Method and device for passing through firewall by mobile IP

Abstract

The invention discloses a method for mobile IP to traverse the firewall and the method comprises the following steps: a mobile node negotiates with the home agent to encapsulate the information; the sender (the mobile node or the home agent) utilizes the negotiated encapsulated information to implement UDP encapsulation on the information to be transmitted to transverse the firewall; the receiver (the home agent or the mobile node) carries out decapsulation on the received UDP encapsulation message. The invention also discloses mobile equipment and a home agent. In the embodiment of the invention, different traverse signaling does not need to be issued aiming at different flows and the present firewall function and security can not be affected; moreover, the present firewall does not need to be upgraded and the expansibility of the present firewall is excellent. Therefore, fast firewall traverse can be realized.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a method and equipment for mobile IP traversal of firewalls. Background technique [0002] In the computer field, a firewall is a defense system installed between the internal network and the external network in order to ensure the security of the local computer network system. It controls, monitors, allows, and rejects the information flow entering and leaving the network according to the corresponding security policy. Strong anti-attack ability. A firewall is an infrastructure that provides information security services and realizes network and information security, isolates the internal network from the external network, and protects the internal network by restricting network mutual access. The firewall can protect the security of the internal network by monitoring, restricting, and changing the data flow across the firewall, and shielding the information, structure, a...

AI Technical Summary

Problems solved by technology

Unless the firewall can identify mobile IPv6 packets, such a large number of security devices will affect the implementation and promotion of mobile IPv6

When a mobile node leaves its hometown to access a foreign network, it first needs to initiate a BU to its hometown. Both BU and BA packets are protected by IPSec. Usually, for stateful inspection firewalls, the firewall discards IPSec packets because it cannot extract state information, which prevents prevents the mobile node from registering with its home, and also prevents the mobile node from further communication

Images