IPv6

squaddinnerladyΛογισμικό & κατασκευή λογ/κού

2 Ιουλ 2012 (πριν από 5 χρόνια και 3 μήνες)

252 εμφανίσεις

IPv6IPv6
ὃ凜ﳢﵘ⋀ﻡu﯍ᄍὃ凜ﳢﵘ⋀ﻡu﯍ᄍ
IPv6

IPv6

ὃ凜ﳢﵘ⋀ﻡu﯍ᄍὃ凜ﳢﵘ⋀ﻡu﯍ᄍ
ﱩL
(
ﹴ⁏C
)

IPV6 IPV6 ﺩ塻
ﺩ塻
2
⤎ﶘ
⤎ﶘ
⤎ﶘ
⤎ﶘ

ﰈẲ

ﰈẲ

IPv6

﨔ﮁIPv6

︓祉
縷

︓祉
縷

IPv6 ﶙ變
3
ﰈẲ
ﰈẲ
ﰈẲ
ﰈẲ


縷
ﶙ﷖視ﷴﶚ


縷

ﶙ﷖視ﷴﶚ

IPv6 切ﹽ(RFC 2460)

︟沈P
Ń
DualStack
Ń
Dual

Stack
ŃTunnel
4

IPv6IPv6

IPv6IPv6

NativeIP

Native

IP
Ńﶙ﷖⡪Ḕ﷙⅞₀IPv6 ⊂, ￶﷖
♏
Ḣ渚セ

ἴ✧
♏
DHCPv6
Ḣ渚セ
縷I

縷I
ἴ✧
Ńὃ凜ﳢﵘIPv6 ﮁ

Tunnel Broker
Ń

縷
ﶙ﷖⡪Ḕ
✏𥳐ﻡ者


Ń

IPv4

ﶙ﷖⡪Ḕ

✏𥳐ﻡ者
T﹥ﰠὭ𥳐ḲウIPv6 ﶙ﷖⡪˛
泌⣽ﭰ
TlBkClit
^Æj»
Ń
泌⣽ﭰ
T
unne
l

B
ro
k
er
Cli
en
t

ﻆ請
5
﨔ﮁ
﨔ﮁ
縷(
縷(


)
)
﨔ﮁ
﨔ﮁ
縷

(縷

(


)
)

⊼﨔ﮁ
縷

⊼﨔ﮁ
縷
ŃWindows
Windows Vista
Windows 7/2008
ŃLinuxFedora/CentOS
Ubuntu/Debian
6
︓祉
︓祉
縷
縷
︓祉
︓祉
縷
縷

ﹳﱯォ

ﹳﱯォ


ŃSet type=AAAA
7
︓祉
︓祉
縷I
縷I


)
)
︓祉
︓祉
縷I
縷I


)
)

菱ﱩ



﹉

ﱩ

︓祉︓祉
IPv6(IPv6(
ﹳﹳ
))
︓祉︓祉
IPv6(IPv6(
ﹳﹳ
))

pingtracert(Windows)

ping
,
tracert

(Windows)
9
︓祉︓祉
縷I縷I
ﹳﹳ
))
︓祉︓祉
縷I縷I
ﹳﹳ
))

﹧オ﹉ﱩ

﹧

オ

﹉

ﱩ

縷縷
ﶙ變ﶙ變
縷

縷

ﶙ變ﶙ變


ﭡﵥ
ﶙ變


ﭡﵥ
ﶙ變
Ńhttp://www.kame.net

IPv6 Ready Logo
Ń
http://www.ipv6ready.org/
http://www.ipv6ready.org/

ḔῈ艹
IPv6
︓祉﯍慨ﮋ
ḔῈ艹
IPv6
︓祉﯍慨ﮋ
Ńhttp://interop.ipv6.org.tw/

IPv6 xﶙ(HiNet)
Ń
http://
ipv6.taco.hinet.net/tacoipv6/index.jsp
http://
ipv6.taco.hinet.net/taco
_
ipv6/index.jsp
11
Chapter 01
LINUX
LINUX 僅
僅WINDOWS
WINDOWS 䕂

IPV6
IPV6
&¸GÌ
&¸GÌ
IPV6

IPV6

䟌
䟌
12
⤎ﶘ⤎ﶘ
⤎ﶘ⤎ﶘ

ﳢﵘ⡪

ﳢﵘ⡪

IPv6 on Linux

IPv6 on Windows

﹤葉
︓祉

﹤



﹧
︓祉

Linux Ping︓祉(ὦﮁἴ✧)
13
ﳢﵘ⡪
Ɲ
ﳢﵘ⡪
Ɲ
ﳢﵘ⡪
Ɲ
ﳢﵘ⡪
Ɲ

縷
Ɲ
ﭰ
﹤WwsXP

縷


Ɲ
ﭰ
﹤Wws



IPv6 ServerƝﭰCentOS 5.x

SwitchƝD-Link DES-1005D
14
IPv6onLinux
IPv6onLinux
IPv6

on

LinuxIPv6

on

Linux

ﱩ

2
⊇
縷
Ụ⊆

ﱩ




2
.
1
.
8

⊇
縷
Ụ⊆
ƏằLinux Kernel 2.6.x ḔƏIPv6﷙
ﵺﭳ✗
˛

2008
.[
12

1

?•
Mz6?X’+s5['?5?3Û
'?
2008
.[
12

1

Linux Foundation(Linux)ﮊἯIPv6✏
Linux
?"YhFk
Distribution(
FcX3B/
)
??-ÙMzFß
Linux
?"YhFk
Distribution(
FcX3B/
)
??-ÙMzFß
+ Ou&ò&òf?`ÏFk:>}(ﴷ)˛

✏泌ﷲﻰỢἼ﷧ῲ︟沈DistributionƏ
Ọ
IPv6

7?5n?Ý5@+_?Ì
CentOS
`ä#Ö?Ì5?3Û
IPv6

7?5n?Ý5@+_?Ì
CentOS
5.x ὃ嵐ﮫὃ凜ﳢﵘ˛
15
IPv6onLinux
IPv6onLinux
IPv6

on

LinuxIPv6

on

Linux

✏ﭰ 
ﳢﵘ﷙ﵺ﨔╆⊼

✏ﭰ 
Ə
ﳢﵘ﷙ﵺ﨔╆⊼
IPv6Ə⥩Ɲ
16
IPv6onLinuxIPv6onLinux
IPv6

on

LinuxIPv6

on

Linux

ﭰﭳ
ﹴs
Ḳウ
ῸỌﷲ

ﭰﭳ
ﹴs
Ḳウ
Ə
ῸỌﷲ
ifconfig ịƏeth0 ῲ
﷙ﵺṭ

interface
﷙ﵺṭ
fe8

ﱩL
k
-
ﱯﰠ縷lἴ✧
17
IPv6onWindows
IPv6onWindows
IPv6

on

WindowsIPv6

on

Windows

縷

﹤Wws
Ḳウ
﷙ﵺ零

縷


﹤Wws
Ḳウ
Ə
﷙ﵺ零
IPv6˛ﷴ✏WindowsXPﷲƏῸ
ᆲ✏⑤ị嵐מּKﷲ?
ᆲ✏⑤ị嵐מּKﷲ?
”ipv6
install”⤇╆IPv6ﶙ﷖

IPv6╆⊼∴ipconfigƝ
18
IPv6onWindows
IPv6onWindows
IPv6

on

WindowsIPv6

on

Windows


殺葉i
ị
Ɲ


殺

葉i

ị
Ɲ

縷ョ﹤Wws
縷ョ﹤Wws
縷



﹤Wws縷



﹤Wws

Ḳウⅴ
殺﹦不
Ὸ⤁ṭ

Ḳウⅴ
殺﹦不
Ə
Ὸ⤁ṭ
fe80 IPv6 ἴ✧
見﬷ﰘỌὦIPv6 ἴ✧Ὥ⁁隣ṭƄ
20
WindowsXPPingWindowsXPPing
︓祉︓祉
Windows

XP

PingWindows

XP

Ping
︓祉︓祉

✏Ὸﭺ


Sver
∐
﹧
Ὥ⁁

✏Ὸﭺ


Sver
∐
﹧
Ὥ⁁
﷧ῲ︓祉Ə慨אּ﨔ﮁתּ

T﨔ﮁ數ﷲ


T﨔ﮁ數ﷲ

ŃServer: fe80::a00:27ff:fe84:a767
Htf8021bffff0897
Ń
H
os
t
:
f
e
80
::
21b
:
f
c
ff
:
f
ec
0
:
8
e
97
✏ὦ

Ὸᆲﮁῲ

✏ὦ
ping6

Ə
Ὸᆲﮁ


interface ⎢⁁Ping ⊼ὃ
ナﷱ
Ὸ∗ウ
Ń
ナﷱ


ipconfig
Ὸ∗




%5Ə
Ọאּ﷧ﷲHost ?Serverἴ✧ ⊇

%5

%5
21
WindowsXPPing
WindowsXPPing
︓祉
︓祉
﹤Wws



﹧﹤Wws



﹧
︓祉
︓祉








Ń?ping6fe80::a00:27ff:fe84:a767%5
Ń

﷙ﵺ⊆✗
﹧

Sver

Ƅ
Ń

﷙ﵺ⊆✗
﹧

Sver

Ƅ

﹤WwsXPP葉i
﹤WwsXPP葉i
︓祉
︓祉
﹤Wws



﹧﹤Wws



﹧
︓祉
︓祉

ウ







Ń?ping6 -I eth0 -c 5fe80::21b:fcff:fec0:8e97
Server ṆỌ⊆✗Ping∗HostƏỌῲﶙ﷖⡪∐﨔ﵞὭṭƄ
23
LinuxPing
LinuxPing
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
ﱩL

﹧ﱩL

﹧
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)

ὦ
ﱩL
Ḣ渚
﹧
︓祉
ﭺ

ὦ
ﱩL
Ḣ渚
﹧
︓祉
Ə
ﭺ
⤇￶IPv6Ὥ䷁˛

ﳢﵘ零Ɲ
24
LinuxPingLinuxPing
︓祉︓祉
((
ὦﮁἴ✧ὦﮁἴ✧
))
Linux

PingLinux

Ping
︓祉︓祉
((
ὦﮁἴ✧ὦﮁἴ✧
))


﨔ﮁ


﨔ﮁ
Ńℯὦifconfig爫Host1IPv6ἴ✧
﷙セIPv6ἴ✧Ə嵐IPv6
25
憎
憎IPv6
IPv6ﶙ﷖﨔ﮁ﷌⅞
ﶙ﷖﨔ﮁ﷌⅞

IPv6 ifconfig
//fff
Ń
/
sbin
/
i
f
con
f
ig <inter
f
ace>

IPv6 route
Ń/sbin/route -A inet6

IPv6 Ping
Ńping6 < ipv6address >

IPv6 traceroute6
Ń–traceroute6 <ipv6 address>

DNSIPv6流⊂
Ń–host -t AAAA ipv6-domainname

Telnet Client𥳐
26
Ńtelnet 3ffe:400:100::1 80
26
﨔ﮁ
﨔ﮁ
IPv6
IPv6
ἴ✧
ἴ✧
﨔ﮁ
﨔ﮁ
IPv6
IPv6
ἴ✧
ἴ✧

嵐∴IPv6ἴ✧
Ń# /sbin/ip -6 addr show dev <interface>
Ń# /sbin/ifconfig <interface>
⢅⊇
6
ἴ✧

⢅⊇
IPv
6
ἴ✧
Ń# /sbin/ip -6 addr add <ipv6address>/<prefixlength> dev
<interface>
<interface>

Ń# /sbin/ifconfig <interface> inet6 add
<i
p
v6address>/<
p
refixlen
g
th>
ppg

梨IPv6ἴ✧
Ń# /sbin/i
p
-6 addr del <i
p
v6address>/<
p
refixlen
g
th> dev
p
ppg
<interface>
Ń# /sbin/ifconfig <interface> inet6 del
<i6dd>/<filh>
27
<i
pv
6
a
dd
ress
>/<
pre
fi
x
l
engt
h>

ﭺﶙẲḔ
ﭺﶙẲḔ
縷
縷
﨔ﮁ
﨔ﮁ
ﭺﶙẲḔ
ﭺﶙẲḔ
縷

縷

﨔ﮁ
﨔ﮁ

Depends on distributionƏỌﷲ﨔ﮁRed HatFedora

ﶙ﨔ﮁIPv6 ﱓ
Ńvi /etc/sysconfig/network
NETWORKING_IPV6=yes

ᅰﶙẲ
Ńvi/etc/sysconfig/network-scripts/ifcfg-eth0
IPV6INIT=yes
IPV6ADDR“i6dd/fi”

IPV6ADDR
=

<
i
pv
6
a
dd
ress>
/
<pre
fi
x>


╆⊼ﶙ
/t/iitd/tktt

itktt
Ń
/
e
t
c
/i
n
it
.
d/
ne
t
wor
k
res
t
ar
t


sv
i
c
t
r
k
 s
t

t

28
LinuxPingLinuxPing
︓祉︓祉
((
ὦﮁἴ✧ὦﮁἴ✧
))
Linux

PingLinux

Ping
︓祉︓祉
((
ὦﮁἴ✧ὦﮁἴ✧
))
Ń
ᅰ
/etc/sysconfig/network
-
scripts/ifcfg
-
eth0
ᅰ
・ウ拾﹦不ョ/イo
復s

Ń#vim /etc/sysconfig/network-scripts/ifcfg-eth0
嗢零﨔ﮁ
29
LinuxPing
LinuxPing
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
ﱩL

﹧ﱩL

﹧
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
Ń
⊇ﷲ⇾ﷰ
縷
﨔ﮁ
Ə
ḍ﬿嗢
Ń
⊇ﷲ⇾ﷰ
縷
﨔ﮁ
Ə
ḍ﬿嗢
縷ἴ✧﨔ﮁ
30
LinuxPing
LinuxPing
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
ﱩL

﹧ﱩL

﹧
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
Ń

network
╆⊼
Ə
⤾≂?ἴ✧﨔ﮁ

network
a´5—%F"¼
)>E?"B24_?!LFk?4''Z?+•
Ń/etc/rc.d/init.d/network restart
Ńifconfig爫eth0Ə⥩ﷲHost1ἴ✧﨔ﮁ﷙ﵺ
31
LinuxPing
LinuxPing
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
ﱩL

﹧ﱩL

﹧
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)


﨔ﮁ


﨔ﮁ

LinuxPingLinuxPing
︓祉︓祉
((
ὦﮁἴ✧ὦﮁἴ✧
))
Linux

PingLinux

Ping
︓祉︓祉
((
ὦﮁἴ✧ὦﮁἴ✧
))
Ń
#vim/etc/sysconfig/network
-
scripts/ifcfg
-
eth0
#vim

/etc/sysconfig/network
scripts/ifcfg
eth0
Ń⊇ﷲ⇾ﷰIPv6﨔ﮁƏḍ﬿嗢
IPv6ἴ✧﨔ﮁ
33
LinuxPing
LinuxPing
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
ﱩL

﹧ﱩL

﹧
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
Ń

network
╆⊼
Ə
⤾≂?ἴ✧﨔ﮁ

network
a´5—%F"¼
)>E?"B24_?!LFk?4''Z?+•
Ńifconfig爫eth0Ə⥩ﷲHost2ἴ✧﨔ﮁ﷙ﵺ
34
LinuxPing
LinuxPing
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)
ﱩL

﹧ﱩL

﹧
︓祉
︓祉
(
(
ὦﮁἴ✧
ὦﮁἴ✧
)
)

ウ
H

H
ṹ
﹧
ị

ウ
H

H
ṹ
﹧
ị

ŃHost1:
#ping6 2222::2
ŃHost2:
#ping6 2222::1
35
Chapter 02
DNS SERVER (BIND)
DNS SERVER (BIND)
36
⤎ﶘ⤎ﶘ
⤎ﶘ⤎ﶘ

Bind
ﰈẲ

Bind

ﰈẲ

ﳢﵘ⡪

Bind ﭰ

Bind
Z?+•:{

Bind

﨔ﮁ嗢

Bind IPv6 慨אּ

⎪↑ﲮ
37
Bind
Bind
ﰈẲ
ﰈẲ
﹤
﹤
ﰈẲ
ﰈẲ

﹤
Ὸ︟
DSver
✏

﹤

Ὸ︟
D

Sver
Ə
✏
﷙ﵺṭIPv6ἴ✧流˛

ﮮﯮẲﴠ⥩Ἴ✏CentOS ﭰDNS
Server
ḍﷻ⤇ﯴ
縷I
⁁
˛
ḍﷻ⤇ﯴ
⁁
38
ﳢﵘ⡪ﳢﵘ⡪
ﳢﵘ⡪ﳢﵘ⡪

ﳢﵘ⡪
Ɲ

ﳢﵘ⡪
Ɲ
ŃIPv6 DNS Server: CentOS 5.x
ŃIPv6 Host: Windows XP
ŃSwitchƝD-Link DES-1005D

ﳢﵘ零
Ɲ

ﳢﵘ零
Ɲ

﹤
﹤
ﭰ
ﭰ
﹤

﹤

ﭰ
ﭰ

￶
掠y
ﭰ
﹤
⅝﨔ﮁ嗢ﮫ

￶
掠y

ﭰ
﹤

⅝﨔ﮁ嗢ﮫ
Ń#yum install bind system-config-bind bind-
chroot
ŃﭰﭳḲ
40
BindBind
﨔ﮁ嗢﨔ﮁ嗢
Bind

Bind

﨔ﮁ嗢﨔ﮁ嗢

﨔ﮁ嗢ἴu
Ɲ
カョ」ッ

﨔ﮁ嗢ἴu
Ɲ
カョ」ッ
Ńﭰ↑Əﭰﭳbind-chroot ⤾ờウƏbind 﨔ﮁ
嗢ἴu∗/var/named/chroot ﷲ
Ńsystem-config-bind ⤾ờ∮ﭰbind﨔﨔ﮁ嗢Əἴu✏
/usr/share/system-config-bind/profiles/default ﷲ
﨔ﮁ嗢uבֿ渚

﨔ﮁ嗢uבֿ渚
Ń1. named.conf

ℯ∗
/usr/share/system
-
config
-
bind/profiles/default

namedconf

ℯ∗
/usr/share/system
-
config
-
bind/profiles/default


﹡ﵥn
.
﹦


∗/var/named/chroot/etc
# cd /usr/share/system-conf-bind/profiles/default
#df//d/ht/t/

#
cp name
d
.con
f

/
var
/
name
d/
c
h
roo
t/
e
t
c
/
41
Bind
Bind
﨔ﮁ嗢
﨔ﮁ嗢
﹤

﹤

﨔ﮁ嗢
﨔ﮁ嗢
Ń
2.
תּ流嗢
2.

תּ流嗢
∗/usr/share/system-config-bind/profiles/default/named ⎢ﳢﵘ
﨔תּ流嗢(zone)

ウ
﹦
﹤ﱥﱴョ







ウ





﹦

﹤



ﱥ

ﱴョ
# cp *.* /var/named/chroot/var/named/
42
Bind
Bind
﨔ﮁ嗢
﨔ﮁ嗢
﹤

﹤

﨔ﮁ嗢
﨔ﮁ嗢
Ń
3.named.root
3.

named.root
∗/usr/share/doc/bind-9.3.4/sample/var/named named.root ∗
/var/named/chroot/var/named/

ウ、﹤
盧







ウ

﹤







ﱥ

ョ
# cp named.root /var/named/chroot/var/named/
╆⊼

╆⊼
bind
Ń/etc/init.d/named start
43
Bind
Bind
﨔ﮁ嗢
﨔ﮁ嗢
﹤

﹤

﨔ﮁ嗢
﨔ﮁ嗢


﹡ﵥn﹦
ῲ嗢
Ə
⢅⊇Ọﷲ


named
.
conf
ῲ嗢
⢅⊇Ọﷲ
Ńoptions {
Ń
listen
-
on
-
v6{any;};
listen
on
v6

{

any;

};
Ń};
Ńzone "demo2.v6class.tw." IN
{
{
Ńtype master;
Ńfile "demo2.v6class.tw.txt";
Ńallow-update { none; };
Ń};

╆⊼bind

/etc/init.d/named restart
44
ﷱﱋﷱﱋ
v6classtwtxtv6classtwtxt
תּ流﫱תּ流﫱
ﷱﱋﷱﱋ
v6class
.
tw
.
txtv6class
.
tw
.
txt
תּ流﫱תּ流﫱

$TTL 86400

@ IN SOA v6class.tw. root.localhost. (

2011030804 ; Serial

28800 ; Refresh

14400 ; Retry

720000 ; Expire

86400 ) ; Minimum

@ IN NS ns1.v6class.tw.

@ IN NS ns2.v6class.tw.

ns1 IN A 163.28.6.33

ns2 IN A 163.28.6.33

ns1 IN AAAA 2001:288:1:1002::15

ns2 IN AAAA 2001:288:1:1002::15

demo IN NS ns1.demo.v6class.tw.

demo IN NS ns2.demo.v6class.tw.

ns1.demo IN A 211.72.210.2

ns2.demo IN A 211.72.210.2

ns1.demo IN AAAA 2001:f10:7001:6:20c:29ff:fe74:df51

ns2.demo IN AAAA 2001:f10:7001:6:20c:29ff:fe74:df51
45
⢅⊇⢅⊇AAAA
AAAA 刺
刺
demo.v6class.tw.txt
demo.v6class.tw.txt

$TTL 86400

@ IN SOA demo.v6class.tw. root.localhost. (

2011030804 ; Serial









14400 ; Retry

720000 ; Expire

86400 ) ; Minimum

@ IN NS ns1.demo.v6class.tw.

@
IN NS ns2.demo.v6class.tw.
@

ns1 IN A 211.72.210.2

ns2 IN A 211.72.210.2

ﹳ辶嘆辶賓

ﹳ





辶嘆辶賓

ns2 IN AAAA 2001:f10:7001:6:20c:29ff:fe74:df51

www IN A 211.72.210.116

www IN AAAA 2001:288:4:2::116
46
BindIPv6
BindIPv6
慨אּ
慨אּ
﹤

縷

﹤

縷

慨אּ
慨אּ

∐
﹥n
憎
﹤


∐
﹥n

憎
﹤


縷IIPv6 53 port
Ń#netstat -antlp | grep : 53
ŃỌ∗﷙ﵺ╆⊼IPv4 IPv6⋀ṭ
47
BindIPv6
BindIPv6
慨אּ
慨אּ
﹤

縷

﹤

縷

慨אּ
慨אּ


流慨אּ


流慨אּ

49
Chapter 04
WEB SERVER (APACHE)WEB SERVER (APACHE)
50
⤎ﶘ
⤎ﶘ
⤎ﶘ
⤎ﶘ


ﰈẲ



ﰈẲ

ﳢﵘ⡪

Apache Server ﭰ

ApacheServer
Z?+•:{

Apache

Server
﨔ﮁ嗢

IPv6Web Server ︓祉

⎪↑ﲮ
51
Apache
Apache
ﰈẲ
ﰈẲ




ﰈẲ
ﰈẲ



兩
ﱩleOS
Ḕ︟沈
b




兩
-
ﱩle


Ḕ︟沈
b

SverƏ∴Apache2 ﷙ﵺ﨔


ὃ


IPv6/IPv4

⁓D
ὃ
Ə

CentOS5.x 
Ap
ache 2.2.3-22 Ṇ⥩וֹ
p

Ọﷲ嵐ﮫ⥩Ἴﭰ﷧ῲIPv6 
WebServer
Web

Server
52
ﳢﵘ⡪ﳢﵘ⡪
ﳢﵘ⡪ﳢﵘ⡪

ﳢﵘ⡪
Ɲ

ﳢﵘ⡪
Ɲ
ŃIPv6 Web Server: CentOS 5.x
ŃIPv6 Host: Windows XP
ŃSwitchƝD-Link DES-1005D
ŃBrowser: Internet Explorer 8.0

ﳢﵘ零Ɲ
53
ApacheServer
ApacheServer
ﭰ
ﭰ


Sver

Sver
ﭰ
ﭰ

✏⑤ị⇾ὦ
掠y
ﭰ


✏⑤ị⇾ὦ
掠y
ﭰ

Ń#yuminstallhttpd
54
ApacheServer
ApacheServer
ﭰ
ﭰ


Sver

Sver
ﭰ
ﭰ
ﭰﭳ
55
ApacheServer
ApacheServer
﨔ﮁ嗢
﨔ﮁ嗢


Sver

Sver
﨔ﮁ嗢
﨔ﮁ嗢

ἴu
Ɲ
・ィ」ョ/﹦

ἴu
Ɲ
・ィ」ョ/
.
﹦

Apache 﨔﷙IPv4/IPv6ﮁ
﨔ﮁ嗢
56
﨔ﮁ嗢
IPv6WebServerIPv6WebServer
︓祉︓祉
IPv6

Web

Server

IPv6

Web

Server

︓祉︓祉

ἴ✧﨔ﮁ

ἴ✧﨔ﮁ
ŃServer: fe80::a00:27ff:fe84:a767
Ń
Hf免辶e路
Ń
H

f免辶e路

Host𥳐Ẳ
ὦ
セẲ
Ń
ὦ
ipconfig
セẲ
┱%

縷WebSver
縷WebSver
︓祉
︓祉
縷

b

Sver

縷

b

Sver

︓祉
︓祉

⥩ﷲ
⊆Ọ
縷
ἴ✧∗
Sver

⥩ﷲ
Ə
⊆Ọ
IPv6
?4''` 3Œ"?
Server
58
Virtual
Virtual HostHost﨔ﮁ
﨔ﮁ

NameVirtualHost *:80

<VirtualHost *:80>

ServerAdmin dar@twnic.net.tw

DocumentRoot "/var/www/html/demov6"

ServerName www.ipv6day.tw

ServerAlias v4.ipv6day.tw

ServerAlias ds.ipv6day.t
w

ServerAlias demv6.ipv6po.tw

ServerAlias 2001:f10:7001:6:20c:29ff:fe74:df51
EL"l/d6i6t
l"

E
rror
L
og
"l
ogs
/d
emov
6
.
i
pv
6
po.
tw
-error_
l
og
"

CustomLog "logs/demov6.ipv6po.tw-access_log" common

</VirtualHost>

ﱖ沈墨

ﱖ沈

墨

ServerAdmin dar@twnic.net.tw

DocumentRoot "/var/www/html/ds"

ServerNameds.demo.v6class.tw
ServerName

ds.demo.v6class.tw

ServerAlias v4.demo.v6class.tw

ServerAlias v6.demo.v6class.tw

ErrorLo
g
"lo
g
s/ds.demo.v6class.t
w
-errorlo
g
"
gg
_
g

CustomLog "logs/ds.demo.v6class.tw-access_log" common

</VirtualHost>
59


縷
縷
ﶙ變
ﶙ變


縷
縷
ﶙ變
ﶙ變


IPv6IPv6
ﶙ變⇾ﶙ變⇾

IPv6IPv6
ﶙ變⇾ﶙ變⇾
61
62
Chapter 07
FIREWALL(IP6TABLES)FIREWALL(IP6TABLES)
63
⤎ﶘ
⤎ﶘ
⤎ﶘ
⤎ﶘ

殺

殺ﱥi
ﰈẲ

殺

殺ﱥi

ﰈẲ

ﳢﵘ⡪

iptables/ip6tables 爫﷬略∮


ipv6web
` MÁ


ipv6

web
䷁

⎪↑ﲮ
64
iptablesiptables

ip6tablesip6tables
ﰈẲﰈẲ
iptablesiptables

ip6tables

ip6tables

ﰈẲﰈẲ


Ke24
零
Ə
iptables

FÛ6?
Linux


Kernel

2
.
4

零
殺

ﱩL

ﳢﵘḔⅎﻡƏﷴἭỌ﯒ﻶ
見略∮ƏṆỌﭺῸﻡ者
ﶙ﷖
NAT(Network Address Translation)
ﶙ﷖
Ə
﯍⤁⅘﷧ῲ﯍請IPﷱﶙ行ﻶ˛

IP6
M™]Ö??
#ó: 6ð)>
6bl



IP
v
6

ﶙ﷖Ḕ
Ə
見


ip
6
ta
bl
es

ỌὃῸ˛
i6tbl

itbl
6ç)?Fk?ô#ó6?'?5£

i
p
6t
a
bl
es

i
p
t
a


⤎ﷴ✏
殺ﱥỌIPv6 Address/Prefix
﨔ﮁ
Ə
￳⅝ẽ⤎⤁ﲼ
iptables
Z?+•
Oó!]?½)?)?5_FkE?<¼`äQî
iptables
Fß#ó?•2'?Ì+ô5£A†0piptablesƏ
i
p
6tables ﷧ﮁỌﻼ﫭ﷱ˛
p
65
ﳢﵘ⡪
ﳢﵘ⡪
ﳢﵘ⡪
ﳢﵘ⡪

ﳢﵘ⡪
Ɲ

ﳢﵘ⡪
Ɲ
ŃIPv6 Server with Firewall : CentOS 5.x
ŃIPv6 Host: Windows XP
ŃSwitchƝD-Link DES-1005D

ﳢﵘ零
Ɲ

ﳢﵘ零
Ɲ

殺
殺
ゥ
ゥ
爫﷬略∮
爫﷬略∮
殺
殺
ゥ

ゥ

爫﷬略∮
爫﷬略∮

爫略∮

爫略∮
Ń#ip6tables -L
Ń∴ﱹỢἼ略∮Ə﨔Ṇ
A
CCEPT
67
iptables
iptables
/ip6tables
/ip6tables
爫﷬略∮
爫﷬略∮
殺
殺
ゥ

ゥ

爫﷬略∮
爫﷬略∮

﷬



略∮

﷬



略∮
Ń#ip6tables -F
Ń#ip6tables

X
Ń#ip6tables –Z
Ń#iptables

F
Ń#iptables –X
Ń#iptables -Z
68
iptablesiptables
/ip6tables/ip6tables
爫﷬略∮爫﷬略∮
iptablesiptables
/ip6tables

/ip6tables

爫﷬略∮爫﷬略∮

爫

略∮

爫

略∮
Ń#ip6tables -L

爫

∮

爫

∮
Ń#iptables -L
69


殺web
殺web
䷁
䷁


殺

b殺

b
䷁
䷁

✏﷬ﭳ
縷

縷
略∮ウ
Ə
Ọﷲ嵐

✏﷬ﭳ
縷

縷
略∮ウ
Ə
Ọﷲ嵐
ﮫ⥩ἼﮁIPv6ﶙ￶捻
ℯ充
IP4

IP6
Fm#Ö?öY¤M™gè
Ń
ℯ充
IP
v
4



v
6

￶捻ﶙ



殺web
殺web
䷁
䷁


殺

b殺

b
䷁
䷁
Ń
✏充Ọתּ︟䷁ウ
Ə

殺ﱥi
⊇
Ń
✏充Ọתּ︟䷁ウ
Ə

殺ﱥi
⊇
﷧略∮
#i6tbl
AINPUT
ith0
t
dt80
j

#i
p
6t
a
bl
es -
A

INPUT
-
i
e
th0
-p
t
cp --
d
por
t

80
-
j

DROP
-
A
Ị⢅

略∮
A

Ị⢅略∮
INPUT Ị泌﨔ﮁchain
-i Ị?Ẳ
-p Ị隣ﮁ
--dport 𥳐port
j
∮﬍略∮⊼
-
j

∮﬍略∮⊼



殺web
殺web
䷁
䷁


殺

b殺

b
䷁
䷁
Ń
﨔ﮁﭳウ
Ə
ⅴ﬈Ọ

￶捻♏
縷

縷

Ń
﨔ﮁﭳウ
Ə
ⅴ﬈Ọ

￶捻♏
縷

縷


Ń
IPv4
Ọתּ︟䷁
IPv4
Ọתּ︟䷁
72

ipv6webipv6web
䷁䷁

ipv6

webipv6

web
䷁䷁
Ń

縷
∮ﲼ䷁ṭ
Ə
充﷙
Ń

縷
∮ﲼ䷁ṭ
Ə
充﷙

￝姛ヲﻏ䕂僅
!!
￝姛ヲﻏ䕂僅
!!
㗇䲡䖶㗁~
74