Research And Simulation Design Of Mobile IPSec

At the present time, the main obstacles to employ Mobile IPv6 formally are the security and efficiency problems. Against the security issue, IPSec protocol suits can provide good security protection, RFC 3776 has already required IPSec to resolve partial security issues. However, because of such factors as secure domains, mobile efficiency, some scholars believe that IPSec is not suitable for mobile environments.In view of the above question, this thesis emphasizes on the analysis of Mobile IPv6, including IPSec protocols, existing security protection and various kind of attack, ultimately concludes that IPSec is still the safest way, but can not directly applied to the mobile environment. Therefore, this thesis proposes a Mobile IPSec solution, which adds authentication, public key protection, and changes the key management mechanism, so that to reduce the number of Security Association consultations and maximize the use of security resources. Therefore, IPSec can adapt low-delay, high-security and continuous communication requirements, taking into account the efficiency in solving the safety problems of Mobile IPv6. Through providing specific protection for MN and HA's interaction, MN and CN's interaction, and MN's switching process, improves the current lack of effective protection between MN and CN. This thesis also gives the safety and feasibility analysis of the solution.Since the current research on the Mobile IPv6 most restriction in theory and simulation stage, we adopt NS-2 as the final simulation platform, which without any IPSec protocols support, so it is necessary to develop IPSec support for NS-2. Based on the analysis of the characteristics of network simulation platform, this thesis gives the simulation design which integrates IPSec into existing network system in NS-2.Through the two above work, this thesis provides a more systematic security solution for Mobile IPv6, which will help Mobile IPv6 into practical deploying.