Abstract: In view of the poor detection ability of the original IPv6 network deployment and transformation method for gray hole attack, which results in the poor early warning ability of IPv6 network attack, this paper designs an IPv6 network deployment and transformation method against gray hole attack. The network architecture is divided into core layer, convergence layer, access layer, and access part of Wan and server from a logical point of view by adopting hierarchical design concept. Based on the network architecture, the server cluster used in the network and network indirect mode are optimized. The paper sets network detection and matching rules, uses access mode as an indirect method of routers in the network, against multi-mode network attack, uses multi-mode detection method to achieve IPv6 network attack detection. The experimental results show that the designed method has strong early warning ability of gray hole attack and high compatibility of operating system.

Key words: IPv6, transition technology, IP protocol, grey hole attack, network deployment