator; the user-side translator translating the received second IPv6 message into the fourth IPv4 message, and the fourth IPv4 message The message is sent to the destination client.
  • the client that accesses the CPE may be an IPv4 single-stack, an IPv6 single-stack device, or an IPv4v6 dual-stack device. Therefore, the data packet sent from the client to the user-side translator may be an IPv4 packet or an IPv6 packet.
  • the network side translator also sends an IPv6 message to the user side translator deployed in the CPE. As discussed above, the user side translator is started if and only if the CPE performs IPv6 single stack dialing successfully, as shown in FIG. There are three situations that need to be discussed:
  • Case 1 The client sends an IPv6 packet.
  • the user-side translator does not need to perform translation processing on the IPv6 packet, and the IPv6 packet is forwarded by the source address and then forwarded.
  • Case 2 The client sends an IPv4 packet.
  • the user-side translator After receiving the IPv4 packet, the user-side translator must first determine the validity of the packet, and determine that the IPv4 packet is translated into an IPv6 packet when the validity requirement is met. Specifically, if the destination address of the packet is the device gateway (for example, 192.168.0.1) or the packet is a broadcast packet (for example, 255.255.255.255), it will not be translated into an IPv6 packet. The message will be translated into IPv6 by the user-side translator. The text is then sent to the network side translator of the public network.
  • the validity conditions that need to be met include:
  • IPv4 packet is a fragmented packet, it will not be translated into an IPv6 packet.
  • IPv6 packet If an IPv6 packet is a fragmented packet, it will not be translated into an IPv4 packet.
  • the so-called fragmentation means that the packet length is larger than the link maximum transmission unit and is allowed to be divided into several small segments so as to be able to be transmitted on the link.
  • the sender can send the maximum length of the icmp packet to 1452. Packets exceeding this length will not be translated.
  • the sender can send a maximum icmp packet length of 1232 when the sender specifies that no fragmentation is specified. Packets exceeding this length will not be translated.
  • the so-called forced non-fragmentation means that when the packet length is larger than the maximum transmission unit of the link, only when the packet is divided into several small segments to be transmitted on the link, the packet integrity is maintained. It is divided into several small pieces.
  • Case 3 The external device sends an IPv6 packet.
  • the packet may be sent by a network-side translator on the public network or from an external IPv6 host.
  • the user-side translator first needs to determine the validity of the message. If the validity requirement is met, it is translated into an IPv4 message and sent to the corresponding client. Otherwise, the IPv6 will be received. The packet is discarded.
  • FIG. 5 is a diagram showing an example of the entire translation process.
  • the IPv4 single-stack user with the address of 192.168.0.100 traverses the IPv6 single-stack network to access the public network host with the IPv4 address 3.3.3.3 as an example.
  • the source address of the first IPv4 packet sent by the client is 192.168.0.100.
  • the source address translation is performed first, and the source IPv4 address of the first IPv4 packet is 192.168.0.100 converted to the IPv4 of the user-side translator. Address 192.0.0.4, this can simplify the processing of the user-side translator and the network-side translator.
  • the IPv4 address 192.0.0.4 described here is the IPv4 reserved address for translation specified by the protocol. In practice, 192.0 can be selected. Any of the seven addresses 0.1 to 192.0.0.7, where the address 192.0.0.4 is selected. Specifically, the source IPv6 address of the first IPv6 packet translated by the user-side translator is always 1:1:1:aaaa:0:ffff:192.0.0.4, and the last 32 bits of the address (ie: 32 bits) The IPv4 address 192.0.0.4) is an IPv4 address to be translated into an IPv6 address. The reason why such an address is selected as the last 32 bits is to make a one-to-one correspondence between the IPv4 and IPv6 addresses before and after the translation.
  • the network side translator only needs to allocate an IPv4 address for the first IPv6 message ⁇ the second IPv4 message translation, which saves a lot of IPv4 address overhead.
  • the translation efficiency is improved. Due to the IP address of all intranet users in the previous source address translation
  • the address (for example, 192.168.0.100) is converted to the unified IPv4 address 192.0.0.4, so the corresponding relationship is recorded in the device. Therefore, the address of the translated fourth IPv4 packet can be used again by the corresponding relationship 192.0.0.4. Converted to the client's private IPv4 address 192.168.0.100 and sent to the client.
  • Embodiments of the present invention also provide a storage medium.
  • the foregoing storage medium may be configured to store program code for performing the following steps:
  • the source address of the received fourth Internet Protocol IPv4 packet is converted into a network maintenance address of the user-side translator by using the source address, and the corresponding relationship between the IPv4 address and the network maintenance address is recorded;
  • the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory.
  • ROM Read-Only Memory
  • RAM Random Access Memory
  • a mobile hard disk e.g., a hard disk
  • magnetic memory e.g., a hard disk
  • the IPv4 user can access the IPv6 network for mutual access, and the user-side translator can receive the IPv4 message statelessly into an IPv6 message and send it to the network side translator, and the network side translator will receive the network side translator again.
  • the IPv6 packets are translated into IPv4 packets and then sent to the IPv4 host on the network side to implement IPv6 hosts traversing the IPv6 single-stack network for mutual access.
  • the method and device for implementing mutual access by an IPv4 user traversing an IPv6 network can meet the usage scenarios of an IPv4 ocean and an IPv6 isolated island.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiments of the application disclose a method and device implementing network access. The method comprises: performing source address translation on a source address of a received first Internet Protocol Version 4 (IPv4) packet to generate a network maintaining address at a customer-side translator, and recording a correspondence between the IPv4 address and the network maintaining address; translating the first IPv4 packet having the source address of the network maintaining address to be a first Internet Protocol Version 6 (IPv6) packet; and transmitting the first IPv6 packet to a network-side translator.

Description

一种实现网络访问的方法和装置Method and device for realizing network access 技术领域Technical field

本发明实施例涉及IPv4用户穿越IPv6领域，具体涉及一种实现网络访问的方法和装置。The embodiments of the present invention relate to an IPv4 user traversing the IPv6 field, and specifically relate to a method and apparatus for implementing network access.

背景技术Background technique

随着移动互联网、物联网业务和网络规模的发展，广泛使用的IPv4地址越来越成为一种稀缺资源。全球地址分配组织IANA于2011年2月宣布所有IPv4(Internet Protocol Version 4，互联网协议第四版)地址已经全部下发至各大洲地址代理机构，这意味着IPv4地址已经耗尽再无可用地址分配。随着IPv4地址的耗尽，IPv6(Internet Protocol Version 6，互联网协议第六版)正式走到舞台中央。With the development of mobile Internet, Internet of Things services and network scale, widely used IPv4 addresses are increasingly becoming a scarce resource. The global address allocation organization IANA announced in February 2011 that all IPv4 (Internet Protocol Version 4) addresses have been distributed to all continents' address agencies, which means that IPv4 addresses are exhausted and no address allocation is available. . With the exhaustion of IPv4 addresses, IPv6 (Internet Protocol Version 6, Internet Protocol Version 6) officially went to the center of the stage.

随着IPv6运营实践日益广泛，取得的经验证明IPv6新技术部署需要对相关IPv4应用以及用户有良好的后向兼容性，否则IPv6部署将会受到过渡初期业务、应用的桎梏。比如目前主流即时通信软件都不支持IPv6。面对现状，需要实现IPv4用户穿越IPv6实现网络访问，With the increasing practice of IPv6 operations, the experience gained proves that the deployment of new IPv6 technologies requires good backward compatibility with related IPv4 applications and users. Otherwise, IPv6 deployment will be paralyzed by the initial transition services and applications. For example, current mainstream instant messaging software does not support IPv6. Facing the status quo, it is necessary to realize IPv4 users to access network access through IPv6.

相关技术是通过IPv4v6双栈技术或BIH(Bump in the host，主机间碰撞)技术实现功能：Related technologies are implemented through IPv4v6 dual stack technology or BIH (Bump in the host) technology:

其中，IPv4v6双栈技术：Among them, IPv4v6 dual stack technology:

CPE(Customer Premise Equipment，用户终端设备)拨号时需要通过IPv4v6双栈拨号从网络侧同时获得IPv4地址和IPv6地址，接入CPE的客户端为IPv4用户则通过IPv4协议栈与外部IPv4主机进行通信，如果是IPv6客户端则通过IPv6协议栈与外部IPv6主机进行通信。但是设备需要创建两个协议栈，拨号时设备需要向网络侧申请两个地址(IPv4地址、IPv6地址)，因此对网络资源的消耗增大。The CPE (Customer Premise Equipment) needs to obtain the IPv4 address and the IPv6 address from the network side through IPv4v6 dual-stack dialing. The client accessing the CPE communicates with the external IPv4 host through the IPv4 protocol stack. If it is an IPv6 client, it communicates with an external IPv6 host through the IPv6 protocol stack. However, the device needs to create two protocol stacks. When dialing, the device needs to apply for two addresses (IPv4 address, IPv6 address) to the network side, so the consumption of network resources is increased.

BIH翻译技术： BIH translation technology:

BIH翻译器截获客户端发来的DNS(Domain Name System，域名系统)请求，如果发来的是AAAA类请求说明客户端为IPv6客户端，将请求直接发送到公网DNS-server进行解析，然后将返回的DNS解析结果发送给IPv6客户端；如果发来的是A类请求说明客户端为IPv4客户端，此时构造AAAA请求将A类、AAAA类请求发送到公网DNS-server进行解析，如果返回A类解析结果则发送给IPv4客户端，如果返回AAAA类请求则构造虚拟IPv4地址发送给客户端，后续客户端就与该虚拟IPv4地址进行交互。The BIH translator intercepts the DNS (Domain Name System) request sent by the client. If the AAAA request is sent to indicate that the client is an IPv6 client, the request is directly sent to the public network DNS-server for resolution, and then The returned DNS resolution result is sent to the IPv6 client. If the A type request is sent, the client is an IPv4 client. In this case, the AAAA request is sent to the public network DNS server for parsing. If the result of the class A analysis is returned, it is sent to the IPv4 client. If the AAAA class request is returned, the virtual IPv4 address is constructed and sent to the client, and the subsequent client interacts with the virtual IPv4 address.

假设当前CPE为IPv6单栈拨号，接入CPE的IPv4单栈主机发起A类DNS解析请求，由于CPE本身无法向客户端发送IPv4地址，因此CPE会构造AAAA类dns请求，如果公网上该域名对应的主机仅有IPv4地址没有IPv6地址，则客户DNS解析失败，客户端无法访问外部IPv4主机。造成在CPE为IPv6单栈拨号情况下IPv4单栈主机无法访问外部IPv4主机。这也是由BIH适用于IPv4向IPv6过渡后期的使用条件决定的。Assume that the current CPE is IPv6 single-stack dialing, and the IPv4 single-stack host that accesses the CPE initiates a Class A DNS resolution request. Because the CPE itself cannot send an IPv4 address to the client, the CPE constructs an AAAA dns request. If the host has only an IPv4 address and no IPv6 address, the client DNS resolution fails and the client cannot access the external IPv4 host. The IPv4 single-stack host cannot access the external IPv4 host when the CPE is IPv6 single-stack dialing. This is also determined by the use of BIH for the transition from IPv4 to IPv6.

发明内容Summary of the invention

本发明实施例提供一种IPv4用户穿越IPv6网络实现互访问的方法和装置，支持IPv4/IPv6无状态地址翻译技术，实现应用/用户无感知、透明的IPv6过渡。The embodiments of the present invention provide a method and an apparatus for an IPv4 user to implement mutual access through an IPv6 network, and support an IPv4/IPv6 stateless address translation technology to implement an application/user non-aware and transparent IPv6 transition.

为了实现上述发明目的，本发明实施例采取的技术方案如下：In order to achieve the above object, the technical solution adopted by the embodiment of the present invention is as follows:

一种实现网络访问的方法，包括：A method of implementing network access, including:

将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录所述IPv4地址与所述网络维护地址的对应关系；Transmitting, by the source address, the source address of the IPv4 packet of the first Internet Protocol to the network maintenance address of the user-side translator, and recording the correspondence between the IPv4 address and the network maintenance address;

将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文；Translating, by the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet;

将所述第一IPv6报文发送到网络侧翻译器。 Sending the first IPv6 message to a network side translator.

可选地，所述方法之前还包括：所述用户侧翻译器检验所述第一IPv4报文的有效性。Optionally, the method further includes: the user side translator checking validity of the first IPv4 message.

可选地，所述方法之前还包括：Optionally, the method further includes:

检测用户终端设备CPE的拨号状态。The dialing status of the user terminal equipment CPE is detected.

可选地，将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文包括：Optionally, translating the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet includes:

将所述第一IPv4报文的网络维护地址按照预定规则转换为源地址为IPv6地址的第一IPv6报文，所述网络维护地址与所述IPv6地址一一对应。The network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.

可选地，所述的方法还包括：Optionally, the method further includes:

将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端，所述第二IPv6报文包括网络侧翻译器将接收到的第三IPv4报文翻译后的报文和IPv6主机发送的报文。Translating the received second IPv6 packet into a fourth IPv4 packet, and sending the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a third received by the network side translator The translated packet of the IPv4 packet and the packet sent by the IPv6 host.

可选地，将接收到的第二IPv6报文翻译成第四IPv4报文包括：Optionally, translating the received second IPv6 packet into the fourth IPv4 packet includes:

将所述第二IPv6报文的目的地址按照预定规则转换为目的地址为所述用户侧翻译器的网络维护地址，所述网络维护地址与所述IPv6地址一一对应。Converting the destination address of the second IPv6 packet to a destination address as a network maintenance address of the user-side translator according to a predetermined rule, where the network maintenance address is in one-to-one correspondence with the IPv6 address.

可选地，将所述第四IPv4报文发送给目的客户端包括：Optionally, sending the fourth IPv4 packet to the destination client includes:

根据记录的所述IPv4地址与所述网络维护地址的对应关系，将所述第四IPv4报文发送给目的客户端。Sending the fourth IPv4 packet to the destination client according to the corresponding relationship between the recorded IPv4 address and the network maintenance address.

可选地，所述方法之前还包括：检验所述第二IPv6报文的有效性。Optionally, the method further includes: verifying validity of the second IPv6 packet.

可选地，将接收到的第二IPv6报文翻译成第四IPv4报文包括：Optionally, translating the received second IPv6 packet into the fourth IPv4 packet includes:

将接收到的所述第二IPv6报文翻译成目的地址为所述用户侧翻译器的网络维护地址的第四IPv4报文；Translating the received second IPv6 packet into a fourth IPv4 packet whose destination address is a network maintenance address of the user side translator;

将所述第四IPv4报文的目的地址通过网络转换为所述用户的目的地址。 Transmitting, by the network, the destination address of the fourth IPv4 packet to the destination address of the user.

可选地，的方法还包括：Optionally, the method further includes:

将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器，第三IPv6报文用于网络侧翻译器翻译成第六IPv4报文后发送到网络侧的目的IPv4主机。The third IPv6 packet obtained according to the received fifth IPv4 packet is transparently transmitted to the network side translator, and the third IPv6 packet is used for the network side translator to translate the sixth IPv4 packet to the network side. IPv4 host.

可选地，将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器包括：Optionally, transparently transmitting the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator includes:

将接收到的第五IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址；Transmitting, by the source address, the source address of the received fifth IPv4 packet to the network maintenance address of the user-side translator;

将源地址为网络维护地址的第三IPv6报文发送至网络侧翻译器。The third IPv6 packet whose source address is the network maintenance address is sent to the network side translator.

可选地，检验所述第一IPv4报文或第二IPv6报文的有效性包括以下的一项或者多项：Optionally, verifying the validity of the first IPv4 packet or the second IPv6 packet includes one or more of the following:

验证所述第一IPv4报文或第二IPv6报文的目的地址；Verifying the destination address of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文是否为分片报文；Verifying whether the first IPv4 packet or the second IPv6 packet is a fragmented packet;

验证所述第一IPv4报文或第二IPv6报文长度；Verifying the length of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文的校验总和checksum值。Verifying the checksum checksum value of the first IPv4 packet or the second IPv6 packet.

本发明实施例还提供一种实现网络访问的装置，包括：An embodiment of the present invention further provides an apparatus for implementing network access, including:

网络维护模块，设置为将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录所述IPv4地址与所述网络维护地址的对应关系；The network maintenance module is configured to convert the source address of the received first Internet Protocol version 4 IPv4 packet to a network maintenance address of the user side translator by using the source address, and record the IPv4 address and the network maintenance address. Correspondence relationship

IPv4模块，设置为将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文；The IPv4 module is configured to translate the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet;

通信模块，设置为将所述第一IPv6报文发送到网络侧翻译器。And a communication module, configured to send the first IPv6 message to the network side translator.

可选地，所述的装置还包括：Optionally, the device further includes:

检验模块，设置为所述用户侧翻译器检验所述第一IPv4报文的有效性。 And a verification module, configured to verify, by the user side translator, the validity of the first IPv4 message.

可选地，所述检验模块还设置为：Optionally, the verification module is further configured to:

检测用户终端设备CPE的拨号状态。The dialing status of the user terminal equipment CPE is detected.

可选地，所述IPv4模块将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文是指：Optionally, the IPv4 module translates the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6. The IPv6 packet is:

将所述第一IPv4报文的网络维护地址按照预定规则转换为源地址为IPv6地址的第一IPv6报文，所述网络维护地址与所述IPv6地址一一对应。The network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.

可选地，所述的装置还包括：Optionally, the device further includes:

IPv6模块，设置为将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端，所述第二IPv6报文包括网络侧翻译器将接收到的第三IPv4报文翻译后的报文和IPv6主机发送的报文。The IPv6 module is configured to translate the received second IPv6 packet into a fourth IPv4 packet, and send the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a network side translator The received packet of the third IPv4 packet and the packet sent by the IPv6 host.

可选地，所述IPv6模块将接收到的第二IPv6报文翻译成第四IPv4报文是指：Optionally, the IPv6 module translating the received second IPv6 packet into the fourth IPv4 packet is:

将所述第二IPv6报文的目的地址按照预定规则转换为目的地址为所述用户侧翻译器的网络维护地址，所述网络维护地址与所述IPv6地址一一对应。Converting the destination address of the second IPv6 packet to a destination address as a network maintenance address of the user-side translator according to a predetermined rule, where the network maintenance address is in one-to-one correspondence with the IPv6 address.

可选地，所述IPv6模块将所述第四IPv4报文发送给目的客户端包括：Optionally, the sending, by the IPv6 module, the fourth IPv4 packet to the destination client includes:

根据记录的所述IPv4地址与所述网络维护地址的对应关系，将所述第四IPv4报文发送给目的客户端。Sending the fourth IPv4 packet to the destination client according to the corresponding relationship between the recorded IPv4 address and the network maintenance address.

可选地，所述检验模块还设置为：检验所述第二IPv6报文的有效性。Optionally, the verification module is further configured to: check validity of the second IPv6 message.

可选地，所述IPv6模块将接收到的第二IPv6报文翻译成第四IPv4报文是指：Optionally, the IPv6 module translating the received second IPv6 packet into the fourth IPv4 packet is:

将接收到的所述第二IPv6报文翻译成目的地址为所述用户侧翻译器的网络维护地址的第四IPv4报文；Translating the received second IPv6 packet into a fourth IPv4 packet whose destination address is a network maintenance address of the user side translator;

将所述第四IPv4报文的目的地址通过网络转换为所述用户的目的地址。Transmitting, by the network, the destination address of the fourth IPv4 packet to the destination address of the user.

可选地，所述IPv6模块，还设置为： Optionally, the IPv6 module is further configured to:

将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器，第三IPv6报文用于网络侧翻译器翻译成第六IPv4报文后发送到网络侧的目的IPv4主机。The third IPv6 packet obtained according to the received fifth IPv4 packet is transparently transmitted to the network side translator, and the third IPv6 packet is used for the network side translator to translate the sixth IPv4 packet to the network side. IPv4 host.

可选地，IPv6模块将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器是指：Optionally, the transparent transmission of the third IPv6 packet obtained by the IPv6 module according to the received fifth IPv4 packet to the network side translator means:

将接收到的第五IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址；Transmitting, by the source address, the source address of the received fifth IPv4 packet to the network maintenance address of the user-side translator;

将源地址为网络维护地址的第三IPv6报文发送至所述网络侧翻译器。Sending a third IPv6 packet whose source address is a network maintenance address to the network side translator.

可选地，所述检验模块检验所述第一IPv4报文或第二IPv6报文的有效性包括以下的一项或者多项：Optionally, the checking module verifies that the validity of the first IPv4 packet or the second IPv6 packet includes one or more of the following:

验证所述第一IPv4报文或第二IPv6报文的目的地址；Verifying the destination address of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文是否为分片报文；Verifying whether the first IPv4 packet or the second IPv6 packet is a fragmented packet;

验证所述第一IPv4报文或第二IPv6报文长度；Verifying the length of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文的校验总和checksum值。Verifying the checksum checksum value of the first IPv4 packet or the second IPv6 packet.

在本发明实施例中，还提供了一种计算机存储介质，该计算机存储介质可以存储有执行指令，该执行指令用于执行上述实施例中的实现网络访问的方法。In the embodiment of the present invention, a computer storage medium is further provided, and the computer storage medium may store an execution instruction for executing the method for implementing network access in the foregoing embodiment.

本发明实施例和相关技术相比，具有如下有益效果：Compared with the related art, the embodiment of the present invention has the following beneficial effects:

本发明实施例能够实现IPv4用户穿越IPv6网络互访问，用户侧翻译器通过将IPv4报文无状态翻译为IPv6报文并发送到网络侧的翻译器，网络侧翻译器再将收到的IPv6报文翻译为IPv4报文进而发送到网络侧的IPv4主机实现两端IPv4主机穿越IPv6单栈网络进行互访问。应用本发明实施例提出的IPv4用户穿越IPv6网络实现互访问的方法和装置，可以满足IPv4海洋、IPv6孤岛的使用场景。In the embodiment of the present invention, the IPv4 user can access the IPv6 network for mutual access. The user-side translator can translate the IPv4 packet into an IPv6 packet and send it to the network-side translator. The network-side translator then receives the received IPv6 packet. The translated text is an IPv4 packet and then sent to the IPv4 host on the network side to implement mutual access between the IPv4 hosts on both ends through the IPv6 single-stack network. The method and device for implementing mutual access by an IPv4 user traversing an IPv6 network according to an embodiment of the present invention can meet the usage scenarios of an IPv4 ocean and an IPv6 isolated island.

附图说明 DRAWINGS

图1为本发明实施例的实现网络访问的的方法的流程图；FIG. 1 is a flowchart of a method for implementing network access according to an embodiment of the present invention;

图2为本发明实施例的IPv4用户穿越IPv6网络实现互访问的方法的流程图；2 is a flowchart of a method for an IPv4 user to access an IPv6 network to implement mutual access according to an embodiment of the present invention;

图3为本发明实施例的实现网络访问的的装置的结构示意图；3 is a schematic structural diagram of an apparatus for implementing network access according to an embodiment of the present invention;

图4为本发明实施例1的IPv4用户穿越IPv6网络实现互访问的工作流程图；4 is a flowchart of an operation of an IPv4 user traversing an IPv6 network to implement mutual access according to Embodiment 1 of the present invention;

图5为本发明实施例2翻译过程示例图。FIG. 5 is a diagram showing an example of a translation process according to Embodiment 2 of the present invention.

具体实施方式detailed description

为使本发明的发明目的、技术方案和有益效果更加清楚明了，下面结合附图对本发明的实施例进行说明，需要说明的是，在不冲突的情况下，本申请中的实施例和实施例中的特征可以相互任意组合。The embodiments of the present invention will be described with reference to the accompanying drawings, and the embodiments and embodiments of the present application, in the case of no conflict, in order to clarify the present invention. The features in can be combined with each other arbitrarily.

如图1所示，本发明实施例提供一种实现网络访问的方法，其特征在于，包括：As shown in FIG. 1 , an embodiment of the present invention provides a method for implementing network access, which includes:

将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录所述IPv4地址与所述网络维护地址的对应关系；Transmitting, by the source address, the source address of the IPv4 packet of the first Internet Protocol to the network maintenance address of the user-side translator, and recording the correspondence between the IPv4 address and the network maintenance address;

将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文；Translating, by the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet;

将所述第一IPv6报文发送到网络侧翻译器；Sending the first IPv6 packet to a network side translator;

所述第一IPv6报文用于网络侧翻译器翻译成第二IPv4报文后发送到网络侧的目的IPv4主机。The first IPv6 packet is sent to the destination IPv4 host on the network side after being translated into the second IPv4 packet by the network side translator.

本发明实施例在将IPv4报文无状态翻译为IPv6报文，实现互访问的基础上，进行一次SNAT(源地址)转换，将所有内网IPv4地址转换为一个统一的IPv4地址，然后将统一的IPv4地址翻译为IPv6地址，从而保证只有一个对外的IPv6地址，从而简化处理。 In the embodiment of the present invention, on the basis of non-state translation of IPv4 packets into IPv6 packets and mutual access, a SNAT (source address) conversion is performed, and all intranet IPv4 addresses are converted into a unified IPv4 address, and then unified. The IPv4 address is translated into an IPv6 address, which guarantees that there is only one external IPv6 address, which simplifies processing.

所述方法之前还包括：所述用户侧翻译器检验所述第一IPv4报文的有效性；和/或，检测用户终端设备CPE的拨号状态。The method further includes: the user side translator checking validity of the first IPv4 message; and/or detecting a dialing state of the user terminal device CPE.

本发明实施例在IPv6单栈成功后启用(此时需要满足两个条件：IPv6单栈拨号，单栈拨号成功)，因此翻译之前需要检测CPE的拨号状态，对报文有效性的检验是在IPv6单栈拨号成功后进行的。The embodiment of the present invention is enabled after the IPv6 single stack is successfully succeeded (in this case, two conditions are met: IPv6 single-stack dialing, single-stack dialing is successful), so the dialing state of the CPE needs to be detected before the translation, and the validity of the packet is verified. After the IPv6 single-stack dialing is successful.

将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文包括：Translating the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet includes:

将所述第一IPv4报文的网络维护地址按照预定规则转换为源地址为IPv6地址的第一IPv6报文，所述网络维护地址与所述IPv6地址一一对应。The network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.

所述的方法还包括：The method further includes:

将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端，所述第二IPv6报文包括网络侧翻译器将接收到的第三IPv4报文翻译后的报文和IPv6主机发送的报文。Translating the received second IPv6 packet into a fourth IPv4 packet, and sending the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a third received by the network side translator The translated packet of the IPv4 packet and the packet sent by the IPv6 host.

将接收到的第二IPv6报文翻译成第四IPv4报文包括：Translating the received second IPv6 packet into the fourth IPv4 packet includes:

将所述第二IPv6报文的目的地址按照预定规则转换为目的地址为所述用户侧翻译器的网络维护地址，所述网络维护地址与所述IPv6地址一一对应。Converting the destination address of the second IPv6 packet to a destination address as a network maintenance address of the user-side translator according to a predetermined rule, where the network maintenance address is in one-to-one correspondence with the IPv6 address.

将所述第四IPv4报文发送给目的客户端包括：Sending the fourth IPv4 packet to the destination client includes:

根据记录的所述IPv4地址与所述网络维护地址的对应关系，将所述第四IPv4报文发送给目的客户端。Sending the fourth IPv4 packet to the destination client according to the corresponding relationship between the recorded IPv4 address and the network maintenance address.

所述方法之前还包括：检验所述第二IPv6报文的有效性。The method further includes: checking validity of the second IPv6 message.

所述用户侧翻译器将接收到的第二IPv6报文翻译成第四IPv4报文包括：Translating the received second IPv6 packet into the fourth IPv4 packet by the user-side translator includes:

将接收到的所述第二IPv6报文翻译成目的地址为所述用户侧翻译器的网络维护地址的第四IPv4报文；Translating the received second IPv6 packet into a fourth IPv4 packet whose destination address is a network maintenance address of the user side translator;

将所述第四IPv4报文的目的地址通过网络转换为所述用户的目的地 址。Converting the destination address of the fourth IPv4 packet to the destination of the user through the network site.

所述方法还包括：The method further includes:

将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器，所述第三IPv6报文用于网络侧翻译器翻译成第六IPv4报文后发送到网络侧的目的IPv4主机。Transmitting the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator, where the third IPv6 packet is used by the network side translator to be translated into the sixth IPv4 packet and sent to the network side. The purpose of the IPv4 host.

将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器包括：The transparent transmission of the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator includes:

将接收到的第五IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址；Transmitting, by the source address, the source address of the received fifth IPv4 packet to the network maintenance address of the user-side translator;

将源地址为所述网络维护地址的第三IPv6报文发送至所述网络侧翻译器。Sending a third IPv6 packet whose source address is the network maintenance address to the network side translator.

其中，所述用户侧翻译器检验所述第一IPv4报文或第二IPv6报文的有效性包括以下的一项或者多项：The validity of the first IPv4 packet or the second IPv6 packet by the user side translator includes one or more of the following:

验证所述第一IPv4报文或第二IPv6报文的目的地址；Verifying the destination address of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文是否为分片报文；Verifying whether the first IPv4 packet or the second IPv6 packet is a fragmented packet;

验证所述第一IPv4报文或第二IPv6报文长度；Verifying the length of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文的校验总和checksum值。Verifying the checksum checksum value of the first IPv4 packet or the second IPv6 packet.

IPv4报文或IPv6报文存在一个checksum项，如果该项值为0，则报文不会被翻译。A checksum entry exists in an IPv4 packet or an IPv6 packet. If the value is 0, the packet will not be translated.

本发明实施例实现了IPv4主机穿越IPv6网络实现互访的目的：The embodiment of the invention implements the purpose of the IPv4 host traversing the IPv6 network to achieve mutual access:

本发明实施例的技术在保证终端用户继续使用相关IPv4终端产品情况下可以较为顺利过渡到IPv6。The technology of the embodiment of the present invention can smoothly transition to IPv6 while ensuring that the terminal user continues to use the related IPv4 terminal product.

用户侧翻译前通过地址转换降低处理开销：The user side reduces the processing overhead by address translation before translation:

在进行用户侧翻译前通过网络转换将客户端的私有IPv4地址转换为用户侧翻译器的IPv4地址(如：将192.168.0.100转化为192.0.0.4)，经过 这一步处理后发往网络侧翻译器的源IPv6地址是同一个IPv6地址，因此对于网络侧翻译器来说处理较为简单，降低了处理开销。同样，对于用户侧翻译器来说收到来自网络侧翻译器发来报文的目的IPv6地址是同一个IPv6地址，同样降低了处理开销。Convert the private IPv4 address of the client to the IPv4 address of the user-side translator through network conversion before performing user-side translation (for example, converting 192.168.0.100 to 192.0.0.4) The source IPv6 address sent to the network side translator after this step is the same IPv6 address, so the processing is simpler for the network side translator, which reduces the processing overhead. Similarly, for the user-side translator, receiving the destination IPv6 address sent from the network-side translator is the same IPv6 address, which also reduces the processing overhead.

如图3所示，本发明实施例提供一种实现网络访问的装置，包括：As shown in FIG. 3, an embodiment of the present invention provides an apparatus for implementing network access, including:

网络维护模块，设置为将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录所述IPv4地址与所述网络维护地址的对应关系；The network maintenance module is configured to convert the source address of the received first Internet Protocol version 4 IPv4 packet to a network maintenance address of the user side translator by using the source address, and record the IPv4 address and the network maintenance address. Correspondence relationship

IPv4模块，设置为将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文；The IPv4 module is configured to translate the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet;

通信模块，设置为将所述第一IPv6报文发送到网络侧翻译器。And a communication module, configured to send the first IPv6 message to the network side translator.

所述的装置还包括：The device further includes:

检验模块，设置为所述用户侧翻译器检验所述第一IPv4报文的有效性。And a verification module, configured to verify, by the user side translator, the validity of the first IPv4 message.

所述检验模块还设置为：检测用户终端设备CPE的拨号状态。The verification module is further configured to: detect a dialing state of the user terminal device CPE.

所述IPv4模块将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文是指：Translating, by the IPv4 module, the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet is:

将所述第一IPv4报文的网络维护地址按照预定规则转换为源地址为IPv6地址的第一IPv6报文，所述网络维护地址与所述IPv6地址一一对应。The network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address.

所述的装置还包括：The device further includes:

IPv6模块，设置为将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端，所述第二IPv6报文包括网络侧翻译器将接收到的第三IPv4报文翻译后的报文和IPv6主机发送的报文。The IPv6 module is configured to translate the received second IPv6 packet into a fourth IPv4 packet, and send the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a network side translator The received packet of the third IPv4 packet and the packet sent by the IPv6 host.

所述IPv6模块将接收到的第二IPv6报文翻译成第四IPv4报文是指：Translating the received second IPv6 packet into the fourth IPv4 packet by the IPv6 module means:

将所述第二IPv6报文的目的地址按照预定规则转换为目的地址为所述用户侧翻译器的网络维护地址，所述网络维护地址与所述IPv6地址一 一对应。Converting the destination address of the second IPv6 packet to a destination address as a network maintenance address of the user-side translator according to a predetermined rule, where the network maintenance address is the same as the IPv6 address A correspondence.

所述IPv6模块将所述第四IPv4报文发送给目的客户端包括：The sending, by the IPv6 module, the fourth IPv4 packet to the destination client includes:

根据记录的所述IPv4地址与所述网络维护地址的对应关系，将所述第四IPv4报文发送给目的客户端。Sending the fourth IPv4 packet to the destination client according to the corresponding relationship between the recorded IPv4 address and the network maintenance address.

所述检验模块还设置为：检验所述第二IPv6报文的有效性。The verification module is further configured to: verify validity of the second IPv6 message.

所述IPv6模块将接收到的第二IPv6报文翻译成第四IPv4报文是指：Translating the received second IPv6 packet into the fourth IPv4 packet by the IPv6 module means:

将接收到的所述第二IPv6报文翻译成目的地址为所述用户侧翻译器的网络维护地址的第四IPv4报文；Translating the received second IPv6 packet into a fourth IPv4 packet whose destination address is a network maintenance address of the user side translator;

将所述第四IPv4报文的目的地址通过网络转换为所述用户的目的地址。Transmitting, by the network, the destination address of the fourth IPv4 packet to the destination address of the user.

所述IPv6模块，还设置为：The IPv6 module is further configured to:

将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器，所述第三IPv6报文用于网络侧翻译器翻译成第六IPv4报文后发送到网络侧的目的IPv4主机。Transmitting the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator, where the third IPv6 packet is used by the network side translator to be translated into the sixth IPv4 packet and sent to the network side. The purpose of the IPv4 host.

所述IPv6模块将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器是指：The transparent transmission of the third IPv6 packet obtained by the IPv6 module according to the received fifth IPv4 packet to the network side translator means:

将接收到的第五IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址；Transmitting, by the source address, the source address of the received fifth IPv4 packet to the network maintenance address of the user-side translator;

将源地址为所述网络维护地址的第三IPv6报文发送至所述网络侧翻译器。Sending a third IPv6 packet whose source address is the network maintenance address to the network side translator.

所述检验模块检验所述第一IPv4报文或第二IPv6报文的有效性包括以下的一项或者多项：The checking module verifies that the validity of the first IPv4 packet or the second IPv6 packet includes one or more of the following:

验证所述第一IPv4报文或第二IPv6报文的目的地址；Verifying the destination address of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文是否为分片报文；Verifying whether the first IPv4 packet or the second IPv6 packet is a fragmented packet;

验证所述第一IPv4报文或第二IPv6报文长度； Verifying the length of the first IPv4 packet or the second IPv6 packet;

验证所述第一IPv4报文或第二IPv6报文的校验总和checksum值。Verifying the checksum checksum value of the first IPv4 packet or the second IPv6 packet.

如图2所示，本发明实施例提供的技术方案包括两个方面，在接收到内网客户端向目的IPv4主机发送的第一IPv4报文时，用户侧翻译器将接收到的第一IPv4报文翻译成第一IPv6报文，并将所述第一IPv6报文发送到网络侧翻译器；网络侧翻译器将接收到的第一IPv6报文翻译为第二IPv4报文；并将所述第二IPv4报文发送到网络侧的目的IPv4主机；在接收到IPV4主机向内网目的客户端发送的第三IPv4报文时，网络侧翻译器将接收到的第三IPv4报文翻译为第二IPv6报文；并将所述第二IPv6报文发送到用户侧翻译器；用户侧翻译器将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端。As shown in FIG. 2, the technical solution provided by the embodiment of the present invention includes two aspects: when receiving the first IPv4 packet sent by the intranet client to the destination IPv4 host, the first IPv4 received by the user-side translator The message is translated into a first IPv6 message, and the first IPv6 message is sent to the network side translator; the network side translator translates the received first IPv6 message into a second IPv4 message; The second IPv4 packet is sent to the destination IPv4 host on the network side. When receiving the third IPv4 packet sent by the IPV4 host to the destination client, the network side translator translates the received third IPv4 packet into Transmitting the second IPv6 message to the user-side translator; the user-side translator translating the received second IPv6 message into the fourth IPv4 message, and the fourth IPv4 message The message is sent to the destination client.

实施例1Example 1

接入CPE的客户端可能是IPv4单栈、IPv6单栈设备、IPv4v6双栈设备，因此从客户端发送到用户侧翻译器的数据包可能是IPv4报文也可能是IPv6报文。同时网络侧翻译器也会向部署在CPE的用户侧翻译器发送IPv6报文，如上文论述，当且仅当CPE进行IPv6单栈拨号成功的情况下启动用户侧翻译器，如图4所示，需要分三种情况进行讨论：The client that accesses the CPE may be an IPv4 single-stack, an IPv6 single-stack device, or an IPv4v6 dual-stack device. Therefore, the data packet sent from the client to the user-side translator may be an IPv4 packet or an IPv6 packet. At the same time, the network side translator also sends an IPv6 message to the user side translator deployed in the CPE. As discussed above, the user side translator is started if and only if the CPE performs IPv6 single stack dialing successfully, as shown in FIG. There are three situations that need to be discussed:

情况1：客户端发来IPv6报文Case 1: The client sends an IPv6 packet.

在此种情况下，用户侧翻译器无需对IPv6报文进行翻译处理，将所述IPv6报文进行源地址转换后进行转发即可。In this case, the user-side translator does not need to perform translation processing on the IPv6 packet, and the IPv6 packet is forwarded by the source address and then forwarded.

情况2：客户端发来IPv4报文Case 2: The client sends an IPv4 packet.

用户侧翻译器收到IPv4报文后首先需要对报文有效性进行判断，判断该IPv4报文满足有效性要求时被翻译为IPv6报文，对于不满足条件的报文则不会进行翻译处理，具体而言，如果报文的目的地址是设备网关(如：192.168.0.1)或报文是广播报文(如：255.255.255.255)等则不会被翻译为IPv6报文，满足有效性条件的报文才会被用户侧翻译器翻译为IPv6报 文然后发送到公网的网络侧翻译器。需要满足的有效性条件包括：After receiving the IPv4 packet, the user-side translator must first determine the validity of the packet, and determine that the IPv4 packet is translated into an IPv6 packet when the validity requirement is met. Specifically, if the destination address of the packet is the device gateway (for example, 192.168.0.1) or the packet is a broadcast packet (for example, 255.255.255.255), it will not be translated into an IPv6 packet. The message will be translated into IPv6 by the user-side translator. The text is then sent to the network side translator of the public network. The validity conditions that need to be met include:

1)仅在CPE(Customer Premise Equipment，客户终端设备)处于IPv6单栈拨号下启动翻译器对报文进行翻译：1) Start the translator to translate the message only when the CPE (Customer Premise Equipment) is in IPv6 single-stack dialing:

为了实现IPv4用户发出的数据包穿越IPv6的网络访问公网上IPv4主机，因此只有CPE进行IPv6单栈拨号的情况下部署于其上的用户侧翻译器才工作。In order to realize that the packets sent by the IPv4 users traverse the IPv6 network to access the IPv4 host on the public network, only the user-side translator deployed on the CPE for IPv6 single-stack dialing works.

2)对分片后的数据包的特殊处理：2) Special handling of fragmented packets:

如果IPv4数据包是分片后的报文，则不会被翻译为IPv6报文；If the IPv4 packet is a fragmented packet, it will not be translated into an IPv6 packet.

如果IPv6数据包是分片后的报文，则不会被翻译为IPv4报文。If an IPv6 packet is a fragmented packet, it will not be translated into an IPv4 packet.

所谓分片是指当数据包长度比链路最大传输单元大且允许被分为若干小的片段以便能够在链路上被传输。The so-called fragmentation means that the packet length is larger than the link maximum transmission unit and is allowed to be divided into several small segments so as to be able to be transmitted on the link.

3)最大可处理报文：3) Maximum processing message:

在发送方不指定强制不分片情况下，发送方最大可发送icmp报文长度为1452，超过该长度的报文不会被翻译；If the sender does not specify mandatory fragmentation, the sender can send the maximum length of the icmp packet to 1452. Packets exceeding this length will not be translated.

在发送方指定强制不分片情况下，发送方最大可发送icmp报文长度为1232，超过该长度的报文不会被翻译.The sender can send a maximum icmp packet length of 1232 when the sender specifies that no fragmentation is specified. Packets exceeding this length will not be translated.

所谓强制不分片是指当数据包长度比链路最大传输单元大时，只有将数据包分为若干小的片段才能够在链路上被传输的情况下，依然保持数据包完整性而不被分为若干小片。The so-called forced non-fragmentation means that when the packet length is larger than the maximum transmission unit of the link, only when the packet is divided into several small segments to be transmitted on the link, the packet integrity is maintained. It is divided into several small pieces.

4)对校验和checksum的考虑：4) Considerations for checksum checksum:

对于udp报文来说，如果校验和checksum值为0则这样的报文不会被翻译。For udp messages, if the checksum checksum value is 0, such a message will not be translated.

由于IPv4报文、IPv6报文存在较大差异，因此要检验的内容远远不止这些。但此处仅需要列出如下的关键项验证，因为这几项是翻译过程中要重点考虑的：Because there are large differences between IPv4 packets and IPv6 packets, the content to be tested is far more than that. However, only the following key item verifications need to be listed here, as these are important considerations in the translation process:

验证所述IPv4报文的目的地址； Verify the destination address of the IPv4 packet;

验证所述IPv4报文是否为分片报文；Verifying that the IPv4 packet is a fragmented packet;

验证所述IPv4报文长度；Verifying the length of the IPv4 packet;

验证所述Pv4报文的校验总和checksum值。Verify the checksum checksum value of the Pv4 message.

情况3：外部设备发来IPv6报文Case 3: The external device sends an IPv6 packet.

对于外部设备发来的IPv6报文，该报文可能是公网的网络侧翻译器发来的，也可能是外部普通IPv6主机发来的。但无论发送方是什么类型的主机，用户侧翻译器首先需要判断报文的有效性，如果满足有效性要求，则将其翻译为IPv4报文并发送到对应客户端，否则将收到的IPv6报文丢弃。For an IPv6 packet sent by an external device, the packet may be sent by a network-side translator on the public network or from an external IPv6 host. However, regardless of the type of host, the user-side translator first needs to determine the validity of the message. If the validity requirement is met, it is translated into an IPv4 message and sent to the corresponding client. Otherwise, the IPv6 will be received. The packet is discarded.

实施例2Example 2

图5为整个翻译过程示例图，以地址为192.168.0.100的IPv4单栈用户穿越IPv6单栈网络访问IPv4地址为3.3.3.3的公网主机为例进行说明。客户端发出的第一IPv4报文的源地址为192.168.0.100，到达用户侧翻译器后首先进行源地址转换，将第一IPv4报文的源IPv4地址192.168.0.100转换为用户侧翻译器的IPv4地址192.0.0.4，这样做可以简化用户侧翻译器以及网络侧翻译器的处理，此处所述的IPv4地址192.0.0.4为协议规定的用于翻译的IPv4保留地址，实际操作中可以选择192.0.0.1～192.0.0.7这七个地址中的任意一个，此处选择的是192.0.0.4这个地址。具体而言，对于用户侧翻译器翻译后第一IPv6报文的源IPv6地址始终都是1:1:1:aaaa:0:ffff:192.0.0.4，此地址的后32位(即：32位IPv4地址192.0.0.4)为待翻译为IPv6地址的IPv4地址。之所以选择这样的地址作为后32位的为了将翻译前后的IPv4、IPv6地址进行一一对应。网络侧翻译器在进行第一IPv6报文→第二IPv4报文翻译时只需要为其分配一个IPv4地址即可，节省了大量IPv4地址开销。同时，对于用户侧翻译器来说，当收到网络侧翻译器返回的第二IPv6报文时，由于目的IPv6地址对应一个IPv4地址，因此翻译效率提高。由于在前面的源地址转换中将所有内网用户的IP地 址(如：192.168.0.100)转换为了统一的IPv4地址192.0.0.4，因此设备内部记录了其对应关系，因此此处可以利用其对应关系再将翻译后的第四IPv4报文的地址192.0.0.4转换为客户端的私有IPv4地址192.168.0.100并发送给客户端。Figure 5 is a diagram showing an example of the entire translation process. The IPv4 single-stack user with the address of 192.168.0.100 traverses the IPv6 single-stack network to access the public network host with the IPv4 address 3.3.3.3 as an example. The source address of the first IPv4 packet sent by the client is 192.168.0.100. After the user-side translator is reached, the source address translation is performed first, and the source IPv4 address of the first IPv4 packet is 192.168.0.100 converted to the IPv4 of the user-side translator. Address 192.0.0.4, this can simplify the processing of the user-side translator and the network-side translator. The IPv4 address 192.0.0.4 described here is the IPv4 reserved address for translation specified by the protocol. In practice, 192.0 can be selected. Any of the seven addresses 0.1 to 192.0.0.7, where the address 192.0.0.4 is selected. Specifically, the source IPv6 address of the first IPv6 packet translated by the user-side translator is always 1:1:1:aaaa:0:ffff:192.0.0.4, and the last 32 bits of the address (ie: 32 bits) The IPv4 address 192.0.0.4) is an IPv4 address to be translated into an IPv6 address. The reason why such an address is selected as the last 32 bits is to make a one-to-one correspondence between the IPv4 and IPv6 addresses before and after the translation. The network side translator only needs to allocate an IPv4 address for the first IPv6 message→the second IPv4 message translation, which saves a lot of IPv4 address overhead. At the same time, for the user-side translator, when receiving the second IPv6 packet returned by the network-side translator, since the destination IPv6 address corresponds to an IPv4 address, the translation efficiency is improved. Due to the IP address of all intranet users in the previous source address translation The address (for example, 192.168.0.100) is converted to the unified IPv4 address 192.0.0.4, so the corresponding relationship is recorded in the device. Therefore, the address of the translated fourth IPv4 packet can be used again by the corresponding relationship 192.0.0.4. Converted to the client's private IPv4 address 192.168.0.100 and sent to the client.

本发明的实施例还提供了一种存储介质。可选地，在本实施例中，上述存储介质可以被设置为存储用于执行以下步骤的程序代码：Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1，将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录IPv4地址与网络维护地址的对应关系；S1, the source address of the received fourth Internet Protocol IPv4 packet is converted into a network maintenance address of the user-side translator by using the source address, and the corresponding relationship between the IPv4 address and the network maintenance address is recorded;

S2，将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录IPv4地址与网络维护地址的对应关系；S2, converting the source address of the received fourth Internet Protocol IPv4 packet by the source address to the network maintenance address of the user-side translator, and recording the correspondence between the IPv4 address and the network maintenance address;

S3，将第一IPv6报文发送到网络侧翻译器。S3. Send the first IPv6 packet to the network side translator.

可选地，在本实施例中，上述存储介质可以包括但不限于：U盘、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、移动硬盘、磁碟或者光盘等各种可以存储程序代码的介质。Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

可选地，本实施例中的具体示例可以参考上述实施例及可选实施方式中所描述的示例，本实施例在此不再赘述。For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

虽然本发明所揭示的实施方式如上，但其内容只是为了便于理解本发明的技术方案而采用的实施方式，并非用于限定本发明。任何本发明所属技术领域内的技术人员，在不脱离本发明所揭示的核心技术方案的前提下，可以在实施的形式和细节上做任何修改与变化，但本发明所限定的保护范围，仍须以所附的权利要求书限定的范围为准。 The embodiments disclosed in the present invention are as described above, but the contents thereof are only for the purpose of facilitating understanding of the technical solutions of the present invention, and are not intended to limit the present invention. Any modifications and changes in the form and details of the embodiments may be made by those skilled in the art without departing from the scope of the present invention. It is subject to the scope defined by the appended claims.

工业实用性Industrial applicability

在本发明实施例中，能够实现IPv4用户穿越IPv6网络互访问，用户侧翻译器通过将IPv4报文无状态翻译为IPv6报文并发送到网络侧的翻译器，网络侧翻译器再将收到的IPv6报文翻译为IPv4报文进而发送到网络侧的IPv4主机实现两端IPv4主机穿越IPv6单栈网络进行互访问。应用本发明实施例提出的IPv4用户穿越IPv6网络实现互访问的方法和装置，可以满足IPv4海洋、IPv6孤岛的使用场景。 In the embodiment of the present invention, the IPv4 user can access the IPv6 network for mutual access, and the user-side translator can receive the IPv4 message statelessly into an IPv6 message and send it to the network side translator, and the network side translator will receive the network side translator again. The IPv6 packets are translated into IPv4 packets and then sent to the IPv4 host on the network side to implement IPv6 hosts traversing the IPv6 single-stack network for mutual access. The method and device for implementing mutual access by an IPv4 user traversing an IPv6 network according to an embodiment of the present invention can meet the usage scenarios of an IPv4 ocean and an IPv6 isolated island.

Claims (24)

一种实现网络访问的方法，包括：A method of implementing network access, including: 将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录所述IPv4地址与所述网络维护地址的对应关系；Transmitting, by the source address, the source address of the IPv4 packet of the first Internet Protocol to the network maintenance address of the user-side translator, and recording the correspondence between the IPv4 address and the network maintenance address; 将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文；Translating, by the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet; 将所述第一IPv6报文发送到网络侧翻译器。Sending the first IPv6 message to a network side translator. 如权利要求1所述的方法，其中：所述方法之前还包括：所述用户侧翻译器检验所述第一IPv4报文的有效性。The method of claim 1 wherein said method further comprises: said user side translator verifying validity of said first IPv4 message. 如权利要求1所述的方法，其中：所述方法之前还包括：The method of claim 1 wherein: said method further comprises: 检测用户终端设备CPE的拨号状态。The dialing status of the user terminal equipment CPE is detected. 如权利要求1所述的方法，其中：将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文包括：The method of claim 1, wherein: translating the first IPv4 message whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 message comprises: 将所述第一IPv4报文的网络维护地址按照预定规则转换为源地址为IPv6地址的第一IPv6报文，所述网络维护地址与所述IPv6地址一一对应。The network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address. 如权利要求1所述的方法，其中，还包括：The method of claim 1 further comprising: 将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端，所述第二IPv6报文包括网络侧翻译器将接收到的第三IPv4报文翻译后的报文和IPv6主机发送的报文。Translating the received second IPv6 packet into a fourth IPv4 packet, and sending the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a third received by the network side translator The translated packet of the IPv4 packet and the packet sent by the IPv6 host. 如权利要求5所述的方法，其中：将接收到的第二IPv6报文翻译成第四IPv4报文包括： The method of claim 5, wherein: translating the received second IPv6 message into the fourth IPv4 message comprises: 将所述第二IPv6报文的目的地址按照预定规则转换为目的地址为所述用户侧翻译器的网络维护地址，所述网络维护地址与所述IPv6地址一一对应。Converting the destination address of the second IPv6 packet to a destination address as a network maintenance address of the user-side translator according to a predetermined rule, where the network maintenance address is in one-to-one correspondence with the IPv6 address. 如权利要求6所述的方法，其中：将所述第四IPv4报文发送给目的客户端包括：The method of claim 6, wherein: transmitting the fourth IPv4 message to the destination client comprises: 根据记录的所述IPv4地址与所述网络维护地址的对应关系，将所述第四IPv4报文发送给目的客户端。Sending the fourth IPv4 packet to the destination client according to the corresponding relationship between the recorded IPv4 address and the network maintenance address. 如权利要求5所述的方法，其中：所述方法之前还包括：检验所述第二IPv6报文的有效性。The method of claim 5 wherein said method further comprises: verifying validity of said second IPv6 message. 如权利要求5所述的方法，其中：将接收到的第二IPv6报文翻译成第四IPv4报文包括：The method of claim 5, wherein: translating the received second IPv6 message into the fourth IPv4 message comprises: 将接收到的所述第二IPv6报文翻译成目的地址为所述用户侧翻译器的网络维护地址的第四IPv4报文；Translating the received second IPv6 packet into a fourth IPv4 packet whose destination address is a network maintenance address of the user side translator; 将所述第四IPv4报文的目的地址通过网络转换为所述用户的目的地址。Transmitting, by the network, the destination address of the fourth IPv4 packet to the destination address of the user. 如权利要求1所述的方法，其中，还包括：The method of claim 1 further comprising: 将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器，所述第三IPv6报文用于网络侧翻译器翻译成第六IPv4报文后发送到网络侧的目的IPv4主机。Transmitting the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator, where the third IPv6 packet is used by the network side translator to be translated into the sixth IPv4 packet and sent to the network side. The purpose of the IPv4 host. 如权利要求10所述的方法，其中，将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器包括：The method of claim 10, wherein the transparently transmitting the third IPv6 message obtained according to the received fifth IPv4 message to the network side translator comprises: 将接收到的第五IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址； Transmitting, by the source address, the source address of the received fifth IPv4 packet to the network maintenance address of the user-side translator; 将源地址为所述网络维护地址的所述第三IPv6报文发送至所述网络侧翻译器。Sending the third IPv6 packet whose source address is the network maintenance address to the network side translator. 如权利要求2或8所述的方法，其中，检验所述第一IPv4报文或第二IPv6报文的有效性包括以下的一项或者多项：The method of claim 2 or 8, wherein verifying the validity of the first IPv4 message or the second IPv6 message comprises one or more of the following: 验证所述第一IPv4报文或第二IPv6报文的目的地址；Verifying the destination address of the first IPv4 packet or the second IPv6 packet; 验证所述第一IPv4报文或第二IPv6报文是否为分片报文；Verifying whether the first IPv4 packet or the second IPv6 packet is a fragmented packet; 验证所述第一IPv4报文或第二IPv6报文长度；Verifying the length of the first IPv4 packet or the second IPv6 packet; 验证所述第一IPv4报文或第二IPv6报文的校验总和checksum值。Verifying the checksum checksum value of the first IPv4 packet or the second IPv6 packet. 一种实现网络访问的装置，包括：A device for implementing network access, comprising: 网络维护模块，设置为将接收到的第一互联网协议第四版IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址，并记录所述IPv4地址与所述网络维护地址的对应关系；The network maintenance module is configured to convert the source address of the received first Internet Protocol version 4 IPv4 packet to a network maintenance address of the user side translator by using the source address, and record the IPv4 address and the network maintenance address. Correspondence relationship IPv4模块，设置为将源地址为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文；The IPv4 module is configured to translate the first IPv4 packet whose source address is the network maintenance address into the first Internet Protocol version 6 IPv6 packet; 通信模块，设置为将所述第一IPv6报文发送到网络侧翻译器。And a communication module, configured to send the first IPv6 message to the network side translator. 如权利要求13所述的装置，其中：还包括：The apparatus of claim 13 further comprising: 检验模块，设置为所述用户侧翻译器检验所述第一IPv4报文的有效性。And a verification module, configured to verify, by the user side translator, the validity of the first IPv4 message. 如权利要求13所述的装置，其中：所述检验模块还设置为：The apparatus of claim 13 wherein: said verification module is further configured to: 检测用户终端设备CPE的拨号状态。The dialing status of the user terminal equipment CPE is detected. 如权利要求13所述的装置，其中：所述IPv4模块将源地址 为所述网络维护地址的第一IPv4报文翻译成第一互联网协议第六版IPv6报文是指：The apparatus of claim 13 wherein: said IPv4 module will source address Translating the first IPv4 message for the network maintenance address into the first Internet Protocol version 6 IPv6 message means: 将所述第一IPv4报文的网络维护地址按照预定规则转换为源地址为IPv6地址的第一IPv6报文，所述网络维护地址与所述IPv6地址一一对应。The network maintenance address of the first IPv4 packet is converted into a first IPv6 packet whose source address is an IPv6 address according to a predetermined rule, and the network maintenance address is in one-to-one correspondence with the IPv6 address. 如权利要求13所述的装置，其中，还包括：The apparatus of claim 13 further comprising: IPv6模块，设置为将接收到的第二IPv6报文翻译成第四IPv4报文，并将所述第四IPv4报文发送给目的客户端，所述第二IPv6报文包括网络侧翻译器将接收到的第三IPv4报文翻译后的报文和IPv6主机发送的报文。The IPv6 module is configured to translate the received second IPv6 packet into a fourth IPv4 packet, and send the fourth IPv4 packet to the destination client, where the second IPv6 packet includes a network side translator The received packet of the third IPv4 packet and the packet sent by the IPv6 host. 如权利要求17所述的装置，其中：所述IPv6模块将接收到的第二IPv6报文翻译成第四IPv4报文是指：The apparatus of claim 17, wherein: the IPv6 module translating the received second IPv6 message into the fourth IPv4 message means: 将所述第二IPv6报文的目的地址按照预定规则转换为目的地址为所述用户侧翻译器的网络维护地址，所述网络维护地址与所述IPv6地址一一对应。Converting the destination address of the second IPv6 packet to a destination address as a network maintenance address of the user-side translator according to a predetermined rule, where the network maintenance address is in one-to-one correspondence with the IPv6 address. 如权利要求18所述的装置，其中：所述IPv6模块将所述第四IPv4报文发送给目的客户端包括：The apparatus of claim 18, wherein: the sending, by the IPv6 module, the fourth IPv4 message to the destination client comprises: 根据记录的所述IPv4地址与所述网络维护地址的对应关系，将所述第四IPv4报文发送给目的客户端。Sending the fourth IPv4 packet to the destination client according to the corresponding relationship between the recorded IPv4 address and the network maintenance address. 如权利要求17所述的装置，其中：所述检验模块还设置为：检验所述第二IPv6报文的有效性。The apparatus of claim 17 wherein: said verification module is further configured to verify validity of said second IPv6 message. 如权利要求17所述的装置，其中：所述IPv6模块将接收到的第二IPv6报文翻译成第四IPv4报文是指： The apparatus of claim 17, wherein: the IPv6 module translating the received second IPv6 message into the fourth IPv4 message means: 将接收到的所述第二IPv6报文翻译成目的地址为所述用户侧翻译器的网络维护地址的第四IPv4报文；Translating the received second IPv6 packet into a fourth IPv4 packet whose destination address is a network maintenance address of the user side translator; 将所述第四IPv4报文的目的地址通过网络转换为所述用户的目的地址。Transmitting, by the network, the destination address of the fourth IPv4 packet to the destination address of the user. 如权利要求13所述的装置，其中，所述IPv6模块，还设置为：The apparatus of claim 13, wherein the IPv6 module is further configured to: 将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器，所述第三IPv6报文用于网络侧翻译器翻译成第六IPv4报文后发送到网络侧的目的IPv4主机。Transmitting the third IPv6 packet obtained according to the received fifth IPv4 packet to the network side translator, where the third IPv6 packet is used by the network side translator to be translated into the sixth IPv4 packet and sent to the network side. The purpose of the IPv4 host. 如权利要求22所述的装置，其中，所述IPv6模块将根据接收到的第五IPv4报文得到的第三IPv6报文透传至网络侧翻译器是指：The device of claim 22, wherein the transparently transmitting the third IPv6 packet obtained by the IPv6 module according to the received fifth IPv4 packet to the network side translator means: 将接收到的第五IPv4报文的源地址通过源地址转换为用户侧翻译器的网络维护地址；Transmitting, by the source address, the source address of the received fifth IPv4 packet to the network maintenance address of the user-side translator; 将源地址为所述网络维护地址的所述第三IPv6报文发送至所述网络侧翻译器。Sending the third IPv6 packet whose source address is the network maintenance address to the network side translator. 如权利要求14或20所述的装置，其中，所述检验模块检验所述第一IPv4报文或第二IPv6报文的有效性包括以下的一项或者多项：The apparatus according to claim 14 or 20, wherein the verification module verifies that the validity of the first IPv4 message or the second IPv6 message includes one or more of the following: 验证所述第一IPv4报文或第二IPv6报文的目的地址；Verifying the destination address of the first IPv4 packet or the second IPv6 packet; 验证所述第一IPv4报文或第二IPv6报文是否为分片报文；Verifying whether the first IPv4 packet or the second IPv6 packet is a fragmented packet; 验证所述第一IPv4报文或第二IPv6报文长度；Verifying the length of the first IPv4 packet or the second IPv6 packet; 验证所述第一IPv4报文或第二IPv6报文的校验总和checksum值。 Verifying the checksum checksum value of the first IPv4 packet or the second IPv6 packet.
PCT/CN2016/103287 2016-03-25 2016-10-25 Method and device implementing network access WO2017161876A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610178297.XA CN107231450A (en) 2016-03-25 2016-03-25 A kind of method and apparatus for realizing network access
CN201610178297.X 2016-03-25

Publications (1)

Publication Number Publication Date
WO2017161876A1 true WO2017161876A1 (en) 2017-09-28

Family

ID=59899324

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/103287 WO2017161876A1 (en) 2016-03-25 2016-10-25 Method and device implementing network access

Country Status (2)

Country Link
CN (1) CN107231450A (en)
WO (1) WO2017161876A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022089412A1 (en) * 2020-10-30 2022-05-05 华为技术有限公司 Communication method and device

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102904976A (en) * 2012-10-23 2013-01-30 清华大学 An Extended Dual Stateless IPv4-IPv6 Translation Method Based on Prefix Assignment

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3876741B2 (en) * 2002-03-27 2007-02-07 株式会社日立製作所 Protocol conversion method and apparatus
CN101227408A (en) * 2008-02-02 2008-07-23 中兴通讯股份有限公司 Method for IPv4 internal private network to visit IPv6 network and router thereof
CN101227373B (en) * 2008-03-21 2010-09-29 清华大学 Intercommunication method between IPv4 and IPv6 networks based on stateless mapping

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102904976A (en) * 2012-10-23 2013-01-30 清华大学 An Extended Dual Stateless IPv4-IPv6 Translation Method Based on Prefix Assignment

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022089412A1 (en) * 2020-10-30 2022-05-05 华为技术有限公司 Communication method and device

Also Published As

Publication number Publication date
CN107231450A (en) 2017-10-03

Similar Documents

Publication Publication Date Title
Cheshire et al. Nat port mapping protocol (nat-pmp)
US20130205040A1 (en) Ensuring symmetric routing to private network
WO2013040942A1 (en) Data centre system and apparatus, and method for providing service
CN106330715A (en) Message processing method and device
JP4494891B2 (en) Virtual connection with local connection conversion
WO2005109785A1 (en) Information processing device, and bubble packet transmission method and program
US8194683B2 (en) Teredo connectivity between clients behind symmetric NATs
CN105245407A (en) Socket-Based Network Sniffer and Its Method
JP2006050626A (en) Network address conversion method and apparatus
CN103067411B (en) Prevent the DoS attack method and apparatus in DS-Lite networking
TW201414253A (en) Network address translation system and method
EP3171576B1 (en) Method and device for translation between ipv4 and ipv6
US7356031B1 (en) Inter-v4 realm routing
CN114866472A (en) Method and system for realizing open source community access in multi-mode network
WO2016095751A1 (en) Domain name analysis method and apparatus
US7693091B2 (en) Teredo connectivity between clients behind symmetric NATs
WO2016034006A1 (en) Packet sending method and access device
WO2017161876A1 (en) Method and device implementing network access
WO2016078235A1 (en) Network translation realization method and apparatus for transiting to ipv6 on the basis of pant
US9083718B1 (en) Global grid protocal, a system and method for establishing and simplifying peer-to-peer networking connections among a plurality of computers and divices by dynamically generating identifiers and performing routing and traversal processes
CN102546845B (en) Business access method, device and system
Cheshire et al. RFC 6886: Nat port mapping protocol (NAT-PMP)
CN108111385B (en) Message forwarding method and device
Prisantama et al. Tunneling 6LoWPAN protocol stack in IPv6 network
WO2013107055A1 (en) Method and apparatus for acquiring user information

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16895222

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 16895222

Country of ref document: EP

Kind code of ref document: A1