Implementace NAT64 a DNS64 při budování Wi-Fi sítě s využítím 802.1x

Abstract

This bachelor thesis focuses on the design and implementation of an IPv6-only wireless network utilizing modern transition mechanisms and robust security. In the context of global IPv4 address exhaustion, emphasis is placed on building infrastructures that natively use the IPv6 protocol while maintaining full connectivity to IPv4 services. The theoretical part of the thesis analyzes IPv6 addressing principles, SLAAC and DHCPv6 autoconfiguration methods, and 464XLAT technology, including NAT64 and DNS64 translation. The security aspect is addressed by implementing the IEEE 802.1X standard using the RADIUS protocol and centralized user management within the LDAP directory service. The practical part describes the configuration of an OpenWrt-based router, the deployment of the Jool translator, and the setup of the FreeRADIUS and OpenLDAP authentication infrastructure. The thesis includes compatibility testing on Windows, Linux, Android, and iOS platforms, focusing on internal CLAT translator support and the DHCPv4 IPv6-Only Preferred option. The final section is dedicated to throughput and latency stress tests, demonstrating the efficiency of the proposed solution.