89
Advanced Issues Advanced Issues- Wireless VoIP, Wireless VoIP, IPv6 and Security IPv6 and Security 陳懷恩 博士 助理教授兼計算機中心資訊網路組組長 國立宜蘭大學資工所 Email: [email protected] TEL: 03-9357400 # 340

Microsoft PowerPoint - Course-08 [相容模式]

Embed Size (px)

Citation preview

  • 1. Advanced Issues- Wireless VoIP, Issues- IPv6 and Security Email: [email protected]: 03-9357400 # 340

2. Outline Wireless VoIP IPv6 Solutions and Transition SIP Security 2 3. Wireless VoIP 4. Introduction to wireless VoIP Voice over Wireless LAN expands the capability ofp p y Wireless LANs Wireless VoIP is a natural extension of VolP Wireliess VoIP is the added feature which will enable users to make phone calls using this mobile internet access4 5. Introduction to wireless VoIP VoIP and Wireless LAN VoIP SIP, RTP H 323 SIP RTP, H.323 Wireless LAN WiFi : 802.11a/b/g802 11 /b/ WiMAX : 802.16 802.20 802 20 5 6. Introduction to wireless VoIP Wireless VoIP Protocol stack 6 7. Why wireless VoIP? y Low cost Free Charge of ISM Band ISM band : free (2.4-2.4835 GHz) 3G band : NTD 10 Billion Inexpensive network deployment Reuse of existing network, and easy to setup Low cost of Access Point VS. High cost of Base Station7 8. Why wireless VoIP? y Low complexityp y Centralized architecture in cellular networkPBX contains most intelligence of the networkHard to maintain the proprietary system Decentralized architecture in VoIP networkIntelligence are implemented in User AgentEasy for maintenance8 9. Why wireless VoIP? y Low transmission powerp Small coverage of the AP, small transmission power needed GSM: 500mW ~ 2W WLAN: < 100mW Easy for providing value-added service Voice and data service is integrated into VoIP Flexibility of SIP protocol9 10. Why wireless VoIP? y Market trend Voice over WLAN market will reach $507 million (end user revenue) by 2007 (In Stat/MDR) Voice over WLAN handset will grow by more than 89 p percent annually until 2007 when there will be more thany 653,000 (On world)10 11. Requirements of wireless VoIP qPerformance Voice quality must be as well as wired networkDelay >100 ms is sensible by humanLow latency : v6)Translate IPv4 to IPv6 An IPv6 PacketAn IPv6 packet ( Reply) Request IPv4 address Reply with the IPv4 addressTranslation(v6->v4)Translate IPv6 into IPv450An IPv4 packet 51. Address Translation Example: Recipient pp Dual Stack Host6IPv4Extensionapp. Address TranslatorName MapperIPv6ResolverReceive a data from host6An IPv6 packet Request IPv4 address from table TranslationReply with the IPv4 address (v6->v4)Translate IPv6 to IPv4 headerAn IPv4 packetReply an IPv4 data to host6 An IPv4 reply packet Request IPv6 address from table TranslationReply with the IPv6 address (v4->v6) Translate v4 packet to v6An IPv6 packet 51 52. SIPv6 TranslatorThrough manual modification and Socket-layer Translator, we have gy , IPv6 SIP UAs (SIPv6 UAs SIPv6 UAs). However, only using SIPv6 UAs, which can utilize rich IPv6 addresses, does NOT solve the IP address shortage problem in VoIP deployment, because a SIPv6 UA cannot communicate with a SIPv4 UA (e.g. CISCO7960).( g ) To solve this problem, we develop a SIPv6 Translator based on the architecture proposed in IETF RFC 2766 (p p(Network Address Translation and Protocol Translation, NAT-PT). The SIPv6 Translator is a gateway between IPv6 and IPv4 networks. The SIPv6 Translator can translate not only the IP headers but also the application-layer headers (e.g. SIP and SDP).52 53. NAT- NAT-PT with DNS-ALG DNS- DNS13ffe:3600:1::2 DNS2 DNS140.113.87.1 DNS DNS-ALGIPv6 NetworkIPv4 Network Translator UA1The NAT-PT translator configurationNAT-UA2 3ffe:3600:1::3 Address Pool: 140.113.87.51-60140.113.87.2 ua1.ipv6.nctu.edu.tw NAT-PT Prefix: 3ffe:3600:2::/96 NAT PT ua2.ipv4.nctu.edu.twua2 ipv4 nctu edu tw 53 54. NAT-NAT-PT operations with DNS-ALG DNS-(IPv6 IPv4)IPv6 Network IPv4 Network DNS-ALGDNS ALG UA1DNS1 + DNS2 UA2 NAT-PT DNS Query (AAAA) DNS Query (AAAA) 1.1 1.21.313DNS Query (A)1.4DNS Response (A) 1.5 1.81.71.6 DNS Response (AAAA) DNS Response (AAAA)1.9 ICMPv6 Message (MAC Address Query) 1.10 ICMPv6 Message (MAC Address Response) 1.11IPv6 Packet1.12ARP Message (MAC Address Query)1.13ARP Message (MAC Address Response)1.14 IPv4 Packet 54 55. NAT- NAT-PT operations with DNS-ALGDNS- (IPv4 IPv6) IPv6 Network IPv4 NetworkDNS-ALG UA1 DNS1 + DNS2UA2NAT-PT DNS Query (A)2.2DNS Query (A)2.1 2.42.3DNS Query (AAAA)2.5 DNS Response (AAAA)p ()2.6 2.72.8 DNS Response (A)DNS Response (A)ARP Message (MAC Address Query) 2.9 29 ARP Message (MAC Address Response) 2.10 2.12 ICMPv6 Message (MAC Address Query) IPv4 Packet 2.11 2 112.13 ICMPv6 Message (MAC Address Response)2.14IPv6 Packet55 56. System Architecture of SIPv6 Translatory IPv6-IPv4 SIITAddress ComponentMapping ALG: Application Level Gateway DNS: Domain Name Service SIP: Session Initiation Protocol NIC: Network Interface Controller SIIT: Simple IP and ICMP Translation; see IETF RFC 2765 NAT-PT: Network Address Translation and Protocol Translation; see IETF RFC 2766 56 57. IPv4/IPv6 Translation for Registration g UA3 SIP-ALG SIPv4 Server 3.1 REGISTER sip.ipv4.nctu.edu.tw Via: SIP/2.0/UDP [3ffe:3600:1::4]:50603.2 REGISTER sip.ipv4.nctu.edu.tw To: &