IPv4/IPv6 전환기술(터널링) 보안설정 방안

Abstract

인터넷의 발전으로 인해 네트워크 장치의 증가와 네트워크 서비스의 증가로 인해 IP 주소의 수요가 급증하게 되었다. IP 주소는 다양한 네트워크 및 서비스를 결합하는 중요한 수단으로 발전하여 그 중요성은 점점 커져가고 있으며, 인터넷 주소체계인 IPv4의 한계 및 주소 고갈이라는 문제점으로 인해 IPv6 인터넷 주소체계의 도입이 필요하게 되었다. 기존 인터넷망은 IPv4 네트워크를 기반으로 구성되어 있으며 IPv4 주소체계와 IPv6 주소체계가 다르므로 IPv4/IPv6 전환기술이 개발 되었고, 전세계적으로 복잡하고 광범위하게 연결되어 있는 IPv4 네트워크를 단시일에 IPv6 네트워크로의 전환이 불가능하여 오랜 기간 동안 IPv4 네트워크와 IPv6 네트워크가 상호 공존 할 것이다. IPv6가 도입되어 IPv4 네트워크와 신규로 구성된 IPv6 네트워크의 공존으로 인해 보안 측면에서 보안 위협이 발생할 수 있다. 이러한 보안 취약성들은 IPv4/IPv6 네트워크가 공존하며, IPv4/IPv6 전환기술들이 존재하고 동작하는 동안 IPv4/IPv6 연동 환경에서의 보안 위협은 발생할 것이다. IPv4 네트워크로부터 IPv6 네트워크로의 안전한 전환 및 상호 공존 과정에서 보안 정책 기반으로 보안성 강화 측면이 중요한 사항이다. IPv4/IPv6 전환기술(터널링)에서 발생하는 보안 위협으로부터 보안성 강화를 위해 라우터에서 필요한 보안 설정 기법에 대해서 기술 하였다.| The demand for IP address has been increased rapidly due to the increase of network devices and network services with the development of the Internet. IP address has been developed as an important means that combines various networks and services so that its importance has been increasing as well and the introduction of the IPv6 address scheme has been required as a result of the exhaustion and limit of the IPv4 address scheme. A current Internet network is configured based on the IPv4 network. The IPv4/IPv6 transition technology has been developed since the IPv4 address scheme is different from the IPv6 address scheme and the IPv4 and the IPv6 network will coexist for a long time because it is not easy to transfer the IPv4 network, which is connected all over the world complexly and extensively, to the IPv6 network in a short time. There would be the security threat caused by the coexistence of the IPv4 network and new IPv6 network. These security vulnerabilities will remain as long as the IPv4 and the IPv6 networks coexist and the IPv4/IPv6 transition technology is operated. The security threat will keep occurring in the IPv4/IPv6 operation environment. Therefore, it is important to improve the security threat for the secure transition and the security enhancement in the process of mutual coexistence under security policy. It is expected that the security vulnerability will be solved if the IPv6 network introduction is completed and the IPv4 network is phased out. Make a security configuration plan required on an IPv4/IPv6 transition technology (tunneling) router for the security enhancement to prevent the Security Threat.; The demand for IP address has been increased rapidly due to the increase of network devices and network services with the development of the Internet. IP address has been developed as an important means that combines various networks and services so that its importance has been increasing as well and the introduction of the IPv6 address scheme has been required as a result of the exhaustion and limit of the IPv4 address scheme. A current Internet network is configured based on the IPv4 network. The IPv4/IPv6 transition technology has been developed since the IPv4 address scheme is different from the IPv6 address scheme and the IPv4 and the IPv6 network will coexist for a long time because it is not easy to transfer the IPv4 network, which is connected all over the world complexly and extensively, to the IPv6 network in a short time. There would be the security threat caused by the coexistence of the IPv4 network and new IPv6 network. These security vulnerabilities will remain as long as the IPv4 and the IPv6 networks coexist and the IPv4/IPv6 transition technology is operated. The security threat will keep occurring in the IPv4/IPv6 operation environment. Therefore, it is important to improve the security threat for the secure transition and the security enhancement in the process of mutual coexistence under security policy. It is expected that the security vulnerability will be solved if the IPv6 network introduction is completed and the IPv4 network is phased out. Make a security configuration plan required on an IPv4/IPv6 transition technology (tunneling) router for the security enhancement to prevent the Security Threat.