Research On Mobile IPsec And Simulation On NS-2

As the first choice of the next generation of the mobile network protocols, Mobile IPv6 not only confronts the same security threats in the wireless networks, but also suffers from several security vulnerabilities in its own protocol. In RFC3776, the mechanism to use IPsec to protect the Binding Update Process between MN and HA,and RRP to protect the Binding Update Process between MN and CN , is proposed. But IPsec is mainly used to protect the communication between the fixed entities in Mobile IPv6 network, and RRP is flawed. So it is necessary to propose a complete security solution for Mobile IPv6.In this thesis, IPsec suits and the security of Mobile IPv6 network are studied and analysed, and MIPsec is put forward as a security solution for Mobile IPv6. In this solution, IPsec protects the BU between MN and HA/CN, and the communication between MN and CN; the authentication between any two nodes is implemented by using the improved IKEv2 protocol in the Mobile IPv6 network.In order to verify the effectiveness, correctness and feasibility of MIPsec, MIPsec is implemented and verified on NS-2 simulation platform. To our knowledge, there is no existing IPsec protocol component in NS-2. So based on the analysis of the characteristics of NS-2, a MIPsec component is designed, and its simulation in NS-2 which could well integrate the new component into the existing network system is provided. And the simulation is divided into four parts, including the simulation of security policy and security association, the simulation of ESP protocol, the simulation of IKEv2 and the simulation of authentication. By configuring the network environment and running the simulation script, the obtained simulation data shows that the results of running the MIPsec component are correct, which verifies that MIPsec can solve the security problems in Mobile IPv6 network. Thus it is believed that the MIPsec proposed is a good solution for solving the security problems in the practical application of Mobile IPv6 network.