template.dvi

Size: px
Start display at page:

Download "template.dvi"

Transcription

1 VI Linux IPv6/IPsec

2

3 IPv6/IPsec W I D E P R O J E C T 6 Linux IPv6/IPsec 1 USAGI USAGI Linux 2.1 IPv6 Mobility IPv WIDE USAGI 2003 HUT Go-Core USAGI Linux IPv6 Linux Mobile IPv6 IPv6 Linux 2.4 Mobile IPv6 MIPL IPv6 Linux TAHI Linux 2.6 USAGI Linux NEA OSS Award Mobile IPv6 Linux 2.4 MIPL Mobile Ipv6 [10, 78] MIPL2 TAHI MIPv Linux 2007 Linux MIPv6 USAGI 77 6 Linux

4 6 Linux IPv6/IPsec 2.1. W I D E P R O J E C T a n n u a l r e p o r t # # # 1 XFRM 1 XFRM 1 XFRM state support coa and HAO/RT2 new required CN HA MN XFRM state use source address hash new required CN HA MN XFRM bulk operation support new required HA MN find IPsec header place to insert it with HAO/RT2 new required (CN) HA MN XFRM state inbound for mip6 exthdrs new required (CN) HA MN update XFRM state last used timestamp fix optional CN decide a device by source address of IPv6 header new optional (HA) MN use mode as type even it was a flag new required CN HA MN use acquire even inbound for RO trigger new optional MN XFRM debug new optional Source address support for state id fix required CN HA MN non-fragment protocol support new required CN HA MN Sub policy support new required CN HA MN MIP6 1 HAO 1 HAO sending new required MN HAO + ah6 sending new required MN HAO receiving new required CN HA BE report new required CN HA TLV parser new optional CN HA MN RT2 1 RT2 sending new required CN HA RT2 receiving new required MN MH 1 MH handling new required CN HA MN MH sending new required CN HA MN MH receiving new required CN HA MN ICMP6 1 Swap HAO address before sending ICMP6 error new required CN HA MN Swap RT2 address before sending ICMP6 error new required MN Swap RT address with segment left field when new optional CN receiving ICMP6 error 5 1 mip6 debug new optional CN HA MN IPsec 1 MIGRATE 1 PF KEY MIGRATE new required HA MN MIGRATE extension new optional HA MN 2007 (All upper layer protocol support, multiple bundle) 2 Misc 1 SP selector ifindex new required HA MN IPsec + TCP fix required (CN) HA MN IPsec6 + RT sending fix required (CN) HA IPComp and generic tunnel fix required Inbound block policy fix required allow to match wild-card user id at policy selector fix optional Decapsulated IPsec tunnel causes redirect new optional HA neighbor 1 proxy 1 proxy entry carries flag new required HA don t do proxy forwarding when unicast ND fix required HA don t do proxy forwarding to link-local destination new required HA don t update neighbor cache when NA destined to fix required HA 2006 proxied entry 5 proxy NDP sysctl new optional HA fix ndisc flow init to use ifindex fix unknown (MN) fix fl6 merge options fix required CN HA RA 1 Use it as a default router in receiving RA fix required MN Use it as a prefix in receiving RA fix required MN address 1 flag 1 HoA flag new required MN never do DAD for HoA new required MN lifetime 1 change address lifetime from user-land new required MN prefix 1 add prefix info from user-land new required MN source 1 1 source address selection: USAGI arch new required MN 2006 address 2 1 source address selection: SUBTREE fix new required MN 2007 selection 3 HoA 1 source address selection: HoA support new required MN routing 1 multiple table 1 multiple table or rule for policy routing new required HA MN SUBTREE 1 SUBTREE fix for policy routing fix unknown HA MN removing netlink skb parms fix unknown anycast 1 anycast routing fix unknown HA ipv6 1 cmsg 1 ipv6 cmsg 2292 fix in receiving fix required MN more optimized inet6 skb parm fix optional ipv6 tunnel 1 ipv6 tunnel fix fix unknown HA MN NETFILTER 1 IPtables 1 MH match module new optional IPsec MIPv6 IPsec Migrate MIPv6 MIPv6 MH match module UMIP MIPL2 HUT Go-Core USAGI HUT Go-Core USAGI 78

5 IPv6/IPsec W I D E P R O J E C T Go-Core USAGI MIPL2 umip MIPL umip-0.3 umip-0.4umip-0.2 umip-0.4 IKEv2 RFC3776 [10] IPsec RFC4877 [32] umip-0.4 Correspondent Node CN Home Agent HA Mobile Node MN MN MN MAC Linux MIPv6 MIPv6 MIPv6 UMIP MIPL2 UMIP MIPL2 MIPL2.0.2 UMIP-0.3 UMIP-0.4 MIPL2.0.2 UMIP UMIP UMIP USAGI MIPv6 USAGI MIPv6 Linux USAGI Linux IPv6 IPv6 USAGI IPv4/IPv6 Connection Tracking iptables ip6tables ip6tables IPv4/IPv6 Connection Tracking Connection Tracking TCP UDP Linux 1 IPv4 NAT Linux IPv4 Connection Tracking ip conntrack USAGI IPv4/IPv6 Connection Tracking nf conntrack Linux USAGI nf conntrack IPv4 NAT nf conntrack API nf conntrack 79 6 Linux 6

6 6 Linux IPv6/IPsec W I D E P R O J E C T a n n u a l r e p o r t iptables ip6tables Linux IPv4 IPv6 iptables ip6tables ex.: TCP/UDP ex.: API iptables ip6tables API 1 iptables ip6tables iptables ip6tables ip6tables iptables ip6tables API iptables ip6tables 14 ip6tables USAGI Linux NAT Netfilter nf conntrack Linux iptables ip6tables iptables iptables ip6tables USAGI nf conntrack IPv4/IPv6 API 2.3 IPv6 Multicast Linux Linux IPv4 IPv6 Linux rc IPv6 IPv6 MLDv1 MLDv2 IPv4 Linux 2 Linux IPv6 Multicast Forwarding ( hoerdt/ dev/linux ipv6 mforwarding/) MRD6 ( projects/mrd6/) Linux IPv6 Multicast Forwarding Linux USAGI USAGI git Linux rc5 IPv4 BSD IPv6 MRD6 80

7 IPv6/IPsec W I D E P R O J E C T PACKET socket mcast-tools BSD IPv6 PIM-DM PIM-SM Linux debian Linux Linux USAGI USAGI MRD IPv6 Linux IPv6 Multicast Forwarding pim6sd for Linux mcast-tools IPv6 PIM 4 Linux IPv6 pim6sd for Linux ( u-strasbg.fr/ hoerdt/dev/pim6sd linux/) 2006 MRD6 ( XORP ( IPv6 mcast-tools ( Linux IPv6 Multicast Forwarding projects/mcast-tools/) pim6sd for Linux mcast-tools pim6sd for Linux Linux IPv6 IPv6 PIM-SSM Multicast Forwarding IPv6 Multicast Forwarding pim6sd BSD pim6sd USAGI Linux git MLDv2/PIM-SSM pim6sd pim6sd 2003 pim6sd MRD6 PIM IPV6 MROUTE IPV6 PIMSM V2 sysctl XORP proc filesystem PIM net.ipv6.conf.all.mc forwarding = 1 XORP pim6sd.conf IPv6 pim6sd Linux phyint eth1 mld version any; PIM-SM phyint eth2 mld version any; log all; phyint IPv6 PIM-SM MLD PIM-SSM [Linux PC (mcast sender)] [Linux PC (mcast receiver)] [Multicast Router (NEC)] [Multicast Router(Alaxala)] [Multicast Router (Linux)] Linux 6

8 6 Linux IPv6/IPsec W I D E P R O J E C T a n n u a l r e p o r t Multicast Interface Table Mif PhyIF Local-Address/Prefixlen Scope Flags 0 eth0 fe80::213:72ff:fe3b:c1fb/64 2 DR PIM QRY 2001:200:1b0:1000:213:72ff:fe3b:c1fb/64 0 Timers: PIM hello = 0:15, MLD query = 1:50 possible MLD version = eth1 fe80::213:72ff:fe3b:c1fc/64 3 DR QRY NO-NBR 2001:200:1b0:fffe::2/64 0 Timers: PIM hello = 0:15, MLD query = 1:50 possible MLD version = lo ::1/128 0 DISABLED Timers: PIM hello = 0:00, MLD query = 0:00 possible MLD version = 1 3 regist fe80::213:72ff:fe3b:c1fb/64 2 REGISTER Timers: PIM hello = 0:00, MLD query = 0:00 possible MLD version = 1 PIM Neighbor List Mif PhyIF Address Timer 0 eth0 fe80::2000: :200:1b0:1000::2000:1 MLD Querier List Mif PhyIF Address Timer Last 0 eth0 fe80::213:72ff:fe3b:c1fb s 1 eth1 fe80::213:72ff:fe3b:c1fc s Reported MLD Group Mif PhyIF Group(Group-Timer,MLD-ver(Filter-Mode,Compat-Timer))/Source(TimerID) 1 eth1 ff3e::4321:1234 (#0 (v2 IN #1024)) 2001:200:0:1c04:213:72ff:fe52:b05f (#19) Multicast Routing Table Source Group RP-addr Flags (S,G) :200:0:1c04:213:72ff:fe52:b05f ff3e::4321:1234 NULL CACHE SG Joined oifs:... Pruned oifs:... Leaves oifs:.l.. Asserted oifs:... Outgoing oifs:.o.. Incoming : I... Upstream nbr: fe80::2000:1 TIMERS: Entry=0 JP=60 RS=0 Assert=0 MIF (*,*,RP) Number of Groups: 1 Number of Cache MIRRORs: RP-Set Current BSR address: 2001:200:1b0:fffe::2 Prio: 0 Timeout: 25 RP-address(Upstream)/Group prefix Prio Hold Age 2001:200:1b0:fffe::2(myself) ff00::/ CallOut Timer Queue TimerID Expiry-Time[s] #20 5 # pim6stat pim6sd pim6stat pim6sd pim6stat /var/run/pim6sd.dump 2.1 IPv6 PIM-SSM ssmpingd/ssmping Multicast Router Linux pim6stat

9 IPv6/IPsec W I D E P R O J E C T 2.2 mcast receiver ff3e::4321:1234 join mcast sender 2001:200: 0:1c04:213:72ff:fe52:b05f mcast receiver 1 Linux 3 IPv ::1/128 0 ::/ ::/16 2 6to4 ::/96 3 IPv4 ::ffff:0:0/96 4 IPv4 fc00::/7 5 ULA RFC4193 Linux 2001::/32 6 Teredo RFC4380 Linux Linux IPv6 Multicast Forwarding mcast-tools Linux Linux IPv6 BSD IPv6 ff00::/8 next-hop :: ip6 mc input USAGI IPv6 netlink socket setsockopt API pim6sd API API 1 2 IPv4 IPv6 1 RFC3484 Default Address Selection for Internet Protocol version 6 IPv6 2 destination address selection source address selection Linux C glibc getaddrinfo(3) Linux RFC3484 RFC3484 RFC ipv6 addr type() glibc-2.5 /etc/gai.conf 83 6 Linux

10 6 Linux IPv6/IPsec W I D E P R O J E C T a n n u a l r e p o r t 2.3. ::1/128 0 ::/ ::/16 2 6to4 ::/96 3 IPv4 ::ffff:0:0 4 IPv4 fec0::/10 5 fc00::/7 6 ULA 2001::/32 7 Teredo 2.4. ::1/ ::/ ::/ to4 ::/96 20 IPv4 ::ffff:0:0/96 10 IPv Linux Linux RFC3484 [103] DHCP Linux RCU Read-Copy- Update Linux IPv4 IPv netlink(7) iproute Linux glibc /etc/gai.conf 3 reload yes glibc xffffffff 84

11 IPv6/IPsec W I D E P R O J E C T DHCPv6 [49] IPv6 Ready Logo Core Phase-2 Test Suite Linux KAME KAME sysctl(2) ioctl(2) ip6addrctl(8) getaddrinfo(3) RFC Solaris Solaris 15 ipaddrsel(1m) USAGI Linux IPv6 IPsec Mobile IPv6 USAGI Linux Linux USAGI TAHI Automatic Running System IPv6 Ready Logo Program IPv6 Ready Logo USAGI IPv6 Ready Logo Program IPv6 Ready Logo IPv6 Ready Logo Program IPv6 Ready Logo Program IPv6 Ready Logo Committee IPv6ready.org IPv6 Phase-1 Phase-2 Phase-2 IPv6 IPsec Mobile IPv6 USAGI IPv6 Ready Logo Program USAGI IPv6 Ready Logo Phase-2 Core Protocol Router IPsec Security Gateway IPv6 Ready Logo USAGI 2.4 [Phase-1, Host] 2004/09/13: s a-linux /03/17: sv6readyp linux24 [Phase-1, Router] 2004/09/13: s a-linux /03/17: sv6readyp linux [Phase-1, Host] 2004/02/26: s linux /09/13: s a-linux /03/17: USAGI Stable Kit Linux 6

12 6 Linux IPv6/IPsec W I D E P R O J E C T a n n u a l r e p o r t [Phase-1, Router] 2004/02/26: s linux /09/13: s a-linux /03/22: USAGI Stable Kit [Phase-1, Host] 2005/05/09: rc2 [Phase-1, Router] 2005/05/09: rc2 [Phase-2, Core, Host] 2006/05/30: [Phase-2, IPsec, End Node] 2006/06/30: [Phase-2, Core, Router] 2007/09/26: [Phase-2, IPsec, Security Gateway] 2007/10/04: IPv6 Ready Logo Core Phase-2 Test Suite TAHI org IPv6 Test Suite for IPv6 Ready Logo Phase-2 Core

13 IPv6/IPsec W I D E P R O J E C T FAIL FAIL FAIL FAIL type 0 routing header Stack H. Yoshifuji; The 6th North East Asia Open Source Software Promotion Forum, September, USAGI IPv6 Ready Logo Program Linux IPv6 Linux IPv6 USAGI to deliver the production quality IPv6 and IPsec protocol stack for the Linux system USAGI Yasuyuki Kozakai, Hideaki Yoshifuji, Hiroshi Esaki, Jun Murai, IPv6 Specific Issues to Track States of Network Flows, ACM SIGCOMM 2007 Workshop IPv6 07, Kyoto, Japan, August Linux IPv6 Stack Development H. Yoshifuji; Primera Cumbre Peruana de IPv6, Lima, Peru, May, IPv6 Standard Application Programming H. Yoshifuji; Primera Cumbre Peruana de IPv6, Lima, Peru, May, Research and Development of Linux IPv Linux

IP IPv4-IPv6

IP IPv4-IPv6 IPv6 Mobility IETF 2006 6 9 14:00-15:30 Interop Tokyo 2006 IIJ Nautilus6 IP IPv4-IPv6 L2 L3 Mobile IPv6 HIP L3.5 Shim6(?) L4 SCTP IPv6 Mobile IPv6/NEMO BS IETF RFC3775 - Mobile IPv6 RFC3963 - NEMO Basic

More information

untitled

untitled NTT TOP A WAN WAN VRRP NIC OSPF VRRP STP 1. IPv6 IPv6 2. 3. IPv6 1. IPv4 NAT IPv6 1. 2. (IPv4 ) NAT? Unique Local IPv6 Unicast Address /8 /48 /64 /128 7 1 40 16 64 ULA Global ID Interface ID Type Subnet

More information

2011 NTT Information Sharing Platform Laboratories

2011 NTT Information Sharing Platform Laboratories NGN IPv6 multi-homing uplink load balancing 2 3 4 uplink uplink prefix domain A domain A prefix prefix prefix = longest match domain A domain A DNS Server domain A domain B 5 uplink uplink prefix domain

More information

今からはじめるIPv6 ~IPv6標準化最新動向編~

今からはじめるIPv6 ~IPv6標準化最新動向編~ IPv6 IPv6 InternetWeek2010 Copyright 2010 Yoshiaki Kitaguchi, All rights reserved. IPv6! IPv6! IETF InternetWeek2010 Copyright 2010 Yoshiaki Kitaguchi, All rights reserved. 2 IPv6 InternetWeek2010 Copyright

More information

1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2

1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2 LAN IPv6 IPv6 WG IPv6 OS SWG () 1 1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2 IPv6 PCOSIPv6 Windows VISTA OSv6 MacOS X Linux *BSD Solaris etc PC RS RA DAD IPv6 DHCPv6 DNS AAAA PMTUD?

More information

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2 MAP Tutorial @ 1 Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2 IPv4 over IPv6 IPv6 network IPv4 service Internet Service ProviderISP IPv4 service

More information

(11) - CDN 2002.07.02 E-Mail: [email protected] n n n 1 ( ) (a) ( ) (b) IP (1) (S,G): S: G: IGMP Join/Leave D 224.0.0.0 239.255.255.255 IP (2) Shortest Path Tree Shared Tree Shortest Path

More information

tcp/ip.key

tcp/ip.key IP TCP IP ヘッダデータ部ヘッダデータ部ヘッダデータ部 Ethernet パケット Ethernet パケット Ethernet パケット IP(1) 0 8 16 24 31 () Version IHL () Time To Live () Identification () Type of Service ) Flags Protocol () Source Address IP) Destination

More information

SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou

SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou NAT NETWORK ADDRESS TRANSLATION SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Group (ScreenOS ) 2 Copyright

More information

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1 [email protected] All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1 All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 2 user IX IX IX All Rights Reserved. Copyright(c)1997

More information

MLDS.dvi

MLDS.dvi ... 2... 5... 5 ADD MLDSNOOPING VLAN.... 6 CREATE MLDSNOOPING VLAN... 8 DELETE MLDSNOOPING VLAN... 9 DISABLE MLDSNOOPING...... 11 ENABLE MLDSNOOPING...... 12 SET MLDSNOOPING TIMEOUT... 13 SET MLDSNOOPING

More information

CCIE IP Anycast RP Anycast RP Anycast RP Anycast RP PIM-SM RP RP PIM-SM RP RP RP PIM Register RP PIM-SM RP PIM-SM RP RP RP RP Auto RP/BSR RP RP RP RP

CCIE IP Anycast RP Anycast RP Anycast RP Anycast RP PIM-SM RP RP PIM-SM RP RP RP PIM Register RP PIM-SM RP PIM-SM RP RP RP RP Auto RP/BSR RP RP RP RP Anycast RP Anycast RP Anycast RP PIM-SM RP RP PIM-SM RP RP RP PIM Register RP PIM-SM RP PIM-SM RP RP RP RP Auto RP/BSR RP RP RP RP Auto RP/BSR RP RP Auto RP RP RP-Announce RP_ANNOUNCE_INTERVAL RP_ANNOUNCE_INTERVAL

More information

ict2-.key

ict2-.key IP TCP TCP/IP 1) TCP 2) TCPIP 3) IPLAN 4) IP パケット TCP パケット Ethernet パケット 発信元 送信先 ヘッダ 列番号 ポート番号 TCP パケットのデータ IP パケットのデータ 本当に送りたいデータ データ IP ヘッダデータ部ヘッダデータ部ヘッダデータ部 Ethernet パケット Ethernet パケット Ethernet パケット

More information

IPv4aaSを実現する技術の紹介

IPv4aaSを実現する技術の紹介 : ( ) : (IIJ) : 2003 4 ( ) IPv6 IIJ SEIL DS-Lite JANOG Softwire wg / Interop Tokyo 2013 IIJ SEIL MAP-E 2 IPv4aaS 3 4 IPv4aaS 5 IPv4 1990 IPv4 IPv4 32 IPv4 2 = 42 = IP IPv6 6 IPv6 1998 IPv6 (RFC2460) ICMP6,

More information

USAGI IPv6 神田充 USAGI/ 東芝研究開発センター

USAGI IPv6 神田充 USAGI/ 東芝研究開発センター USAGI IPv6 神田充 [email protected] USAGI/ 東芝研究開発センター Contents USAGI Project 紹介 Linux kernel IPv6 の歴史 USAGI Project の状況 適合試験 IP s e c 概略 Linux IPsec US AGI IP s e c USAGI Project 紹介 UniverSAl pla yground

More information

ヤマハ ルーター ファイアウォール機能~説明資料~

ヤマハ ルーター ファイアウォール機能~説明資料~ 1 RT140i #1(PPP) RT105i RTA52i R (PP#) (LAN#) [NAT] R LAN LAN 2 #2() RT300i RTW65b RT140e RT105e (LAN2) R (LAN1) RTA55i R LAN LAN 3 #3(PPPoE) R (LAN#) (PP#) (PP#) LAN ISDN/ LAN 4 RT300i RT105 #4(VPN) R

More information

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能) RTX1100 client server network service ( ) RTX3000 ( ) RTX1500 2 Sound Network Division, YAMAHA 3 Sound Network Division, YAMAHA 172.16.1.100/24 172.16.2.100/24 LAN2 LAN3 RTX1500 RTX1100 client 172.16.1.1/24

More information

ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する

ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する 目次 概要前提条件要件使用するコンポーネント背景説明設定ネットワーク図設定 DN ビット確認トラブルシューティング Cisco サポートコミュニティ - 特集対話 概要 このドキュメントでは Open Shortest Path First (1 バージョン 3 (OSPFv3) " を プロバイダーエッジ (PE )

More information

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応 Network Equipment 設定例集 Rev.8.03, Rev.9.00, Rev.10.01 対応 2 3 4 5 6 7 8 help > help show command > show command console character administrator pp disable disconnect 9 pp enable save Password: login timer

More information

MVPN VPN VPN MVPN P2MP TE & BGP

MVPN VPN VPN MVPN P2MP TE & BGP P2MP TE VPN NTT ([email protected]) MVPN VPN VPN MVPN P2MP TE & BGP MVPN draft-ietf-l3vpn-2547bis-mcast-00 CNTL plane PE-CE *PIM-SM *PIM-SSM *PIM-Bidir *PIM-DM FWD *IP(Mcast) plane Autodiscovery

More information

total-all-nt.dvi

total-all-nt.dvi XI W I D E P R O J E C T 1 WIDE Reliable Multicast 1.1 TV 1 1 TCP WIDE JGN/JB SOI (DV) Reliable Multicast (RM) US Reliable Multicast IETF RMT-WG PGM Digital Fountain FEC Tornado Code Ruby Code 1.2 WIDE

More information

ヤマハ ルーター ファイアウォール機能~説明資料~

ヤマハ ルーター ファイアウォール機能~説明資料~ 1 2 3 4 LAN ISDN/ NAT (LAN#) (PP#) (TUNNEL#) + R 5 ----------< >---------- ----------< >---------- 6 IPv6 VPN ping IPsec PPTP ICMP (1) TCP (6) UDP (17) IPv6 (41) AH (51) ESP (50) GRE (47) IPv4

More information

28 NTMobile Java Proposal and Implementation of Java Wrapper for NTMobile ( : ) :

28 NTMobile Java Proposal and Implementation of Java Wrapper for NTMobile ( : ) : 28 NTMobile Java Proposal and Implementation of Java Wrapper for NTMobile ( : 130441077) : 29 2 10 NTMobile Network Traversal with Mobility NTMobile Linux NTMobile C Java NTMobile Java Java JNA Java Native

More information

2017 5G 時代の モバイルユーザープレーン 再検討 松嶋聡 ソフトバンク

2017 5G 時代の モバイルユーザープレーン 再検討 松嶋聡 ソフトバンク 2017 5G 時代の モバイルユーザープレーン 再検討 松嶋聡 ソフトバンク 現 のモバイルネットワーク ( 携帯網 ) の例 RAN, EPC, SGi に分割されて構築 管理 端末セッションごとのトンネル接続, 移動管理 伝送路からみたパスの最適化が困難 Data-plane Role Access Node (enode-b) L2 Anchor Node (Serving Gateway)

More information

PIM-SSMマルチキャストネットワーク

PIM-SSMマルチキャストネットワーク 主な目的 シンプル且つセキュアなを構築したい 帯域を有効活用したネットワークを構築したい 概要 IP カメラや動画コンテンツ VoD( ビデオオンデマンド ) など一つのコンテンツを複数クライアントで共有するマルチキャストの利用が一般的となり それに伴いマルチキャストルーティングの導入も増加しています 多く利用されている PIM-SM では ランデブーポイント (RP) の決定や配信経路の設計など設計が複雑になりがちですが

More information

リング型IPカメラ監視ソリューション(マルチキャスト編)

リング型IPカメラ監視ソリューション(マルチキャスト編) CentreCOM x900 IP IP ( ) IP surveillance Solution 01 SNMP Manager Syslog Server NTP Server x900-24xt_2 Link Aggregation x900-24xt_1 FS926M-PS_1 FS926M-PS_2 x600-24ts EPSR (Ethernet Protected Switched Ring)

More information

untitled

untitled IPv6 IPv4 I / 9 1 CIDR,, NAT IP IPv6 I / 9 2 I / 9 3 1 CIDR Classless Inter-Domain Routing RFC1519 IPv4 CIDR IPng (=IPv6) I / 9 4 Growth in BGP Route Table 90000 80000 Source: http//www.telstra.net/ ops/bgptable.html

More information

Introduction Purpose This training course demonstrates the use of the High-performance Embedded Workshop (HEW), a key tool for developing software for

Introduction Purpose This training course demonstrates the use of the High-performance Embedded Workshop (HEW), a key tool for developing software for Introduction Purpose This training course demonstrates the use of the High-performance Embedded Workshop (HEW), a key tool for developing software for embedded systems that use microcontrollers (MCUs)

More information

total.dvi

total.dvi VII W I D E P R O J E C T MPLS-IX MPLS-IX MPLS 1 MPLS AYAME IX IX LDP/RSVP-TE/CR- [121] 1999 Sub- LDP IP MPLS IX LSP LSP MPLS ebgp[165] LSP ( 2002 1.1 1.2) MPLS-IX MPLS IPv6 6PE IX () MPLS-IX MPLS IX

More information

IP.dvi

IP.dvi ... 3... 3... 3... 4... 6 VLAN... 6... 6 DHCP... 7... 7... 9... 9... 10... 12 R... 15... 15... 15 ARP... 18... 18 ARP... 18 DNS... 20... 20 DHCP/BOOTP... 21... 21 DHCP... 22 UDP... 23... 23... 23... 26...

More information

IPSEC-VPN IPsec(Security Architecture for Internet Protocol) IP SA(Security Association, ) SA IKE IKE 1 1 ISAKMP SA( ) IKE 2 2 IPSec SA( 1 ) IPs

IPSEC-VPN IPsec(Security Architecture for Internet Protocol) IP SA(Security Association, ) SA IKE IKE 1 1 ISAKMP SA( ) IKE 2 2 IPSec SA( 1 ) IPs IPSEC VPN IPSEC-VPN IPsec(Security Architecture for Internet Protocol) IP SA(Security Association, ) SA IKE 1 2 2 IKE 1 1 ISAKMP SA( ) IKE 2 2 IPSec SA( 1 ) IPsec SA IKE Initiator Responder IPsec-VPN ISAKMP

More information

スライド タイトルなし

スライド タイトルなし IP version 6 1 CIDR NAT Peer-to-Peer / End-to-End & IP IPv6 2 3 Internet end-to-end model End system End system Internet Routers in the middle 4 What happen if.. nd system End system? Internet? Internet

More information

SRX IDP Full IDP Stateful Inspection 8 Detection mechanisms including Stateful Signatures and Protocol Anomalies Reassemble, normalize, eliminate ambi

SRX IDP Full IDP Stateful Inspection 8 Detection mechanisms including Stateful Signatures and Protocol Anomalies Reassemble, normalize, eliminate ambi IDP (INTRUSION DETECTION AND PREVENTION) SRX IDP Full IDP Stateful Inspection 8 Detection mechanisms including Stateful Signatures and Protocol Anomalies Reassemble, normalize, eliminate ambiguity Track

More information

IP Multicast Topic 2006/07/13 JANOG18 吉村浩 ( )

IP Multicast Topic 2006/07/13 JANOG18 吉村浩 ( ) IP Multicast Topic 2006/07/13 JANOG18 吉村浩 [email protected] ( [email protected] ) Disclaimer and Agenda 本日は既存の Multicast 技術をベースに話しをさせて頂きます PIM Sparse Mode と PIM SSM の違い IP Multicast 冗長化の実情 IGMPv3/MLDv2

More information

IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG

IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG 2011 9 30 1 1 2 IPv6 IPv4 1 3 DNS 3 4 DNS ( IPv6 uninstall ) 6 5 (6to4, Teredo) 8 6 10 7 ( ) 11 8 IPv6 (IPv6 ) IPv6 13 9 IPv6 14 10 DNS 15 11 : 18 12 19 13 : MTA 20 14 :

More information

IPv6 トラブルシューティング ホームネットワーク/SOHO編

IPv6 トラブルシューティング ホームネットワーク/SOHO編 IPv6 SOHO NTT [email protected] 2010 NTT Information Sharing Platform Laboratories IPv6 IPv6 IPv6 IPv4 IPv6 IPv4/IPv6 MTU IPv6 2 2010 NTT Information Sharing Platform Laboratories IPv6 SOHO (NTT /) SOHO

More information

00.目次_ope

00.目次_ope 816XL ii iii iv iv User Entry 1 3 v vi vii viii 1 1 C: >VTTERM 1- 1 1-3 1 1-4 1 1-5 1 1-6 1 1-7 1 1-8 1 1-9 1 1-10 C: >VTN 1 Host Name: 1-11 1 01 1-1 0.0.0.0 1 1-13 1 1-14 - -3 Port status and configuration

More information

untitled

untitled 1 2 4/12 4/19 (1) 3 4 5 4/26 5/10 5/17 (2) 4 6 7 8 9 10 11 12 5/24 5/31 6/7 6/14 6/21 6/28 7/5 (1) (2) 13 7/12 Unicast Broadcast Multicast 1 1 Video/Audio broadcast (TV/adio etc.) Video Conferencing DVTS

More information

PowerPoint プレゼンテーション

PowerPoint プレゼンテーション ADD-PATH の 基本的な設定例と検討課題 インターネットマルチフィード ( 株 ) 技術部 Interop tokyo 2013 NOC 金井瑛 1 Interop Tokyo 2013 と ADD-PATH 今年度の Interop Tokyo 2013 では ADD-PATH の相互接続検証を行いました MX80, MX480, CRS-X, ASR9006

More information

LSM-L3-24設定ガイド(初版)

LSM-L3-24設定ガイド(初版) 4 2 IP 3 2 MAC VLAN 1 MAC MAC 4-1 2 4-2 VLAN classification VLAN Learning Filtering Forwarding VLAN classification learning filtering forwarding VLAN Classification 2 : - VLAN - VLAN ID Learning VLAN classification

More information

Juniper Networks Corporate PowerPoint Template

Juniper Networks Corporate PowerPoint Template Juniper SRX 日本語マニュアル 39. Virtual Router の CLI 設定 はじめに Virtual Router の CLI 設定方法について説明します 手順内容は SRX300 JUNOS 15.1X49-D140 にて確認を実施しております 2018 年 8 月 以下の設定を行う場合のコマンド例となります 2 つの Virtual Router を作成 (blue-vr

More information

IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来

IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来 SEIL : IPv6 1 SEIL 2011 IPv6 SEIL IPv6 SEIL 4rd 2 SEIL 3 SEIL (1/3) SEIL IIJ SEIL 2001/6 IPv6 SEIL/X1 SEIL/X2 50,000 SEIL/x86 1998/8 SEIL SEIL/neu 128 SEIL/neu T1 SEIL/neu 2FE SEIL/neu ATM SEIL/Turbo SEIL/neu

More information

IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG

IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG 2011 11 24 1 1 2 IPv6 IPv4 1 3 DNS 3 4 DNS ( IPv6 uninstall ) 6 5 (6to4, Teredo) 8 6 10 7 12 8 ( ) 14 9 IPv6 (IPv6 ) IPv6 15 10 IPv6 16 11 DNS 18 12 : 20 13 21 14 : MTA

More information

TM-T88VI 詳細取扱説明書

TM-T88VI 詳細取扱説明書 M00109801 Rev. B 2 3 4 5 6 7 8 9 10 Bluetooth 11 12 Bluetooth 13 14 1 15 16 Bluetooth Bluetooth 1 17 1 2 3 4 10 9 8 7 12 5 6 11 18 1 19 1 3 4 2 5 6 7 20 1 21 22 1 23 24 1 25 SimpleAP Start SSID : EPSON_Printer

More information

ScreenOS 5.0 ScreenOS 5.0 Deep Inspection VLAN NetScreen-25/-50/-204/-208 HA NetScreen-25 HA Lite NetScreen-25 NetScreen-50) ALG(Application Layer Gat

ScreenOS 5.0 ScreenOS 5.0 Deep Inspection VLAN NetScreen-25/-50/-204/-208 HA NetScreen-25 HA Lite NetScreen-25 NetScreen-50) ALG(Application Layer Gat ScreenOS 5.0 1 2 ScreenOS 5.0 ScreenOS 5.0 Deep Inspection VLAN NetScreen-25/-50/-204/-208 HA NetScreen-25 HA Lite NetScreen-25 NetScreen-50) ALG(Application Layer Gateway NAT Destination NetScreen-Security

More information

I TCP 1/2 1

I TCP 1/2 1 I TCP 1/2 1 Transport layer: a birds-eye view Hosts maintain state for each transport endpoint Routers don t maintain perhost state H R R R R H Transport IP IP IP IP IP Copyright(C)2011 Youki Kadobayashi.

More information

untitled

untitled IPv4 /IPv6 ShowNet2010 IPv4 ShowNet IPv4 1990 IPv6 2008 IPv4 IPv6 IPv6 1990 2008 IPv6 IPv6 IPv4 IPv6 IPv6 IPv4 IPv4 Q1. v6 Q2. Q1. v6 A1. IPv6 v6 IPv4 IPv4 ISP IPv6 Web IPv4 ISP NAT 5 x ISP NAT IPv6 201x

More information

DocuWide 2051/2051MF 補足説明書

DocuWide 2051/2051MF 補足説明書 ëêèõ . 2 3 4 5 6 7 8 9 0 2 3 4 [PLOTTER CONFIGURATION] [DocuWide 2050/205 Version 2.2.0] [SERIAL] BAUD_RATE =9600 DATA_BIT =7 STOP_BIT = PARITY =EVEN HANDSHAKE =XON/XOFF EOP_TIMEOUT_VALUE =0 OUTPUT RESPONSE

More information

MR1000 Webリファレンス

MR1000 Webリファレンス Web V21 LAN 2005 1 Microsoft Corporation OMRON Corporation 2004 All Rights Reserved. 2 Web V21... 2... 5... 5... 5 1... 6 2 ISDN... 7 2.1... 7 2.2... 8 3... 10 3.1... 10 3.2... 10 4 PPPoE... 12 4.1...

More information

LAN

LAN LAN 2003 6 4 LAN Hotel LAN LAN IEEE802.11a IEEE802.11b 802.11b 11Mbps Copyright (c) 2003 NPO Page 3 FREESPOT FREESPOT HOTSPOT NTT ( ) MZONE ( )NTT Mobile ( ) Yahoo! BB ( ) MapFanWeb http://www.mapfan.com/musen/

More information

集中講義 インターネットテクノロジー 第5回

集中講義 インターネットテクノロジー 第5回 5 [email protected] 2002/5/31 2 IPv6 2002/5/31 3 IPv6 32 IP 2008 streamline QoS anycast anycast: IPv6 40 128 2002/5/31 4 IP ICANN Ad Hoc Group on Numbering and Addressing McFadden/Holmes Report of

More information

untitled

untitled IPv6 2.0 2010 7 29 IPv4/IPv6 WG IPv6 SWG 0.9 2009 5 22 1.0 2009 6 22 1 2.0 2010 7 29 2 1... 1 1.1...1 1.2...4 1.3...5 1.4...6 1.4.1...6 1.4.2...7 1.4.3...8 [ ]... 13 1.4.4... 15 2...17 2.1 IPv6... 17 2.1.1...

More information

2008, 2009 TOSHIBA TEC CORPORATION All rights reserved

2008, 2009 TOSHIBA TEC CORPORATION All rights reserved 2008, 2009 TOSHIBA TEC CORPORATION All rights reserved 1 2 3 1 2 ... 1 1... 8... 9... 18... 24... 25... 30... 31... 34... 37 E... 67 Bluetooth BIP... 68 2... 71... 73... 100 3 ... 132... 134... 136 E...

More information

untitled

untitled MLD Snooping... 2... 5... 5 DISABLE MLDSNOOPING...... 6 ENABLE MLDSNOOPING...... 7 SET IPV6 MLDSNOOPING...... 8 SHOW IPV6 MLDSNOOPING.... 9 SHOW MLDSNOOPING... 11 CentreCOM 9424T 2.11 1 MLD Snooping MLD

More information

Microsoft PowerPoint - Amazon VPCとのVPN接続.pptx

Microsoft PowerPoint - Amazon VPCとのVPN接続.pptx Amazon VPC との VPN 接続マニュアル 2016 年 7 12 NECプラットフォームズ株式会社 Amazon VPC との VPN 接続 UNIVERGE WA シリーズ を使 して Amazon VPC(Amazon Virtual Private Cloud) と IPsec-VPN で接続する際の設定例を紹介します Amazon VPC を利 することにより Amazon AWS(Amazon

More information

JANOG14-コンバージェンスを重視したMPLSの美味しい使い方

JANOG14-コンバージェンスを重視したMPLSの美味しい使い方 MPLS JANOG14 BGP MPLS 2 : : 1988 2 2003 7 : 3 ( ( )100%) : 633 (2003 ) : : 1,029 (2004 7 1 ) 3 So-net 250 4 30!? 10 Non IP IP 5 IGP? ECMP ECMP?? 6 BGP MPLS 7 MPLS ATM IP ATM

More information

untitled

untitled IGMP Snooping... 2... 5... 5 ADD IGMPSNOOPING MCGROUP... 6 DELETE IGMPSNOOPING...... 8 DISABLE IGMPSNOOPING...... 9 ENABLE IGMPSNOOPING...... 10 SET IGMPSNOOPING... 11 SET IGMPSNOOPING MCGROUP... 13 SHOW

More information

Win XP SP3 Japanese Ed. NCP IPSec client Hub L3 SW SRX100 Policy base VPN fe-0/0/0 vlan.0 Win 2003 SVR /

Win XP SP3 Japanese Ed. NCP IPSec client Hub L3 SW SRX100 Policy base VPN fe-0/0/0 vlan.0 Win 2003 SVR / SRX dial-up VPN (NCP ) Win XP SP3 Japanese Ed. NCP IPSec client Hub L3 SW SRX100 Policy base VPN fe-0/0/0 vlan.0 Win 2003 SVR.216 172.27.24.0/24.254.254.1.1.100 100.100.100.0/24 192.168.1.0/24 Test devices

More information

クライアントOSのIPv6実装事情

クライアントOSのIPv6実装事情 クライアント OS の IPv6 実装事情 ネットワークプラットフォーム研究開発グループ 北口善明 2009/06/12 Copyright 2009 Y. Kitaguchi & Intec NetCore, Inc. All Rights Reserved. 目次 クラゕント OS の IPv6 対応状況 IPv6 対応 OS における挙動整理 DNSリゾルバの実装 ゕドレス選択機構の実装 自動トンネリングの実装

More information

Microsoft PowerPoint - ykashimu_dslite_JANOG26_rev

Microsoft PowerPoint - ykashimu_dslite_JANOG26_rev IPv6 時代の を考える ~DS-Lite 8 th July 2010 鹿志村康生 (Yasuo Kashimura) [email protected] DS-Lite ( Dual stack Lite) draft-ietf-softwire-dual-stack-lite Dual-Stack Lite Broadband Deployments Following

More information

install

install SCore SCore 5.0 2001.03.19 [email protected] SCore Backbone LAN Ethernet EEPRO100 Myrinet-2000 Fibre 02/03/20 2 1 NIC (Network Interface Card) NIC 100Mbps Ethernet EEPRO100 Tulip 3C905B Network Trunking

More information

IGMPS.dvi

IGMPS.dvi ... 2... 5... 5 ADD IGMPSNOOPING... 6 DELETE IGMPSNOOPING...... 8 DISABLE IGMPSNOOPING...... 9 ENABLE IGMPSNOOPING...... 10 SET IGMPSNOOPING TIMEOUT... 11 SHOW IGMPSNOOPING... 12 CentreCOM FS900M 1.6.0

More information

橡sirahasi.PDF

橡sirahasi.PDF Internet Week 2000 T5 IPsec VPN 2000/12/18 1 Virtual Private Network 2 IPsec 3 IPsec VPN 4 IPsec VPN 2 1 Virtual Private Network 3 Ethernet, WAN PPTP(PPP) IPSec SSL/TLS SOCKS V5 SSH, SSL-Telnet, PET PGP,

More information

RTX830 取扱説明書

RTX830 取扱説明書 RTX830 JA 1 2 3 4 5 6 7 8 9 10 11 external-memory performance-test go 12 13 show config 14 15 16 17 18 19 20 save 21 22 23 24 25 26 27 save RTX830 BootROM Ver. 1.00 Copyright (c) 2017 Yamaha Corporation.

More information

第1回 ネットワークとは

第1回 ネットワークとは 第 6 回 IP 計算機ネットワーク ルーティング IP パケットの宛先に応じて次の転送先インターフェースを決定 D:192.168.30.5 パケット 192.168.10.0/24 fe0 192.168.20.0/24 fe1 fe3 fe2 192.168.30.0/24 ルーティングテーブル 192.168.40.0/24 192.168.10.0 direct fe0 192.168.20.0

More information

橡C14.PDF

橡C14.PDF BGP4 (( ) InternetWeek 98 ( ) Internet Week98 1998 Toshiya Asaba, Japan Network Information Center 1. 2. BGP 2.1. 2.2. ISP 2.3. IX - 2.4. 2.5. 3. BGP4 3.1. BGP4 3.2. EBGP IBGP 3.3. BGP AS 3.4. AS AS 3.5.

More information

ScreenOS Copyright (C) 2005 NOX Co., Ltd. All Rights Reserved. Version1.00

ScreenOS Copyright (C) 2005 NOX Co., Ltd. All Rights Reserved. Version1.00 ScreenOS5.1 17 2 Version1.00 Web Filtering Anti Virus Deep Inspection VoIP H.323 SIP ALG NAT ALG(Application Layer Gateway Multicast QOS DNS PPPoE VPN NetScreen ScreenOS 5.1 ScreenOS 5.1 Web Filtering

More information

Linux @ S9 @ CPU #0 CPU #1 FIB Table Neighbor Table 198.51.100.0/24 fe540072d56f 203.0.113.0/24 fe54003c1fb2 TX Ring TX Ring TX Buf. Dsc. RX Buf. Dsc. TX Buf. Dsc. RX Buf. Dsc. Packet NIC #0 NIC #1 CPU

More information

SRT/RTX/RT設定例集

SRT/RTX/RT設定例集 Network Equipment Rev.6.03, Rev.7.00, Rev.7.01 Rev.8.01, Rev.8.02, Rev.8.03 Rev.9.00, Rev.10.00, Rev.10.01 2 3 4 5 6 1 2 3 1 2 3 7 RTX1000 RTX1000 8 help > help show command > show command console character

More information

アライドテレシス コア・スイッチ AT-x900 シリーズ とディストリビューションスイッチ AT-x600 シリーズ で実現するOSPFv3/OSPFv2 & RIP/RIPng デュアルスタック ・ ネットワーク

アライドテレシス コア・スイッチ AT-x900 シリーズ とディストリビューションスイッチ AT-x600 シリーズ で実現するOSPFv3/OSPFv2 & RIP/RIPng デュアルスタック ・ ネットワーク 主な目的 既存 IPv4 環境に IPv6 環境を追加したい 段階的に IPv6 環境に移行したい OSPF などのダイナミックルーティングで IPv6 環境を構築したい 概要 昨今 急速に発展する新興国においてインターネット等の IT ネットワークインフラの普及整備が加速し IPv4 アドレスの枯渇が現実的な問題となっております このような状況から 今後 IPv6 の普及が加速され IPv6 を使用した

More information

CSIS (No.324) {kazuya-o, okuda, 2012 IP (LBM) IPv6 GALMA LBM GALMA GALMA 1 (LBM:Location Based Multicast) LBM IP IP GALMA (Geograp

CSIS (No.324) {kazuya-o, okuda, 2012 IP (LBM) IPv6 GALMA LBM GALMA GALMA 1 (LBM:Location Based Multicast) LBM IP IP GALMA (Geograp CSIS (No.324) {kazuya-o, okuda, suguru}@is.naist.jp 2012 IP (LBM) IPv6 GALMA LBM GALMA GALMA 1 (LBM:Location Based Multicast) LBM IP IP GALMA (Geographically Aggregatable Location-based Multicast Address)

More information