GB/T 46240.1-2025Security requirements and testing methods of IPv6 network equipment — Part 1: Router (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is Part 1 of GB/T 46240 "Technical Requirements and Test Methods for IPv6 Network Equipment Security".

The following parts were published.

— Part 1: Routers;

— Part 2: Switches.

Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.

This document is proposed by the Ministry of Industry and Information Technology of the People's Republic of China.

This document is under the jurisdiction of the National Communications Standardization Technical Committee (SAC/TC485).

This document was drafted by: China Academy of Information and Communications Technology, Huawei Technologies Co., Ltd., China United Network Communications Group Co., Ltd., Computer Network Emergency Response Technical Processing Coordination Center, BRICS Future Network Research Institute (Shenzhen, China), State Grid Corporation of China Information Communication Xin Branch, CERNET Co., Ltd., China National Petroleum and Natural Gas Pipeline Network Corporation, China Information Post and Telecommunications Consulting and Design Institute Co., Ltd., Xinhua San Technology Co., Ltd., Beijing Xinertai Technology Co., Ltd., ZTE Corporation, National Industrial Information Security Development Research Institute Center, China Welfare Institute International Peace Maternity and Child Health Hospital, and Hillstone Networks Communication Technology Co., Ltd.

The main drafters of this document are: Ma Ke, Gao Jing, Chen Yunke, Hu Junli, Fu Yu, Wang Cuicui, Wang Wenlei, Zhou Luohong, Yin Chonglin, Cao Jinping, Wang Yan, Qu Jiewu, Wang Li, Li Changlian, Wang Dongbo, Wang Xiaoyong, Li Liping, Zhou Jihua, Li Min, Chen Changjie, Wang Lina, and Wang Ye.

Introduction

According to the Notice on Accelerating the Scale Deployment and Application of Internet Protocol Version 6 (IPv6), in order to speed up the solution of network equipment In order to address the security deficiencies of IPv6 and promote the standardization of IPv6 large-scale deployment and application innovations, China has formulated a series of IPv6 application standards.

Among them, GB/T 46240 "IPv6 Network Equipment Security Technical Requirements and Test Methods" is to standardize and guide the smooth deployment of IPv6 in China.

The standards formulated to facilitate the implementation of the project are planned to consist of two parts.

— Part 1: Routers. The purpose is to propose and standardize the development and application of IPv6 security for routers.

— Part 2: Switches. The purpose is to propose and standardize the development and application of IPv6 security on switches.

Security Technical Requirements and Testing Methods for IPv6 Network Equipment Part 1: Router

1 Scope

This document specifies the security architecture of IPv6-capable routers, as well as security technologies for the data plane, control plane, and management plane.

Requirements and test methods.

This document is applicable to the design, development, and testing of router devices that support IPv6 capabilities.

2 Normative references

GB/T 25069

GB/T 41269-2022

3 Terms and Definitions

The terms and definitions defined in GB/T 25069 and the following apply to this document.

4 Abbreviations

The following abbreviations apply to this document.

ACL. Access Control List (AccessControlList) AS. Autonomous System CLI. Command-Line Interface