IPv6 IPsec and Mobile IPv6 implementation of Linux
نویسندگان
چکیده
USAGI Project [8] has improved Linux IPv6 [1] stack. IPv6 IPsec is one of the products of our efforts. Linux IPsec [6] stack is implemented based on XFRM architecture which is introduced in linux-2.5. We design and implement Mobile IPv6 (MIPv6) [4] Stack on the architecture. MIPv6 uses IPsec for its secure signaling. Accordingly IPv6 IPsec and MIPv6 closely cooperate each other. In this paper we describe the architecture and how they work.
منابع مشابه
Transport Layer Security (TLS) Implementation for Secured MN- HA Communication in Mobile IPv6
Mobile IPv6 usually use the IPsec/IKEv2 to secure Mobile Node (MN) and Home Agent (HA) communication. The implementation of IPsec/IKEv2 with MIPv6 is complex because it requires a tight coupling between MIPv6 protocol part and the IPsec/IKEv2 part of the IP stack. This paper proposes a security mechanism which uses Transport Layer Security (TLS) for establishing Keying Material and other bootst...
متن کاملImplementation and Evaluation of DSMIPv6 for MIPL
Mobile IPv6 performs mobility management to mobile node within IPv6 networks. Since IPv6 is not widely deployed yet, it's an important feature to let Mobile IPv6 support mobile node moving to IPv4 network and maintaining the established communications. DSMIPv6 specification extends Mobile IPv6 capabilities to allow dual stack mobile nodes to move within IPv4 and IPv6 networks. This paper descri...
متن کاملRFC 6618 TLS - Based MIPv
Mobile IPv6 signaling between a Mobile Node (MN) and its Home Agent (HA) is secured using IPsec. The security association (SA) between an MN and the HA is established using Internet Key Exchange Protocol (IKE) version 1 or 2. The security model specified for Mobile IPv6, which relies on IKE/IPsec, requires interaction between the Mobile IPv6 protocol component and the IKE/IPsec module of the IP...
متن کاملTask Force ( IETF )
Mobile IPv6 signaling between a Mobile Node (MN) and its Home Agent (HA) is secured using IPsec. The security association (SA) between an MN and the HA is established using Internet Key Exchange Protocol (IKE) version 1 or 2. The security model specified for Mobile IPv6, which relies on IKE/IPsec, requires interaction between the Mobile IPv6 protocol component and the IKE/IPsec module of the IP...
متن کاملDual Stack Implementation of Mobile IPv6 Software Architecture
IPv6 is introduced mainly to resolve the address space issues and also provides several advanced features. IPv6 is estimated to replace IPv4 in a very near future. Dual Stack Mobile IPv6 (DSMIPv6) is an extension of Mobile IPv6 to support mobility of devices irrespective of IPv4 and IPv6 network. This paper provides an architectural overview of the existing DSMIPv6 implementation and software a...
متن کامل