活 動 メンバー 会 員 賛 助 会 員 ( 富 士 通 ) 氏 名 機 関 / 所 属 (2014 年 7 月 31 日 現 在 ) 担 当 幹 事 西 村 浩 二 広 島 大 学 まとめ 役 只 木 進 一 佐 賀 大 学 吉 田 和 幸 大 分 大 学 笠 原 義 晃 九 州 大 学 武 蔵
|
|
|
- いつや すみだ
- 8 years ago
- Views:
Transcription
1 中 間 まとめ IPv6 とセキュリティ 2014 年 7 月 31 日 サイエンティフィック システム 研 究 会 移 行 期 にあるネットワークサービスのセキュリティ WG
2 活 動 メンバー 会 員 賛 助 会 員 ( 富 士 通 ) 氏 名 機 関 / 所 属 (2014 年 7 月 31 日 現 在 ) 担 当 幹 事 西 村 浩 二 広 島 大 学 まとめ 役 只 木 進 一 佐 賀 大 学 吉 田 和 幸 大 分 大 学 笠 原 義 晃 九 州 大 学 武 蔵 泰 雄 熊 本 大 学 鈴 木 聡 高 エネルギー 加 速 器 研 究 機 構 推 進 委 員 長 谷 川 明 生 中 京 大 学 鈴 木 常 彦 中 京 大 学 藤 本 衡 東 京 電 機 大 学 西 村 浩 二 広 島 大 学 藤 村 丞 福 岡 大 学 山 守 一 徳 三 重 大 学 まとめ 役 吉 田 真 和 富 士 通 ( 株 ) 須 永 知 之 富 士 通 ( 株 ) 推 進 委 員 山 下 眞 一 郎 富 士 通 ( 株 ) 山 路 光 昭 富 士 通 ( 株 ) 石 川 武 志 富 士 通 ( 株 ) 田 口 雅 晴 ( 株 ) 富 士 通 九 州 システムズ
3 目 次 1 はじめに IPv6 の 基 本 と Windows での 対 応 IPv6 の 疎 通 状 況 を 端 末 上 で 確 認 する 方 法 トンネルの 危 険 性 とフィルタの 方 法 意 図 せず 張 られるトンネル to4 が 有 効 になっているデバイスからの RA 送 出 IPv4 がプライベートアドレスの 場 合 もトンネルが 張 られるのか ファイアウォール 等 の 設 定 の 留 意 点 IPv6 の 今 後 の 方 向 性 DNS 混 ぜるな 危 険 :IPv6 には 移 行 できない DNS 権 威 サーバ DNS キャッシュサーバ IPv6 と IPv4 は 並 行 運 用 するしかない? 並 行 運 用 する 意 義 はあるか 並 行 運 用 するとすればどういう 形 態 が 望 ましいか サーバ 側 クライアント 側 ファイアウォール キャッシュ DNS サーバによる 通 信 の 制 御 に ついて-IPv4 と IPv6 との 比 較 はじめに サンプルポリシー キャッシュ DNS (bind9.5 以 降 ) の 設 定 IPv6 over IPv4 トンネルの 抑 制 無 駄 な 問 い 合 わせの 抑 制 参 考 文 献 添 付 資 料 SA46T:IPv4 アドレス 枯 渇 後 の IPv6 移 行 と IPv4 継 続 利 用 を 両 立 するカプセル 化 技 術 松 平 直 樹 ( 富 士 通 株 式 会 社 )
4 IPv6 1 IPv IPv4 [1] B C IPv4 NAT IPv4 IPv [2] KAME Project IPv6 [3] OS IPv6 OS router firewall IPv6 IPv6 Internet Society 2011 IPv6 [4] IPv6 IPv4 IPv6 IPv4/IPv6 IPv4 IPv6 IPv4 IPv6 IPv4 IPv4 IPv4 IPv4 IPv6 OS IPv6 IPv6 IPv6 WG IPv6 OS IPv6 [4] IPv6 IPv4 OS IPv6 IPv6 IPv6 RA (Router Advertisement) IPv6 1
5 IPv4 IPv6 IPv4 Ipv4 IPv6 IPv6 IPv4 IPv6 IPv4 IPv6 Google Facebook IPv6 IPv6 IPv6 IPv6 IPv4 IPv6 2
6 2 IPv6 Windows IPv4 32bit 8bit (octet) 10 IP bit IPv6 IPv6 128bit ( ) 1 Avogadro ( mol 1 ) IPv6 16bit (field) 16 IPv6 2404:6800:400a:802::101f 0 field 0 :: rfc5952 [5] IPv6 IP IPv6 PC RA (Router Advertisement) Windows Windows XP IPv6 Windows Vista IPv6 RA IPv6 RA IPv4 IPv6 3
7 3 IPv6 1: IPv6 (Windows 7 ) IPv6 Windows XP SP1 Windows XP SP1 Windows Vista \ \ ( ) ( 1) 6 (TCP/IPv6) IPv6 WEB 2 WEB IPv6 connectivity 6to4 Browser IPv4 default Fallback IPv6 3 The KAME project 4
8 2: Internet Explorer Firefox [3] IPv6 IPv4 the dancing kame IPv6 6to4 Teredo IPv6 Windows 8 IPv6 30 OS IPv6 IPv4 IPv6 WEB OS IPv6 Teredo 6to4 OS IPv6 Windows ( ) 5
![net/ [3] IPv6 IPv4 the dancing kame IPv6 6to4 Teredo](/docs-images/52/20145541/images/page_8.jpg "IPv6 Windows 8 IPv6 30 OS IPv6 IPv4 IPv6 WEB OS IPv6")
9 3: Chrome IPv6 4: teredo netsh interface ipv6 show teredo qualified Teredo IPv6 qualified 4 IPv6 netsh interface ipv6 show prefixpolicies 5 OS WEB Teredo Teredo ( Microsoft ) IPv4 IPv6 6
10 5: IPv6 IPv6 IPv6 IPv4 Teredo Teredo IPv6 IPv6 Teredo IPv4 DNS IPv4 A IPv4 OS WEB The KAME Project URL IPv6 IP ( IPv6 ) 7
11 4 4.1 Windows IPv6 IPv6 IPv4 6to4 Teredo IPv4 Teredo WindowsXP Windows Vista 6to4 2002:XXXX:YYYY::ZZZZ:ZZZZ:ZZZZ prefix XXXX YYYY IPv4 16 6to4 Teredo IPv4 IPv4 IPv6 IPv4 IPv4 IPv6 IDS [6] 6to4 historic status [7] 4.2 6to4 RA IPv4 Windows 6to4 Windows IPv6 RA IPv4 2 Windows 7 (SP ) RA IPv6 IPv6 Windows RA IPv6 2002:XXXX:YYYY::ZZZZ:ZZZZ:ZZZZ XXXX:YYYY 6to4 IPv4 IPv6 (RS, Router Solicitation) RA RA IPv6 RA Wi-Fi Windows RA 8
![6to4 historic status [7] 4.](/docs-images/52/20145541/images/page_11.jpg "2 6to4 RA IPv4 Windows 6to4 Windows IPv6 RA IPv4 2 Windows 7 (SP ) RA IPv6 IPv6 Windows RA IPv6")
12 netsh netsh interface ipv6 netsh interface ipv6> show interface show interface disabled RA Firewall 6to4 Teredo IPv6 6to4 Teredo Teredo 6to4 6to4 IP Teredo UDP 6to4 IP TCP UDP 41 Teredo UDP 3544 Windows Teredo 6to4 DNS teredo teredo.ipv6.microsoft.com 6to4 6to4.ipv6.microsoft.com 4.3 IPv4 6to4 IPv4 NAT Teredo NAT IPv4 4.4 Firewall L2 Firewall IPv6 Ethernet IPv6 Firewall 6to4 Teredo netsh dormant dormant 9
13 ( IPv6 IPv4 ) 10
14 5 IPv6 5.1 DNS IPv6 ICANN (The Internet Corporation for Assigned Names and Numbers)[8] DNS IPv6 IPv6 AAAA DNS IPv DNS DNS IPv4 DNS IPv6 IPv4 IPv4 IPv6 DNS IPv6 IPv6 A Survey of DNS Security[9] Now and The Future 3.2. Increasing level of indirection[10] ( ) IPv6 IPv6 IPv6 AAAA IPv6 RFC3901 (BCP) : DNS IPv6 Transport Operational Guidelines DNS IPv4 [11] IPv4 IPv4 1 IPv4 AAAA 1 ( AAAA ) [12, 13] DNS DNS WAN IPv4 IPv4 LAN IPv6 DNS IPv4 IPv6 IPv4 11
![Increasing level of indirection[10] ( 46 100 ) IPv6 IPv6 IPv6 AAAA IPv6 RFC3901 (BCP) : DNS IPv6 Transport](/docs-images/52/20145541/images/page_14.jpg "Operational Guidelines DNS IPv4 [11] IPv4 IPv4 1 IPv4 AAAA 1 ( AAAA ) [12, 13] 5.1.2 DNS DNS WAN IPv4 IPv4 LAN IPv6 DNS IPv4 IPv6 IPv4 11")
15 5.2 IPv6 IPv4? DNS IPv6 Web IPv6 IPv4 IPv6 IPv4 FAX IPv6 IPv IPv4 IPv6 IPv6 IPv6 IPv6 NAT IPv4 NAT [14] 5.4 IPv6 IPv6 IPv6 IPv4 IPv4 IPv6 IPv IPv4 IPv4 LSNAT IPv6 IPv4 IPv6 DNS WAN IPv4 IPv6 AAAA IPv6 DNS 12
![3 2 IPv4 IPv6 IPv6 IPv6 IPv6 NAT IPv4 NAT [14] 5.](/docs-images/52/20145541/images/page_15.jpg "4 IPv6 IPv6 IPv6 IPv4 IPv4 IPv6 IPv4 5.4.1 IPv4 IPv4")
16 5.4.2 NAT Proxy IPv6 IPv4 NAT Proxy IPv4 IPv4 IPv6 IPv6 1. IPv6 IPv6 DHCPv6 ( RA DNS ) IPv6 IPv6 DNS (IPv4 DNS64 ) NAT64 (IPv4 ) 2. IPv4 IPv4 DNS64/NAT64 (WWW ) (IPv6 ) 464XLAT 3. IPv6 (NAT64 ) 4. OS IPv6 IPv6 IPv6 ( ) 464XLAT 5. IPv6 6. IPv6 NAT64 7. IPv6 / IPv6 13
17 8. IPv6 ( ) IPv6 IPv6 IPv6 IPv6 ( P2P ) IPv6 IPv4 14
18 6 IPv4 IPv6 6.1 IPv4/IPv6 IPv6 IPv4 ppp.qqq.0.0/16 IPv6 rrrr:ssss:tttt::/48 (ppp qqq rrrr ssss tttt 0 ffff 16 ) 6 Router Firewall IPv6 rfc 6434 [15] DMZ FireWall Router LAN 6: 6.2 / (a) ( ) (b) ( (c) ( ) (d) ( ) (e) IPv6 over IPv4 ( ) (f) ( ) 15
![ffff 16 ) 6 Router Firewall IPv6 rfc 6434 [15] DMZ FireWall](/docs-images/52/20145541/images/page_18.jpg "Router LAN 6: 6.")
19 (g) ( ) (h) icmp echo request, icmp redirect ( ) (i) icmp (Path MTU Discovery )[16]( ) (j) ( OP25B) (k) icmp redirect ( ) (l) icmp (Path MTU Discovery )[16]( ) (m) ( ) ACL (Access Control List), static route, 1: ACL, IPv4, ip access-list extended ingress-filter-ipv4 10 deny ip any 20 deny ip any 30 deny ip any 40 deny ip any 50 deny ip ppp.qqq any 60 deny ip any 70 deny ip any 100 deny ip any (a) 220 deny ip any ppp.qqq deny ip any ppp.qqq (b) 2: AACL IPv6, ipv6 access-list ingress-filter-ipv6 10 deny ipv6 rrrr:ssss:tttt::/48 any 100 permit ipv6 any any (a) icmp, ipv6 over ipv4 16
20 3: ACL IPv4, ip access-list egress-filter-ipv4 10 permit ip ppp.qqq any 100 deny ip any any (a) 4: ACL IPv6, : (IPv6 ) (a) ipv6 access-list egress-filter-ipv6 10 permit ipv6 rrrr:ssss:tttt::/48 any 20 permit ipv6 fe80::/10 any 100 deny ipv6 any any 5: static route (c) ip route ppp.qqq.0.0/16 Null 0 (d) ip route /24 Null 0 ip route /24 Null 0 ip route /8 Null 0 ip route /10 Null 0 ip route /16 Null 0 ip route /12 Null 0 ip route /16 Null 0 (c) ipv6 route rrrr:ssss:tttt::/48 Null 0 17
21 6: ( ) IP IP protocol / any any 25 tcp (f) any any any 25 tcp (g) any any DNS 53 tcp/udp (f) any any any 53 tcp/udp (g) any any Web 80 tcp (f) any any any 80 tcp (g) any any ntp 123 udp (f) any any any 123 udp (g) any - any - icmp (h) echo request any - any - icmp (h) redirect any - any - icmp (i) 7: ( ) IP IP protocol / any any 25 tcp (j) any any any 25 tcp (j) any any any any tcp (k) any any any any udp (k) any - any - ipv6 (e) over ipv4 any - any - icmp (k) redirect any - any - icmp (l) 18
22 6.3 DNS(bind 9.5 ) ipv6 over ipv4 ipv6 over ipv4 tunnel DNS bind rpz(responsible policy zone) 6to4 6to4.ipv6.microsoft.com Terado teredo.ipv6.microsoft.com nxdomain( ) 8: named.conf ( ) options{ response-policy{ zone policy.example.jp }; }; zone policy.example.jp { type master; file data/policy.example.jp.zone ; }; 9: policy.example.jp $TTL IN SOA localhost. nobody.localhost. ( ) IN NS localhost. 6to4.ipv6.microsoft.com IN CNAME. ; NXDOMAIN teredo.ipv6.microsoft.com IN CNAME. ; NXDOMAIN ;; "." 19
23 to4 IPv6 10: pnamed.conf ( ) option { empty-zone-enable yes; } zone " IP6.ARPA" IN { type master; file "data/null.zone"; }; 11: null.zone $TTL IN SOA localhost. nobody.localhost. ( ) IN NS localhost. 6to (16 ) IPv4 32 6to4 LAN 6to4 Teredo IPv6 link local IPv4 private bind9.5 empty-zone-enable yes;(default) 20
24 12: IP6.ARPA IP6.ARPA D.F.IP6.ARPA 8.E.F.IP6.ARPA 9.E.F.IP6.ARPA A.E.F.IP6.ARPA B.E.F.IP6.ARPA 8.B.D IP6.ARPA 0.in-addr.arpa 10.in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa 127.in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa in-addr.arpa 21
25 [1] IPv4 (2011) [2] rfc 1883, [3] The KAME project, [4] Internet Society, The world IPv6 Launch, [5] rfc 5952, [6] IPv6 [7] [8] [9] [10] Rikitake, K., Suzuki, T. and Nakao, K., DNS Security: Now and The Future, IEICE Technical Report ICSS , pp.3-8 (2007).9. [11] rfc 3901, [12] [13] [14] ( ( ))( juice 2009) [15] rfc 6434, [16] rfc 1981, 22
26
27 添 付 資 料 SA46T:IPv4 アドレス 枯 渇 後 の IPv6 移 行 と IPv4 継 続 利 用 を 両 立 するカプセル 化 技 術 松 平 直 樹 ( 富 士 通 株 式 会 社 ) 24
28
29 SA46T:IPv4 IPv6 IPv4 APNIC RIR IPv4 IPv4 IPv4 IPv6 only IPv4 SA46T SA46T 2 (1) IPv4 IPv6 (2) IPv6 IPv4 4.3 IPv4 IPv6 LAN SA46T SA46T SA46T IPv6 IPv4 IPv4-IPv6 IPv4 SA46T: Encapsulation Technology which enable both transition to IPv6 and IPv4 continuous use Naoki Matsuhira Fujitsu Limited Exhaustion of IPv4 addresses at RIRs such as APNIC became real, exhaustion of IPv4 addresses at provider will become real soon. After the exhaustion of IPv4 addresses, IPv6 only situation will be a natural thing. Based on such situation of IPv4 addresses exhaustion, encapsulation technology called SA46T is proposed. Following two points are the essences of SA46T. (1) By mapping the locator and identifier relationship of IPv4 address directory to the IPv6 address space, then solves the issue of number of configurations of existing encapsulation technology. (2) By adding the identifier of IPv4 network to locator part of IPv6 address, multiplexing is enabled approximately 430 million IPv4 networks to a single IPv6 backbone network. Through developing an implementation of SA46T, and operation as field demonstration both LAN and WAN environment, SA46T is proved to actually work and operate. And also, SA46T is proved that have interoperability between the implementations which are developed independently. SA46T is a simple technology, and shown that actually use. SA46T enable both transition to IPv6 and continuous use of IPv4. In particular, can contribute for continuous use of IPv4 applications which are unfriendly with IPv4-IPv6 translation technology. 1 IPv4 SA46T SA46T IPv6 IPv4 IPv4 SA46T SA46T 2 IPv4 2.1 IPv6 IPv4 IPv4 IETF(The Internet Engineering Task Force) 1992 IPv (Proposed Standard) RFC1883[1]
30 IPv6 IPv4 IPv6 RFC1933[2] (1) Dual Stack (IPv4/IPv6 ) (2) (3) IPv4-IPv6 ( ) 3 IETF 2001 [3] IPv IANA(Internet Assigned Numbers Authority) APNIC(Asia Pacific Network Information Centre) RIPE NCC(Reseaux IP Europeens Network Coordination Centre) IPv4 IPv4 2.2 IPv4 IPv4 IPv6 only Dual Stack IPv6 only IPv4-IPv6 IPv6 only IPv4 IPv4 over IPv6 IPv6 only IPv4 IPv4-IPv6 IPv4 over IPv6 2.3 IPv4 over IPv6 RFC2473[4] Generic Packet Tunneling in IPv6 RFC1853[5] IP in IP Tunneling 2 N N(N 1) = N 2 N RFC2473 Tunnel Encapsulation Limit Option 3 SA46T SA46T(Stateless Automatic IPv4 over IPv6 Encapsulation / Decapsulation Technology) 3.1 SA46T SA46T Stub Network (IPv4 only) Backbone Network (IPv6 only) SA46T Stub Network (Dual Stack) 1: 2 Stub Network (IPv6 only) 1 SA46T IPv4 only Dual IPv6 only 3
31 SA46T IPv4 IPv6 only SA46T SA46T IPv4 IPv6 IPv6 only SA46T SA46T RFC2473 Tunnel Encapsulation Limit Option Tunnel MTU 3.2 SA46T SA46T IPv4 over IPv6 IPv4 IPv IP Outer header IP Outer header IPv6 SA46T SA46T SA46T Locator (IPv4) Identifier 1 IPv4/IPv6 IPv4 IPv6 IPv6 SA46T address prefix IPv4 network plane ID Locator (IPv6) 2: SA46T IPv4 address Identifier 1: IPv6 only Dual Stack IPv4 only IPv6 only IPv6 IPv6 - Dual Stack IPv6 IPv6 IPv4 IPv4 only - IPv4 IPv4 SA46T IPv4 only IPv4 only IPv4 only Dual Stack 1 IPv4 IPv6 SA46T IPv4 only IPv6 only NAT- PT[6] NAT-64[7] IPv4-IPv6 SA46T SA46T IPv4-IPv6 SA46T SA46T prefix IPv4 network plane ID IPv4 SA46T prefix SA46T prefix IPv4 network plane ID IPv4 IPv4 address Inner header IPv4 3.3 SA46T SA46T 2 1. IPv4 IPv6 2. IPv4 network plane ID IPv4 IPv6
32 3.3.1 IP IPv4 IPv6 IP SA46T IPv4 IPv6 IPv4 n bit 32 n bit SA46T 128 n bit n bit IPv6 IPv4 32 n bit prefix IPv6 128 n bit prefix IP Dual stack Dual stack IPv6 IPv4 SA46T IPv6 IPv4 SA46T IPv IPv4 network plane ID IPv4 IPv6 IPv4 network plane ID IPv4 network plane ID 32bit 4.3 IPv4 3.4 SA46T SA46T address prefix IPv4 network plane ID prefix 3 1 SA46T address prefix + IPv4 network plane ID/prefix length SA46T IPv4 1 N IPv4 N IPv4 SA46T 1 SA46T 3.5 SA46T N 2 SA46T IPv4 IPv6 SA46T IPv4 network plane ID IPv4 SA46T IPv4 network plane ID IPv4 network plane ID IPv4 SA46T
33 4 SA46T SA46T (1) Stateless (2) IPv6 only IPv4 IPv6 (3) (N 2 N) (4) (5) OSPF(Open Shortest Path First) IS-IS BGP(Border Gateway Protocol) (6) Layer2 ( ) Layer3 Ethernet IEEE LAN (7) IPv4 plane ID IPv4 plane ID 32bit 4.3 (8) IPv4 IPv4 SA46T SA46T (9) SA46T SA46T ECMP(Equal Cost Multi Path) (10) DHCP(Dynamic Host Configuration Protocol) 1 SA46T IPv6 only (11) SA46T IPv6 IPv6 IPv4 5 SA46T IETF IETF (1) (2) [8] IETF 5.1 IETF [9] SA46T [10] [11] [12] [13] 5 Internet Draft 1 DHCP Relay agent DHCP server
34 5.2 SA46T 3 SA46T IPv4 IPv6 バックボーン 側 (IPv6 only) Network Interface (Backbone side) Network Interface (Stub side) Forwarding Network Interface (Backbone side) Network Interface (Stub side) IPv6 1 C 300 FMV- BIBLO LOOX M/G30(Atom N GHz 1GB Fast Ethernet) USB Fast Ethernet 2 Ethernet CentOS5.5(Kernel ) 90Mbps 5.3 SA46T 3 LAN Plane IPv4 スタブ 側 (IPv4 only or Dual) sa46tカプセル 化 プラットフォーム (CentOS 5.5) LAN sa46tデカプセル 化 3: SA46T 5 開 発 モジュール 300step(C 言 語 ) IPv4 SA46T IPv4 SA46T IPv6 IPv6 SA46T SA46T IPv6 IPv4 IPv4 SA46T 2 Dual stack IPv WIDE FMV- BIBLO LOOX M/G30(Atom N GHz 1GB Fast Ethernet) USB Fast Ethernet 2 Ethernet CentOS5.5(Kernel ) 4 WAN SA46T PC LAN SA46T DHCP IPv4 SA46T
35 WIDE Internet (Dual stack) Router (Dual Stack) sa46t-plenary sa46t-external DHCP Server DNS Server IPv6 only Backbone Network sa46t-bof12 WWW Server Wireless LAN Access(Dual Stack) sa46t-bof34 6 Traffic 4: WIDE SA46T IPv JGN2plus (NICT) JGN2plus 5 SA46T 3D OSPFv3(Open Shortest Path Fast version 3) BGP4+(Border Gateway Protocol 4 Plus) SA46T HDTV Live Stream (150Mbps) (1ヶ 月 間 ) sa46tokinawa HDTV Live Stream (30Mbps) (3 週 間 ) sa46tosaka sa46tsapporo 3D HDTV Live Stream (>140Mbps) (3 日 間 ) sa46t- OSPFv3 okayama sa46tthai HDTV data (3 日 間 ) Cisco UCS B5500 (Intel Xeon E GHz 6core 4socket 32GB 10GbE 2) CentOS5.5(Kernel ) 800Mbps IA 3 1 (1) 150Mbps HDTV Live Stream 1 (2) 30Mbps HDTV Live Stream 3 (3) 140Mbps 3D HDTV Live Stream 3 HTDV Plane Interop Tokyo SA46T plane Interop ShowNet (1) (2) (3) 3 2 plane 2 IPv4 5.4 [16] WIDE [17] 7 5: NICT JGN2plus 2 SA46T Best of Show Award [14, 15]
36 6 SA46T 6.1 SA46T 3 SA46T IETF Internet Draft Internet Draft IETF Proposed Standard 6.2 SA46T SA46T SA46T insmod sa46t.ko ifconfig sa46t0 up ifconfig sa46t0 add 2001:3e8:0:2646:0:1:a00:100/120 IPv /24 SA46T 2001:3e8:0:2646/64 IPv4 network plane ID 1 SA46T IETF Draft Standard 6.4 C IPv4 IPv6 IPv4 SA46T IPv6 IPv4 IPv6 IPv4 IPv6 IPv6 SA46T NAT IPv4- IPv6 VPN(Virtual Private Network) IPv4-IPv6 IPv4 SA46T SA46T IETF JGN2plus WIDE
37 NetPC Interop Tokyo ShowNet NOC SA46T ( ) [1] S. Deering, R. Hinden Internet Protocol, Version 6 (IPv6) Specification RFC1883, December 1995 [2] R. Gillogan, E. Nordmark Transition Mechanisms for IPv6 Hosts and Routers RFC1933, April 1996 [3] IPv6, 2001 [4] A. Conta, S. Deering Generic Packet Tunneling in IPv6 Specification RFC2473, December 1998 [5] W. Sumpson IP in IP Tunneling RFC1853 October 1995 [6] G.Tsirtsis, P. Srisuresh Network Address Translation - Protocol Translation (NAT-PT) RFC2766, February 2000 [7] M. Bagnulo, P. Matthews, I. van Beijnum Stateful NAT64: Network Address and Protocol Translation from IPv6 clients to IPv4 Servers RFC6146, April 2011 [11] N. Matsuhira Applicability of Stateless Automatic IPv4 over IPv6 Encapsulation / Decapsulation Technology (SA46T) draft-matsuhirasa46t-applicability-04.txt Internet Draft July, 2012 [12] N. Matsuhira Motivation for developing Stateless Automatic IPv4 over IPv6 Encapsulation / Decapsulation Technology (SA46T) draft-matsuhira-sa46t-motivation-02.txt Internet Draft July, 2012 [13] N. Matsuhira SA46T Multicast Support draft-matsuhira-sa46t-mcast-01.txt Internet Draft March, 2012 [14] Interop Tokyo 2011 NICT NEWS, , No NICT-News/1106/03.html [15] Interop Tokyo 2011 Best of Show Award com/jp/news/2011/06/9-1.html [16] [17] IPv6 IPv4 JANOG30 meeting/janog30/program/v64.html [8] S. Bradner The Internet Standard Process Revison 3 RFC2016 October 1996 [9] N. Matsuhira Stateless Automatic IPv4 over IPv6 Excapsulation / Decapsulation Technology: Specification draft-matsuhira-sa46t-spec- 05.txt Internet-Draft July, 2012 [10] N. Matsuhira Stateless Automatic IPv4 over IPv6 Excapsulation / Decapsulation Technology: Global SA46T Address Format draft-matsuhira-sa46t-gaddr-05.txt Internet- Draft July, 2012
SA46T:IPv4 IPv6 IPv4 APNIC RIR IPv4 IPv4 IPv4 IPv6 only IPv4 SA46T SA46T 2 (1) IPv4 IPv6 (2) IPv6 IPv4 4.3 IPv4 IPv6 LAN SA46T SA46T SA46T IPv6 IPv4 I
SA46T:IPv4 IPv6 IPv4 APNIC RIR IPv4 IPv4 IPv4 IPv6 only IPv4 SA46T SA46T 2 (1) IPv4 IPv6 (2) IPv6 IPv4 4.3 IPv4 IPv6 LAN SA46T SA46T SA46T IPv6 IPv4 IPv4-IPv6 IPv4 SA46T: Encapsulation Technology which
1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2
LAN IPv6 IPv6 WG IPv6 OS SWG () 1 1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2 IPv6 PCOSIPv6 Windows VISTA OSv6 MacOS X Linux *BSD Solaris etc PC RS RA DAD IPv6 DHCPv6 DNS AAAA PMTUD?
IPv4aaSを実現する技術の紹介
: ( ) : (IIJ) : 2003 4 ( ) IPv6 IIJ SEIL DS-Lite JANOG Softwire wg / Interop Tokyo 2013 IIJ SEIL MAP-E 2 IPv4aaS 3 4 IPv4aaS 5 IPv4 1990 IPv4 IPv4 32 IPv4 2 = 42 = IP IPv6 6 IPv6 1998 IPv6 (RFC2460) ICMP6,
Dual Stack Virtual Network Dual Stack Network RS DC Real Network 一般端末 GN NTM 端末 C NTM 端末 B IPv4 Private Network IPv4 Global Network NTM 端末 A NTM 端末 B
root Android IPv4/ 1 1 2 1 NAT Network Address Translation IPv4 NTMobile Network Traversal with Mobility NTMobile Android 4.0 VPN API VpnService root VpnService IPv4 IPv4 VpnService NTMobile root IPv4/
IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2
IP 2010 10 1 1 IP (IP ) 2 IP IP 2.1 IP (IP ) 1 IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2 4 1,2 4.1 (Protocol) IP:Internet Protocol) 4.2 internet The Internet (internet)
untitled
NTT TOP A WAN WAN VRRP NIC OSPF VRRP STP 1. IPv6 IPv6 2. 3. IPv6 1. IPv4 NAT IPv6 1. 2. (IPv4 ) NAT? Unique Local IPv6 Unicast Address /8 /48 /64 /128 7 1 40 16 64 ULA Global ID Interface ID Type Subnet
2011 NTT Information Sharing Platform Laboratories
NGN IPv6 multi-homing uplink load balancing 2 3 4 uplink uplink prefix domain A domain A prefix prefix prefix = longest match domain A domain A DNS Server domain A domain B 5 uplink uplink prefix domain
ict2-.key
IP TCP TCP/IP 1) TCP 2) TCPIP 3) IPLAN 4) IP パケット TCP パケット Ethernet パケット 発信元 送信先 ヘッダ 列番号 ポート番号 TCP パケットのデータ IP パケットのデータ 本当に送りたいデータ データ IP ヘッダデータ部ヘッダデータ部ヘッダデータ部 Ethernet パケット Ethernet パケット Ethernet パケット
Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2
MAP Tutorial @ 1 Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2 IPv4 over IPv6 IPv6 network IPv4 service Internet Service ProviderISP IPv4 service
IPv6 トラブルシューティング ホームネットワーク／SOHO編
IPv6 SOHO NTT fujisaki@nttv6.com 2010 NTT Information Sharing Platform Laboratories IPv6 IPv6 IPv6 IPv4 IPv6 IPv4/IPv6 MTU IPv6 2 2010 NTT Information Sharing Platform Laboratories IPv6 SOHO (NTT /) SOHO
tcp/ip.key
IP TCP IP ヘッダデータ部ヘッダデータ部ヘッダデータ部 Ethernet パケット Ethernet パケット Ethernet パケット IP(1) 0 8 16 24 31 () Version IHL () Time To Live () Identification () Type of Service ) Flags Protocol () Source Address IP) Destination
wide93.dvi
5 161 1 1.1 DDT WG DDT WG 1. \DDT" 2. DDT WG DDT WG 1.2 x ( IP) y ( X.25) x y \x overy" x y 1.1 IP X.25 IP IP IPX Appletalk OSI IP \encapsulation" \encapsulation header" \decapsulation" 163 164 1993 WIDE
template.dvi
XXXII 76 IETF SIGGRAPH ASIA2009 W I D E P R O J E C T 32 76 IETF SIGGRAPH ASIA2009 1 IETF76 IETF 7 IETF IETF 1.1 IETF IETF Internet Engineering Task Force ISOC Internet Society ISOC IETF WG IETF Primary
IP IPv4-IPv6
IPv6 Mobility IETF 2006 6 9 14:00-15:30 Interop Tokyo 2006 IIJ Nautilus6 IP IPv4-IPv6 L2 L3 Mobile IPv6 HIP L3.5 Shim6(?) L4 SCTP IPv6 Mobile IPv6/NEMO BS IETF RFC3775 - Mobile IPv6 RFC3963 - NEMO Basic
IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来
SEIL : IPv6 1 SEIL 2011 IPv6 SEIL IPv6 SEIL 4rd 2 SEIL 3 SEIL (1/3) SEIL IIJ SEIL 2001/6 IPv6 SEIL/X1 SEIL/X2 50,000 SEIL/x86 1998/8 SEIL SEIL/neu 128 SEIL/neu T1 SEIL/neu 2FE SEIL/neu ATM SEIL/Turbo SEIL/neu
DNSを「きちんと」設定しよう
DNS WIDE Project DNS DAY - Internet Week 2002 BIND DNS 2 DNS DNS(Domain Name System) named(bind), tinydns(djbdns), MicrosoftDNS(Windows), etc DNS 4 2 (1) www.example.jp IP 10.100.200.1 10.20.30.40 ftp.example.jp
untitled
IPv4 /IPv6 ShowNet2010 IPv4 ShowNet IPv4 1990 IPv6 2008 IPv4 IPv6 IPv6 1990 2008 IPv6 IPv6 IPv4 IPv6 IPv6 IPv4 IPv4 Q1. v6 Q2. Q1. v6 A1. IPv6 v6 IPv4 IPv4 ISP IPv6 Web IPv4 ISP NAT 5 x ISP NAT IPv6 201x
DNS DNS(Domain Name System) named(bind), tinydns(djbdns), MicrosoftDNS(Windows), etc 3 2 (1) ( ) IP IP DNS 4
DNS minmin@jprs.co.jp DNS DAY Internet Week 2003 ( ) 2 DNS DNS(Domain Name System) named(bind), tinydns(djbdns), MicrosoftDNS(Windows), etc 3 2 (1) ( ) www.example.jp IP IP 10.20.30.40 DNS 4 PC /etc/resolv.conf
IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG
IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG 2011 9 30 1 1 2 IPv6 IPv4 1 3 DNS 3 4 DNS ( IPv6 uninstall ) 6 5 (6to4, Teredo) 8 6 10 7 ( ) 11 8 IPv6 (IPv6 ) IPv6 13 9 IPv6 14 10 DNS 15 11 : 18 12 19 13 : MTA 20 14 :
今からはじめるIPv6 ～IPv6標準化最新動向編～
IPv6 IPv6 InternetWeek2010 Copyright 2010 Yoshiaki Kitaguchi, All rights reserved. IPv6! IPv6! IETF InternetWeek2010 Copyright 2010 Yoshiaki Kitaguchi, All rights reserved. 2 IPv6 InternetWeek2010 Copyright
設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応
Network Equipment 設定例集 Rev.8.03, Rev.9.00, Rev.10.01 対応 2 3 4 5 6 7 8 help > help show command > show command console character administrator pp disable disconnect 9 pp enable save Password: login timer
untitled
FLASHWAVE 2040 M1 2005 FLASHWAVE 2040 M1 AC AC AC FG () AC AC AC AC - i - FLASHWAVE 2040 M1 AC AC AC AC AC AC100V(50Hz/60Hz) AC - ii - FLASHWAVE 2040 M1 AC AC - iii - FLASHWAVE 2040 M1 VCCI This equipment
Teradici Corporation #101-4621 Canada Way, Burnaby, BC V5G 4X8 Canada p +1 604 451 5800 f +1 604 451 5818 www.teradici.com Teradici Corporation Teradi
PCoIP TER0806003 TER0806003 Issue 2 0 Teradici Corporation #101-4621 Canada Way, Burnaby, BC V5G 4X8 Canada p +1 604 451 5800 f +1 604 451 5818 www.teradici.com Teradici Corporation Teradici Teradici Teradici
BSD Unix IPv6 WIDE Project / ( ) All rights reserved. Copyright(c)2006 WIDE Project 1
BSD Unix IPv6 WIDE Project / ( ) All rights reserved. Copyright(c)2006 WIDE Project 1 Abstract DNS AAAA Query A/AAAA Query DNS All rights reserved. Copyright(c)2006 WIDE Project 2 AAAA Query
TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2
![TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2](/thumbs/91/105050540.jpg "TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2")
Japan Registry Service Co., Ltd. JPRS matuura@jprs.co.jp Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.1 TCP IP DNS Windows Internet Week 2002 [2002/12/17] Japan Registry Service
untitled
WANJet 1: one-arm F5 Networks Japan K.K. 1 WANJet WANJet https://:10000 F5 Networks Japan K.K. 2 2: WANJet F5 Networks Japan K.K. 3 vs. F5 Networks Japan K.K. 4 3: WANJet F5 Networks
LAN
LAN 2003 6 4 LAN Hotel LAN LAN IEEE802.11a IEEE802.11b 802.11b 11Mbps Copyright (c) 2003 NPO Page 3 FREESPOT FREESPOT HOTSPOT NTT ( ) MZONE ( )NTT Mobile ( ) Yahoo! BB ( ) MapFanWeb http://www.mapfan.com/musen/
橡sirahasi.PDF
Internet Week 2000 T5 IPsec VPN 2000/12/18 1 Virtual Private Network 2 IPsec 3 IPsec VPN 4 IPsec VPN 2 1 Virtual Private Network 3 Ethernet, WAN PPTP(PPP) IPSec SSL/TLS SOCKS V5 SSH, SSL-Telnet, PET PGP,
IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG
IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG 2011 11 24 1 1 2 IPv6 IPv4 1 3 DNS 3 4 DNS ( IPv6 uninstall ) 6 5 (6to4, Teredo) 8 6 10 7 12 8 ( ) 14 9 IPv6 (IPv6 ) IPv6 15 10 IPv6 16 11 DNS 18 12 : 20 13 21 14 : MTA
IP IP DHCP..
NICE 2008 4 14 1 NICE 2 1.1.................... 2 2 3 2.1........................................ 3 2.2....................................... 5 2.3.................................... 6 2.4...................................
showNet2013.indd
h o w N e t NOC LAN& P O I N T AP ShowNet LAN WiFiAP AP ShowNet Q LAN LAN ShowNet WiFi WiFi AP 1000 1 LAN 1 1 Q LAN LAN ShowNet SSID Q 1ShowNet LAN ch S WiFi 1ch ch LAN ch ch LAN? 12 ShowNet MAGAZINE 2013
ヤマハ ルーター ファイアウォール機能～説明資料～
1 RT140i #1(PPP) RT105i RTA52i R (PP#) (LAN#) [NAT] R LAN LAN 2 #2() RT300i RTW65b RT140e RT105e (LAN2) R (LAN1) RTA55i R LAN LAN 3 #3(PPPoE) R (LAN#) (PP#) (PP#) LAN ISDN/ LAN 4 RT300i RT105 #4(VPN) R
AirMac ネットワーク for Windows
AirMac for Windows Windows XP Windows 2000 1 1 5 6 AirMac 6 7 AirMac Extreme AirMac Express 7 AirMac for Windows 7 AirMac Express 8 AirMac 9 AirTunes 9 AirMac Extreme 10 2 11 AirMac 11 AirMac 12 AirMac
NATディスクリプタ機能
NAT 1 NAT #1,#2 IP incoming/unconvertible/range IP ping/traceroute/ftp/cu-seeme NetMeeting 3.0 VPN PPTP 2 NAT (NAT NAT ) 3 (NAT) Revision 4 NAT (Rev.1 Rev.3 ) LAN LAN primary secondary TUNNEL VPN 3 NAT
Vol.54 No (June 2013) GSRAv2 1,a) 1,b) 1,c) 1,d) , IPsec-VPN SSL-VPN OpenVPN PacketiX VPN GSRA Group-based Secure Remote
GSRAv2 1,a) 1,b) 1,c) 1,d) 2012 9 21, 2013 3 1 IPsec-VPN SSL-VPN OpenVPN PacketiX VPN GSRA Group-based Secure Remote Access NAT GSRA GSRA NAT GSRAv2 GSRAv2 NAT VPN Proposal and Evaluation of GSRAv2 that
rzakg.ps
IBM Systems - iseries DHCP (Dynamic Host Configuration Protocol) 5 4 IBM Systems - iseries DHCP (Dynamic Host Configuration Protocol) 5 4 65 IBM i5/os ( 5722-SS1) 5 4 0 RISC CISC URL http://www.ibm.com/jp/manuals/main/mail.html
VNSTProductDes3.0-1_jp.pdf
Visual Nexus Secure Transport 2005/10/18 Visual Nexus http:// www.visualnexus.com/jp/support.htm Visual Nexus Secure Transport 2005/02/25 1 2005/10/18 Ver3.0-1 2005 10 18 108-0075 21119 2 Visual Nexus
Packet Tracer: 拡張 ACL の設定 : シナリオ 1 トポロジ アドレステーブル R1 デバイスインターフェイス IP アドレスサブネットマスクデフォルトゲートウェイ G0/ N/A G0/
トポロジ アドレステーブル R1 デバイスインターフェイス IP アドレスサブネットマスクデフォルトゲートウェイ G0/0 172.22.34.65 255.255.255.224 N/A G0/1 172.22.34.97 255.255.255.240 N/A G0/2 172.22.34.1 255.255.255.192 N/A Server NIC 172.22.34.62 255.255.255.192
SRT/RTX/RT設定例集
Network Equipment Rev.6.03, Rev.7.00, Rev.7.01 Rev.8.01, Rev.8.02, Rev.8.03 Rev.9.00, Rev.10.00, Rev.10.01 2 3 4 5 6 1 2 3 1 2 3 7 RTX1000 RTX1000 8 help > help show command > show command console character
AirMac ネットワーク構成の手引き
AirMac 1 1 5 6 AirMac 6 7 AirMac Extreme AirMac Express 7 AirMac 8 AirMac Express 8 AirMac 9 AirMac 10 AirTunes 10 AirMac Extreme AirMac Express 10 2 13 15 Mac OS X IP 16 Mac OS X AirMac 3 17 AirMac 17
28 NTMobile Java Proposal and Implementation of Java Wrapper for NTMobile ( : ) :
28 NTMobile Java Proposal and Implementation of Java Wrapper for NTMobile ( : 130441077) : 29 2 10 NTMobile Network Traversal with Mobility NTMobile Linux NTMobile C Java NTMobile Java Java JNA Java Native
untitled
IPv6 IPv4 I / 9 1 CIDR,, NAT IP IPv6 I / 9 2 I / 9 3 1 CIDR Classless Inter-Domain Routing RFC1519 IPv4 CIDR IPng (=IPv6) I / 9 4 Growth in BGP Route Table 90000 80000 Source: http//www.telstra.net/ ops/bgptable.html
Microsoft PowerPoint - ykashimu_dslite_JANOG26_rev
IPv6 時代の を考える ~DS-Lite 8 th July 2010 鹿志村康生 (Yasuo Kashimura) yasuo.kashimura@alcatel-lucent.com DS-Lite ( Dual stack Lite) draft-ietf-softwire-dual-stack-lite Dual-Stack Lite Broadband Deployments Following
ルータ（IPv6）掲示用池田.PDF
JEITA IPv6 - IPv6-1 1. 2. IPv6 3. 4. IPv6 5. IPv6 6. 7. 2 1 1. 2. IPv6 3. 4. IPv6 5. IPv6 6. 7. 3 (1) 4 2 (2) IP(Internet Protocol - - A A 5 (3) IPv6 AP AP TCP IP TCP IP 6 3 TCP/IP(v6) TELNET FTP TFTP
Katsuhito Asano Fujitsu LTD /Apr/2002 1
Katsuhito Asano Fujitsu LTD. 2002 24/Apr/2002 1 Sub-IP Area WG WG Sub-IP WG PWE3(Transport Area) L2TPEXT 2 Sub-IP Area Sub-IP Area MPLS 3 Sub-IP Area Sub-IP IP(Layer3) Media(Layer2) Layer2.5 Area The work
LAN LAN LAN LAN LAN LAN,, i
22 A secure wireless communication system using virtualization technologies 1115139 2011 3 4 LAN LAN LAN LAN LAN LAN,, i Abstract A secure wireless communication system using virtualization technologies
DNS DNS 2002/12/19 Internet Week 2002/DNS DAY 2
DNS 2002 12 19 2003 1 16 Internet Week 2002/DNS DAY ( ) (JPRS) DNS DNS 2002/12/19 Internet Week 2002/DNS DAY 2 DNS SOA SOA TTL $TTL NS MX CNAME 2002/12/19 Internet Week 2002/DNS DAY
17 Multiple video streams control for the synchronous delivery and playback 1085404 2006 3 10 Web IP 1 1 1 3,,, i Abstract Multiple video streams control for the synchronous delivery and playback Yoshiyuki
橡2-TrafficEngineering(revise).PDF
Traffic Engineering AsiaGlobalCrossing GlobalCrossing Japan Traffic Engineering(TE) ( RFC2702 Requirements for Traffic Engineering over MPLS) 1 MPLS/VPN MPLS/TE MPLS VPN Prefix base (TDP
Mac OS X Server QuickTime Streaming Server 5.0 の管理（バージョン 10.3 以降用）
Mac OS X Server QuickTime Streaming Server 5.0 Mac OS X Server 10.3 apple Apple Computer, Inc. 2003 Apple Computer, Inc. All rights reserved. QuickTime Streaming Server Apple Apple Computer, Inc. Apple
Microsoft PowerPoint - IW2011-D1_simamura [互換モード]
![Microsoft PowerPoint - IW2011-D1_simamura [互換モード]](/thumbs/102/152548995.jpg "Microsoft PowerPoint - IW2011-D1_simamura [互換モード]")
キャッシュ DNS サーバと フィルタリングの実例 2011/11/30 インターネットイニシアティブ島村充 simamura@iij.ad.jp 1 アジェンダ AAAAフィルタリング ブロッキング zone 上書き 式 RPZ 式 AAAA フィルタリング AAAA フィルタリング概要 2011/06/08 World IPv6 day 世界中の有志が 24 時間限定で Web サイトに AAAA
WebRTC P2P Web Proxy P2P Web Proxy WebRTC WebRTC Web, HTTP, WebRTC, P2P i
26 WebRTC The data distribution system using browser cache sharing and WebRTC 1150361 2015/02/27 WebRTC P2P Web Proxy P2P Web Proxy WebRTC WebRTC Web, HTTP, WebRTC, P2P i Abstract The data distribution
帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)
RTX1100 client server network service ( ) RTX3000 ( ) RTX1500 2 Sound Network Division, YAMAHA 3 Sound Network Division, YAMAHA 172.16.1.100/24 172.16.2.100/24 LAN2 LAN3 RTX1500 RTX1100 client 172.16.1.1/24
NAT-f SIP NAT 1 1, 2 1 IP SIP NAT NAT NAT NAT-f NAT-free protocol NAT-f SIP Session Initiation Protocol NAT-f SIP NAT Researches on NAT traversal for
NAT-f SIP NAT 1 1, 2 1 IP SIP NAT NAT NAT NAT-f NAT-free protocol NAT-f SIP Session Initiation Protocol NAT-f SIP NAT Researches on NAT traversal for SIP utilizing NAT-f Kenkichi Miura, 1 Hidekazu Suzuki
ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する
ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する 目次 概要前提条件要件使用するコンポーネント背景説明設定ネットワーク図設定 DN ビット確認トラブルシューティング Cisco サポートコミュニティ - 特集対話 概要 このドキュメントでは Open Shortest Path First (1 バージョン 3 (OSPFv3) " を プロバイダーエッジ (PE )
Microsoft PowerPoint ppt [互換モード]
![Microsoft PowerPoint ppt [互換モード]](/thumbs/102/155495451.jpg "Microsoft PowerPoint ppt [互換モード]")
第 5 回 IP 計算機ネットワーク IP Internet Protocol Layer 3 ネットワーク層 機能 アドレッシング (IP アドレス ) IP Reachable 到達可能 = インターネット L2ではローカルのみ通信可 ルーティング フラグメント IP パケット IP パケット IP ヘッダ ペイロード イーサネットヘッダ ペイロード FCS 4 14 1500 イーサネットペイロード
設定例集
REMOTE ROUTER 1999. 2. 2 YAMAHA NetWare Novell,Inc. INS 64 YAMAHA! M E M O 1 1 1.1 : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 1 1.2 : : : : : : : : : : : : : : : : : : : : :
2008, 2009 TOSHIBA TEC CORPORATION All rights reserved
2008, 2009 TOSHIBA TEC CORPORATION All rights reserved 1 2 3 1 2 ... 1 1... 8... 9... 18... 24... 25... 30... 31... 34... 37 E... 67 Bluetooth BIP... 68 2... 71... 73... 100 3 ... 132... 134... 136 E...
untitled
NTT 1 1.DHCPv6 2. 3.Web 4. 5. IPv6 IPv6 IP 2 DHCPv6 3 DHCPv6 DHCPv6 IPv6 stateless RA : statefull DHCPv6 : 4 DHCPv4 DHCPv4 DHCPv6 IPv4 DNS NTP, SIP, WINS MAC DHCPv6 IPv6 DNS NTP, SIP, WINS DUID DHCPv6
untitled
ICMP 0466-XX-1395 t04000aa@sfc.keio.ac.jp 133.113.215.10 (ipv4) 2001:200:0:8803::53 (ipv6) (FQDN: Fully Qualified Domain Name) ( www.keio.ac.jp 131.113.215.10 /MAC ID 00:11:24:79:8e:82 Port Port = = Port
tp2ps output file
IPv6 6bone Kazu@Mew.org IPv6 - IPsec - 6bone - IPv6 IETF IPng - http://playground.sun.com/pub/ipng/html/ipng-main.html - Bay Networks Cisco 3Com & - - WIDE INRIA - NRL UNH etc... IP - 1 1B B - C - CIDR
untitled
IETF / WIDE Project 1 (2008) IETF 1 WG WG Routing savi WG (INT) rtgwg (RTG) sidr WG (RTG) idr WG (RTG) grow WG (OPS) DNS dnsext WG (INT) dnsop WG (OPS) IPv6 v6ops WG (OPS) 6MAN WG (INT) ROUTING SAVI WG
T8_4-shirasaki.PDF
Internet Week 2006 2006 12 5 NTT c 2006 NTT Communications Corp. All rights reserved. Agenda IPv6 TIPS c 2006 NTT Communications Corp. All rights reserved. 2 1 c 2006 NTT Communications Corp. All rights
JANOG30 Meeting IPv6 時代の IPv4 を考える ~ 第二章 ~ 464XLAT 事前公開資料 2012 年 6 月 26 日 NEC アクセステクニカ株式会社開発本部商品開発部 川島正伸
JANOG30 Meeting IPv6 時代の IPv4 を考える ~ 第二章 ~ 464XLAT 事前公開資料 2012 年 6 月 26 日 NEC アクセステクニカ株式会社開発本部商品開発部 川島正伸 本資料は 464XLAT 技術に関する事前知識を得ていただくためのものであり 当日の発表では本資料の内容について説明を行いませんのであらかじめご了承願います 2001:db8::2 目次 464XLAT
IP.dvi
... 3... 3... 3... 4... 6 VLAN... 6... 6 DHCP... 7... 7... 9... 9... 10... 12 R... 15... 15... 15 ARP... 18... 18 ARP... 18 DNS... 20... 20 DHCP/BOOTP... 21... 21 DHCP... 22 UDP... 23... 23... 23... 26...
集中講義 インターネットテクノロジー 第5回
5 ichii@ms.u-tokyo.ac.jp 2002/5/31 2 IPv6 2002/5/31 3 IPv6 32 IP 2008 streamline QoS anycast anycast: IPv6 40 128 2002/5/31 4 IP ICANN Ad Hoc Group on Numbering and Addressing McFadden/Holmes Report of
はじめに xsp のルータにおいて設定を推奨するフィルタの項目について の IPv6 版 最低限 設定することが推奨されるフィルタ について まず議論したい 接続形態に変化はないので IPv6 対応をメインに IETF draft RIR でproposal 進行中のものについては今回の検討外とした
xsp のルータにおいて設定を 推奨するフィルタの項目について (IPv6 版 ) KDDI 石原 パワードコム向井 DTI 馬渡 はじめに xsp のルータにおいて設定を推奨するフィルタの項目について の IPv6 版 最低限 設定することが推奨されるフィルタ について まず議論したい 接続形態に変化はないので IPv6 対応をメインに IETF draft RIR でproposal 進行中のものについては今回の検討外としたい
untitled
2 1 Web 3 4 2 5 6 3 7 Internet = Inter Network 8 4 B B A B C A B C D D 9 A G D G F A B C D F D C D E F E F G H 10 5 11 Internet = Inter Network PC 12 6 1986 NSFNET 1995 1991 World Wide Web 1995 Windows95
untitled
Peers Working Together to Battle Attacks to the Internet JANOG17 20 Jan 2006 Matsuzaki Yoshinobu Tomoya Yoshida Taka Mizuguchi NSP-SEC/NSE-SEC-JP Agenda
Motivation 3 Motivation 4 (Availability) Keep High Availability Providing Reliable Service (New service, function) Provide new Services, with new func
VPLS daisuke.koshiro@tm.softbank.co.jp 1 Agenda Motivation VPLS VPLS VPLS 2 Motivation 3 Motivation 4 (Availability) Keep High Availability Providing Reliable Service (New service, function) Provide new
IPv6における
Fumio Teraoka Masahiro Ishiyama Mitsunobu Kunishi Atsushi Shionozaki LIN6: A Solution to Mobility and Multi-Homing in IPv6 Internet Draft 2001 8 16 IPv6 00J075 LIN6 LIN6 Location Independent Networking
2 PC [1], [2], [3] 2.1 OS 2.1 ifconfig 2.1 lo ifconfig -a 2.1 enp1s0, enx0090cce7c734, lo 3 enp1s0 enx0090cce7c734 PC 2.1 (eth0, eth1) PC 14
![2 PC [1], [2], [3] 2.1 OS 2.1 ifconfig 2.1 lo ifconfig -a 2.1 enp1s0, enx0090cce7c734, lo 3 enp1s0 enx0090cce7c734 PC 2.1 (eth0, eth1) PC 14](/thumbs/95/125754068.jpg "2 PC [1], [2], [3] 2.1 OS 2.1 ifconfig 2.1 lo ifconfig -a 2.1 enp1s0, enx0090cce7c734, lo 3 enp1s0 enx0090cce7c734 PC 2.1 (eth0, eth1) PC 14")
2 PC [1], [2], [3] 2.1 OS 2.1 ifconfig 2.1 lo ifconfig -a 2.1 enp1s0, enx0090cce7c734, lo 3 enp1s0 enx0090cce7c734 PC 2.1 (eth0, eth1) PC 14 $ ifconfig lo Link encap: inet :127.0.0.1 :255.0.0.0 inet6 :
AC3DGmst.ps
IBM Access Connections 3.3x : 2004 11 2 27K6962 URL http://www.ibm.com/jp/manuals/main/mail.html IBM http://www.ibm.com/jp/manuals/ (URL ) IBM Access Connections Deployment Guide Version 3.3x 1 2004.11
IPSJ SIG Technical Report Vol.2015-DPS-163 No.4 Vol.2015-MBL-75 No /5/28 IEEE Android 1,a) 1,b) 2 1 IP NTMobile Network Traversal with Mo
IEEE 802.21 Android 1,a) 1,b) 2 1 IP NTMobile Network Traversal with MobilityNTMobile NTMobile NTMobile IEEE 802.21 IEEE 802.21 IEEE 802.21 NTMobile 1. TCP/IP IP IP Mobile IPv4 [1] Mobile IPv6 [2] Mobile
ITAOI2003第三屆離島資訊與應用研討會論文範例
2003 6 kung@mail.npust.edu.tw, b8956018@mail.npust.edu.tw, m9056011@mail.npust.edu.tw (Internet) and build up cache proxy servers. In this paper, we (Multi-media) design and development four proxy servers
Si-R30取扱説明書
6 6 WWW 6 65 67 67 68 ISDN 69 ISDN 75 80 ISDN 84 89 93 94 94 IP 95 96 98 TEL 99 99 100 100 101 1 1.. CHECK/B1/B/LAN HUB CHECK 3. Windows 95/98/Me IP MAC IP 1. -. winipcfg.exe Windows NT Windows 000 ipconfig.exe
本資料について
本資料について 本資料は下記の論文を基にして作成されたものです. 文章の内容の正確さは保障できないため, 正確な知識を求める方は原文を参照して下さい. 著者 :Shiang-Ming Huang,Quincy Wu,Yi-Bing Lin 論文名 :Tunneling IPv6 through NAT with Teredo Mechanism 前半 :Teredo 概要, 後半 :Linux に実装した評価から,
$ ifconfig lo Link encap: inet : : inet6 : ::1/128 : UP LOOPBACK RUNNING MTU:65536 :1 RX :8 :0 :0 :0 :0 TX :8 :0 :0 :0 :0 (Collision
2 (1) (2)PC [1], [2], [3] 2.1 OS ifconfig OS 2.1 ifconfig ( ) ifconfig -a 2.1 PC PC enp1s0, enx0090cce7c734, lo 3 PC 2.1 13 $ ifconfig lo Link encap: inet :127.0.0.1 :255.0.0.0 inet6 : ::1/128 : UP LOOPBACK
BGP ( ) BGP4 community community community community July 3, 1998 JANOG2: What is BGP Community? 2
BGP Community 1998/7/3 JANOG#2 in KDD (yahagi@itjit.ad.jp) July 3, 1998 JANOG2: What is BGP Community? 1 BGP ( ) BGP4 community community community community July 3, 1998 JANOG2: What is BGP Community?
e164.arpa DNSSEC Version JPRS JPRS e164.arpa DNSSEC DNSSEC DNS DNSSEC (DNSSEC ) DNSSEC DNSSEC DNS ( ) % # (root)
1.2.0.0.1.8.e164.arpa DNSSEC Version 1.0 2006 3 7 JPRS JPRS 1.2.0.0.1.8.e164.arpa DNSSEC DNSSEC DNS DNSSEC (DNSSEC ) DNSSEC DNSSEC DNS ( ) % # (root) BIND DNS 1. DNSSEC DNSSEC DNS DNS DNS - 1 - DNS DNS
第１回 ネットワークとは
第 6 回 IP 計算機ネットワーク ルーティング IP パケットの宛先に応じて次の転送先インターフェースを決定 D:192.168.30.5 パケット 192.168.10.0/24 fe0 192.168.20.0/24 fe1 fe3 fe2 192.168.30.0/24 ルーティングテーブル 192.168.40.0/24 192.168.10.0 direct fe0 192.168.20.0
total.dvi
VII W I D E P R O J E C T MPLS-IX MPLS-IX MPLS 1 MPLS AYAME IX IX LDP/RSVP-TE/CR- [121] 1999 Sub- LDP IP MPLS IX LSP LSP MPLS ebgp[165] LSP ( 2002 1.1 1.2) MPLS-IX MPLS IPv6 6PE IX () MPLS-IX MPLS IX
untitled
IPv6 2.0 2010 7 29 IPv4/IPv6 WG IPv6 SWG 0.9 2009 5 22 1.0 2009 6 22 1 2.0 2010 7 29 2 1... 1 1.1...1 1.2...4 1.3...5 1.4...6 1.4.1...6 1.4.2...7 1.4.3...8 [ ]... 13 1.4.4... 15 2...17 2.1 IPv6... 17 2.1.1...
SRX License
SRX ライセンスキー投入手順 株式会社日立ソリューションズネットワークビジネス部セキュリティグループ リビジョン 4.0 初版 2010/05/30 最新版 2012/12/27 Hitachi Solutions, Ltd. 2010-2012. All rights reserved. SRX ライセンスキー投入手順 Contents 1. ライセンスキーの自動インポート ( インターネット接続必須
atama.dvi
1 1 1 2 1.1..................................... 2 1.2 WWW....................................... 3 1.3......................................... 3 1.4................................... 3 1.5..............................
total-all-nt.dvi
XI W I D E P R O J E C T 1 WIDE Reliable Multicast 1.1 TV 1 1 TCP WIDE JGN/JB SOI (DV) Reliable Multicast (RM) US Reliable Multicast IETF RMT-WG PGM Digital Fountain FEC Tornado Code Ruby Code 1.2 WIDE
tutorial.dvi
m-sato@yoko.nel.co.jp 1 (rough) OSI, ITU-T? ATM-Forum? DAVIC? 2 Internet Architecture Boad (IAB) IETF Engineering Steering Group (IESG) Internet PCA egistration Authority (IPA) Internet Assigned Number
アライドテレシス ディストリビューション・スイッチ AT-x600シリーズで実現するMicrosoft® NAP
Microsoft NAP 主な目的 検疫ネットワークを構築したい 802.1X ユーザー認証をシングルサインオンで行ないたい 概要 Microsoft NAP はActive Directory 環境下での利用を前提としています しかし Active Directory のドメイン認証と IEEE 802.1X 認証 ( および NAP の検疫 ) は同期していません したがって 802.1X 認証の前にドメイン認証が行なわれた場合
SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou
NAT NETWORK ADDRESS TRANSLATION SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Group (ScreenOS ) 2 Copyright
LR DEVICE Version 1.1 706434 / 01 04 / 2017 1................................................ 3 1.1............................................... 3 2................................................ 3
template.dvi
XXVI W I D E P R O J E C T 26 26 1 WIDE 2010 1 WIDE WIDE Cloud 2010 2 3 4 5 6 NAT64 7 2 2010 7 2 WIDE 2.1 WIDE WIDE WIDE WIDE 50 2.2 WIDE 13:00 14:45 IaaS 15:00 16:45 WIDE StarBED 17:00 19:00 2.3 193
http://www.jaist.ac.jp/~zin/papers/zin-IEICE-JB-IA200401.pdf
A new multi-homing architecture based on overlay network Satoshi UDA, Nobuo OGASHIWA, Kenichi NAGAMI, Kuniaki KONDO, Ikuo NAKAGAWA, Yoichi SHINODA, and Hiroshi ESAKI 1. 1 (ISP) School of Information Science,
JPRS JANOG13 1. JP DNS Update 2. ENUM (ETJP) 3. JP ( ) 3 1. JP DNS Update
JPRS Update 2004 1 30 JANOG13 Meeting root hints B.ROOT-SERVERS.NET IP : 2 2 JPRS Update @ JANOG13 1. JP DNS Update 2. ENUM (ETJP) 3. JP ( ) 3 1. JP DNS Update JP DNS Update 2003 8
Cisco® ASA シリーズルーター向けDigiCert® 統合ガイド
Cisco ASA DigiCert 2013 7 8 Cisco ASA VPN DigiCert : 2013 7 8 Copyright 2018 DigiCert, Inc. All rights reserved. DigiCert DigiCert DigiCert, Inc. Symantec Norton Symantec Corporation DigiCert, Inc. DigiCert,
worm hoihoi
true@sfc.wide.ad.jp / (IDS, Honeypot), Web / : Darknet AS65531 10.0.0.0/8 Prefix longest match next hop AS Internet Customer A 10.1.0.0/16 AS 65531 10.0.0.0/8 Customer B 10.2.0.0/16 ( ) The Team Cymru
Macintosh HD:Users:ks91:Documents:lect:nm2002s:nm2002s03.dvi
3 ks91@sfc.wide.ad.jp April 22, 2002 1 2 1. over IP ( : Voice over IP; IP Internet Protocol ) over IP??? : 2002/4/20 23:59 JST : http://www.soi.wide.ad.jp/report/ 3 32 11 (4/22 ) 4 () 3 2 1? 4 ...... A.C.
i
21 Fault-Toleranted Authentication Data Distribution Protocol for Autonomous Distributed Networks 1125153 2010 3 2 i Abstract Fault-Toleranted Authentication Data Distribution Protocol for Autonomous Distributed
DNS (BIND, djbdns) JPNIC・JPCERT/CC Security Seminar 2005
DNS 2005 10 6 JPNIC JPCERT/CC Security Seminar 2005 DNS Pharming BIND djbdns 2 DNS DNS (Domain Name System)? IP www.example.jp IP 172.16.37.65 http://www.example.jp/ - http://172.16.37.65/
１
e-mailsupport@aa.catv-yokohama.ne.jp WWW / Internet Explorer8 for Windows Internet Explorer7 for Windows Internet Explorer6.0 for Windows Safari 2.0.3 for Macintosh Internet Explorer5 for Macintosh Windows