Study Of Firewall Packet Filter On Mobile IPv6 Packet

The upgrade from IPv4 to IPv6 is inevitable and just coming, because of the shortage of IPv4 addresses and the security flaws of IPv4. Besides some attributes inherited form IPv4, IPv6 has some new specialities, such as limitless address space, security support and mobility support. In future, more and more wireless equipments will connect to Internet and mobility should be the most important attribute of Internet, so mobile IPv6 will be a preferred scheme which can provide mobile communication. However, the communication between home network and mobile nots brings new issue to the security of communication link and the firewall packet filter.In order to ensure the security of signal and the transparency of communication between home network and mobile nots, we propose a solution which specify how to use IPsec to protect mobile IPv6 signaling between mobile nodes and firewall and how to filter packets flowing through firewall. We also propose the System Module Chart of the firewall and a experiment scheme based on Linux. Firewall based on the solution can solve the problem which the signaling between home network and mobile nots cann't through firewall and ensure the confidentiality of communication between home network and mobile nots. And because the solution only establish IPsec tunnel between firewall and mobile nots, it consume less system resource and is more practicable...