SlideShare a Scribd company logo
NAT64 SERVER
Network Address
Translation using
vertex-5
D.P.G.S.R Fernando
I.U. Liyanage
J.R. Kodagoda
R.S.A De Silva
Overview
Why Vertex-5
 We     had three choices for FPGA boards:
    Virtex-5,Vertex-2 & Altera

 Embedded      tri-mode Ethernet MAC
    wrapper is available only for Virtex-5 and
    Vertex-6

    Because of which we used Virtex-5 board
    for our project.
Procedure
 Implemented the Tri-mode
 Ethernet MAC Wrapper

   Implemented the IPv4 to
   IPv6 conversion algorithm

      Implemented the IPv6 to
      IPv4 conversion algorithm

         Combine two algorithms
         to get the NAT64 module
Tri Mode Ethernet MAC
wrapper
IPv4 to IPv6 Conversion
IPv6 to IPv4 Conversion
Header Mapping
IPv4                          IPv6
Ether Type: 0x0800            Ether Type:0x86dd
DSCP, ECN                     Traffic class
Header Length, Total Length   Payload Length
Protocol                      Next Header
Time to Live                  Hop Limit
Ipv4 address                  Ipv6 address
Static NAT Table
                          IPv4              IPv6
 1                        200.2.2.2         2000:2000:2000:2000:2000:2000:2000:2
                                            000
 2                        200.3.3.3         3000:3000:3000:3000:3000:3000:3000:3
                                            000
 3                        200.4.4.4         4000:4000:4000:4000:4000:4000:4000:4
                                            000
 4                        200.5.5.5         5000:5000:5000:5000:5000:5000:5000:5
                                            000
 Default Source           200.6.6.6         6000:6000:6000:6000:6000:6000:6000:6
 Address                                    000
 Broadcast Address        200.255.255.255   ff02::1
 Multicast(to all host)   224.0.0.1         ff02::1
 Multicast (to all        224.0.0.2         ff02::2
 routers)
 unspecified              0.0.0.0           ::
 Loopback address         127.0.0.1         ::1
Hardware Debug Tools
 ChipScope  Pro Analyzer
We use ChipScope Pro Inserter flow, to
capture signals in ChipScope Pro
Nat64 server
 Wireshark
packet sniffer software application
Issues
 Virtex-5 board only has one Ethernet port
  though out NAT64 server needs at least
  two ports.
 Virtex-5 device designs of Tri-mode
  Ethernet MAC require a Verilog LRM-IEEE
  1364-2005 encryption-compliant simulator
     ModelSim v6.6d
     Cadence Incisive Enterprise Simulator (IES) 10.2
     Synopsys VCS and VCS MX 2010.06)
 Butany of those simulators are not freely
  available

More Related Content

PDF
Eincop Netwax Lab: Site 2 Site VPN with Routing Protocols
PDF
Eincop Netwax Lab: Access List ii
PDF
Eincop Netwax Lab: EIGRP iii
PDF
Nxll10 v lan and trunking
PDF
Eincop Netwax Lab: Redistribution
PDF
Nxll23 i pv6
PDF
Nxll26 bgp ii
PDF
Nxll25 hsrp with failover
Eincop Netwax Lab: Site 2 Site VPN with Routing Protocols
Eincop Netwax Lab: Access List ii
Eincop Netwax Lab: EIGRP iii
Nxll10 v lan and trunking
Eincop Netwax Lab: Redistribution
Nxll23 i pv6
Nxll26 bgp ii
Nxll25 hsrp with failover

What's hot (20)

PDF
Nxll20 na ting
PDF
Eincop Netwax Lab: Vlan and Trunking ii
PDF
Nxll19 vrrp (virtual router redundancy protocol)
PDF
Nxll21 ospf filtering & summarization
PDF
Nxll11 bgp
PDF
Eincop Netwax Lab: Lab 1 static route
PDF
Nxll09 access list
PDF
Nxll17 dynamic routing with asa
PDF
Nxll18 vpn (s2 s gre & dmvpn)
PDF
Nxll22 role based cli
PDF
Nxll12 zone based firewall
PDF
Eincop Netwax Lab: EIGRP ii
PDF
Nxll24 i pv6
PDF
Eincop Netwax Lab: HSRP (Hot Standby Router Protocol)
PDF
Nxll28 ospf iii
PDF
Nxll16 basic asa v8.2
PDF
Route Redistribution
PDF
Nxll14 cut through-proxy on asa
PDF
SSL Web VPN
PPTX
LISP + GETVPN as alternative to DMVPN+OSPF+GETVPN
Nxll20 na ting
Eincop Netwax Lab: Vlan and Trunking ii
Nxll19 vrrp (virtual router redundancy protocol)
Nxll21 ospf filtering & summarization
Nxll11 bgp
Eincop Netwax Lab: Lab 1 static route
Nxll09 access list
Nxll17 dynamic routing with asa
Nxll18 vpn (s2 s gre & dmvpn)
Nxll22 role based cli
Nxll12 zone based firewall
Eincop Netwax Lab: EIGRP ii
Nxll24 i pv6
Eincop Netwax Lab: HSRP (Hot Standby Router Protocol)
Nxll28 ospf iii
Nxll16 basic asa v8.2
Route Redistribution
Nxll14 cut through-proxy on asa
SSL Web VPN
LISP + GETVPN as alternative to DMVPN+OSPF+GETVPN
Ad

Similar to Nat64 server (20)

PDF
NAT 64 FPGA Implementation
PDF
IPv6 Fundamentals
PDF
IPv6 Security - Workshop mit Live Demo
PDF
4. IPv6 Security - Workshop mit Live Demo - Marco Senn Fortinet
PDF
IPv6 strategy for deployment at ETH Switzerland
PDF
How You Will Get Hacked Ten Years from Now
PPT
Day 20.i pv6 lab
PDF
Cisco IPv6 Tutorial
PDF
Cisco IPv6 Tutorial by Hinwoto
PDF
Ipv6 cheat sheet
PPSX
Network fundamental
PDF
ipv6_cheat_sheet.pdf
PDF
IPv6 Basics - pfSense Hangout July 2015
PPT
IPv6 networking training sduffy v3
PPT
Cisco presentation2
PPT
IPv6_Quick_Start_Guide
PPTX
ip v6 subnetting-Ip v6 subnetting and intro
PDF
Ipv6 cheat sheet
PDF
Ipv Technical White Paper Wp111504
PDF
Ipv6 Technical White Paper Wp111504
NAT 64 FPGA Implementation
IPv6 Fundamentals
IPv6 Security - Workshop mit Live Demo
4. IPv6 Security - Workshop mit Live Demo - Marco Senn Fortinet
IPv6 strategy for deployment at ETH Switzerland
How You Will Get Hacked Ten Years from Now
Day 20.i pv6 lab
Cisco IPv6 Tutorial
Cisco IPv6 Tutorial by Hinwoto
Ipv6 cheat sheet
Network fundamental
ipv6_cheat_sheet.pdf
IPv6 Basics - pfSense Hangout July 2015
IPv6 networking training sduffy v3
Cisco presentation2
IPv6_Quick_Start_Guide
ip v6 subnetting-Ip v6 subnetting and intro
Ipv6 cheat sheet
Ipv Technical White Paper Wp111504
Ipv6 Technical White Paper Wp111504
Ad

Nat64 server

  • 1. NAT64 SERVER Network Address Translation using vertex-5 D.P.G.S.R Fernando I.U. Liyanage J.R. Kodagoda R.S.A De Silva
  • 3. Why Vertex-5  We had three choices for FPGA boards: Virtex-5,Vertex-2 & Altera  Embedded tri-mode Ethernet MAC wrapper is available only for Virtex-5 and Vertex-6  Because of which we used Virtex-5 board for our project.
  • 4. Procedure Implemented the Tri-mode Ethernet MAC Wrapper Implemented the IPv4 to IPv6 conversion algorithm Implemented the IPv6 to IPv4 conversion algorithm Combine two algorithms to get the NAT64 module
  • 5. Tri Mode Ethernet MAC wrapper
  • 6. IPv4 to IPv6 Conversion
  • 7. IPv6 to IPv4 Conversion
  • 8. Header Mapping IPv4 IPv6 Ether Type: 0x0800 Ether Type:0x86dd DSCP, ECN Traffic class Header Length, Total Length Payload Length Protocol Next Header Time to Live Hop Limit Ipv4 address Ipv6 address
  • 9. Static NAT Table IPv4 IPv6 1 200.2.2.2 2000:2000:2000:2000:2000:2000:2000:2 000 2 200.3.3.3 3000:3000:3000:3000:3000:3000:3000:3 000 3 200.4.4.4 4000:4000:4000:4000:4000:4000:4000:4 000 4 200.5.5.5 5000:5000:5000:5000:5000:5000:5000:5 000 Default Source 200.6.6.6 6000:6000:6000:6000:6000:6000:6000:6 Address 000 Broadcast Address 200.255.255.255 ff02::1 Multicast(to all host) 224.0.0.1 ff02::1 Multicast (to all 224.0.0.2 ff02::2 routers) unspecified 0.0.0.0 :: Loopback address 127.0.0.1 ::1
  • 10. Hardware Debug Tools  ChipScope Pro Analyzer We use ChipScope Pro Inserter flow, to capture signals in ChipScope Pro
  • 12.  Wireshark packet sniffer software application
  • 13. Issues  Virtex-5 board only has one Ethernet port though out NAT64 server needs at least two ports.  Virtex-5 device designs of Tri-mode Ethernet MAC require a Verilog LRM-IEEE 1364-2005 encryption-compliant simulator  ModelSim v6.6d  Cadence Incisive Enterprise Simulator (IES) 10.2  Synopsys VCS and VCS MX 2010.06)  Butany of those simulators are not freely available

Editor's Notes

  • #3: Monahriliyapaaannn
  • #4: According to the slides, given by Dr. Pasqual, there are 3 types of FPGAtri-mode Ethernet MAC wrapper is free
  • #5: We have to configure the TEMAC wrapper
  • #6: The generated example design for this OpenSparc board will not work if implemented and downloaded to the board as is. We must make some configuration changes in the example design so that it works on the OpenSparc board. This is the most hardest part in our project
  • #7: This is the timing diagramFor each ipv4 packet received, NAt64 send ipv6 packet after delaying 36 bytesData and FCS field is delayed by (76-x) bytes
  • #8: This is the timing diagramFor each ipv6 packet received, NAt64 send ipv4 packet after delaying 36 bytesData and FCS field is delayed by 16 bytes
  • #9: ‘Ether type’ in ethernet header is used to determine whether this packet is ipv4 or ipv6How ipv4 packets and ipv6 packets are mapped each other
  • #11: There are twomethosChipScope Pro Inserter flow (which is easy)(which we use)ChipScope Pro Core Generator flow
  • #14: So, the single Ethernet port has to represent IPv4 network and IPv6 networkBecause of unavailability of functional and timing simulations, we have to rely on the hardware debug tools (ChipScope Pro Analyzer and wireshark). This make the project extremely difficult and time consuming (synthesizing, implementing and generating a programming file takes lots of time )