| 摘要 |
A method and apparatus for processing packets are provided to extend the usage of a Cryptographically Generated Addresses (CGA) protocol. The method includes: receiving an Internet Protocol version 6 (IPv6) packet carrying CGA related information from a sender; obtaining the CGA related information from the IPv6 packet at the network layer, where the CGA related information includes the CGA parameters (CGA Params) and CGA signature (CGA Sig) of the sender; verifying the source address of the IPv6 packet according to the CGA Params and CGA Sig; transmitting the payload of the IPv6 packet after the verification succeeds. In the present invention, the packet is not limited to the IPv6 packet; the IP packet of a version later than IPv6 or the IP packet compatible with IPv6 may also be used.
|
