摘要： IPv6 的新特点和应用对现有的安全设备结构提出了挑战。同时，从IPv4 升级到IPv6 是一个长期的过程，两种协议在一定时间内将共同存在。因此，需要设计支持IPv4、IPv6 双协议的防火墙以适应过渡时期的需要和IPv6 新特点对防火墙的要求。论述了IPv4/IPv6 防火墙的设计需要考虑的防火墙位置、IPv6 与IPv4 的差异及性能，然后介绍防火墙实现的步骤和将要进行的工作。

关键词: 防火墙；IPv6；IPSec

Abstract: The adoption of IPv6 will impact today's network security architecture. Firewall is one of the main points of security architecture. This paper discusses how to design firewall to match the requirement of next generation network based on IPv6. This paper focuses on the problems that should be taken into consideration when designing firewall system for the network environment that both IPv4 and IPv6 exist. Then, the work on firewall is introduced and the following work is presented.

Key words: Firewall; IPv6; IPSec