Research On NEMO Security And Its Simulation

Network mobility (NEMO) technology is mainly used to solve the issues of holistic mobility of a communication sub-network. However, due to the complexity of the network mobility, there has been no relatively mature solutions for it and the corresponding solutions. Therefore, this paper analyzes the current solutions for network mobility and security issues with emphasis. Based on this, a route optimization scheme for NEMO and a NEMO-IPsec security solution are proposed.To solve the mobility issues of sub-networks, a non-nested NEMO route optimization solution and a nested NEMO route optimization solution are provided respectively.Also, a NEMO-IPsec security solution based on IPsec is raised, which includes Access Authentication, Mobile Handover Authentication and Transmission Security. This solution uses certificates as the security indicator, and IKEv2 as the standard for negotiation. And, the two solutions are integrated to realize the process of authentication, together with the IPsec protection of communication of both entities, which could provide high feasibility and security.To verify the effectiveness of these solutions, this paper uses patches for MobiWan, MIP and NEMO to implement the solutions proposed.The simulation for NEMO route optimization was implemented by adding a new gateway node CR and a mobile router MR. The communication between CN and MNN goes through the MR-CR tunnel to realize the route optimization process.The NEMO-IPsec simulation has revised the structure of nodes, adding new agents and classifier to support the IPsec protection in NEMO, which are ESPAgent, DEESPAgent, IKEV2Agent, IPSECDBAgent, and IPSECClassifier. According to the status of network access, mobility and communication, functions are respectively added to implement the security solutions.Simulation scenario is established to simulate the revised solutions. From the simulation results, using the MR-CR tunnel provides better performance. Meanwhile, the communication in the network is protected by the corresponding security policies, and the mobile network has been included into the IPsec system. To sum up, the simulation result has proved the feasibility and correctness of the solution proposed.