Ikev2 Protocol Design And Implementation Of Ipv6 Router,

IPsec is a security mechanism used for protection of Internet communication, it can provide various security services for the IP layer, such as data integrity, data origin authentication, protection against replays, confidentiality. Key exchange protocols can dynamically negotiate and manage security association for IPsec. The services of key exchange protocol help to widely implement and deploy IPsec.Routers are key equipments for Internet. Routers supporting IPv6 are becoming the mainstream routers because IPv6 will replace IPv4. IPsec and IKEv2 protocols implemented in these routers are the base of security data transmission. Nowdays, Internet has develops very fast, mobility support is a must. So we should study how to commucate secretly in mobile environment. It is very important to study the implementment of IKEv2 and support mobile IPv6.The main contribution of the paper is described as the following:1. The functions, designing requirements, security models, and security risk to key exchange protocols were described. This paper compared IKEv2 with IKEv1, and then explained the advantages of IKEv2 and the defects of later two protocols.2. Design IKEv2 security architecture with state machine and security policy. Design the model architecture to implement the protocol. Finally, I make IKEv2 run in environment of LINUX. The paper introduces the architecture give the description of architecture modeling design and deal process of IKEv2.3. A security framework support obile IPv6 was defined and proposed for IKEv2. Paper have designed the home agent and the mobile node. It has extend the mobile IPv6 and make IKEv2 more useful.