Secure and mobile networking

来源：筏尚旅游网

Firewall w/applicationproxies.Internet **FW1R1Perimeter Network **R2M’s HomeNetworkCN1Internal Network*Organization O’s protected networkCN2Ingress-filteringrouterR311000011Visiting mobileCN3nodeMISP/University network, U *** Private addresses in use** Public addresses in useInboundpacket

COA->HA

Mobile IP (MIP) payload

UDPReg Request

IPUpper Layer Packet

MN->CN(inner IP hdr)

(a) Registration request

(b) Reverse-tunneled packet

Outboundpacket

Mobile IP (MIP) payload

HA->COA

Reg ReplyUDPUpper Layer PktCN->MN

(inner IP hdr)

Home Agent

ClearFirewall

Enc/AuthMobile Node

@coa

Hides COA frominternal routersHides HA addressfrom external routers

Home AgentFirewall

Enc/AuthMobile Node

@coa

Home AgentFirewall

++EncryptionAuthentication++++Mobile Node

@coa

+031

VerRsvdSrc NSIDDst NSID

Counter n

Next Header

Kij AlgCrypt AlgMAC AlgComp Alg

Kp encrypted in Kijn ... (typically 8-16 bytes)Source Master Key-ID (if Src NSID is non-zero)Destination Master Key-ID (if Dst NSID is non-zero)

Home AgentFirewall

Mobile Node

@ coa

IPvtunlIP

le0

2IP

Reg RequestFW->HACOA->HA

vtunlIPle0

IPSKIPle0

1IPSKIPAHESPIPReg ReqCOA->FWCOA->HA

IPSKIPle0

IPvtunlIP

le0

vtunlIPle0

IPSKIPle0

3Reg ReplyHA->FWHA->COA

4Reg RepIPESPAHSKIPIPFW->COAHA->COA

Home AgentFirewall

Mobile Node

@ coa

IPvtunlIP

vtunlIPle0

IPSKIPle0

IPvtunlIP

6IPIP

IPUpper Layer PacketFW->HACOA->HAMN->CN

5IPSKIPAHESPIPIPULPCOA->FWCOA->HAMN->CN

IPvtunlIP

vtunlIPle0

IPSKIPle0

IPvtunlIP

7Upper Layer Pkt

HA->FWHA->COACN->MN

8ULPIPIPESPAHSKIPIPFW->COAHA->COACN->MN

因篇幅问题不能全部显示，请点此查看更多更全内容

查看全文