-
1.
公开(公告)号:US20080072279A1
公开(公告)日:2008-03-20
申请号:US11857775
申请日:2007-09-19
申请人: Fuyou MIAO , Hongke ZHANG , Sidong ZHANG , Shen YANG , Wei SU , Yan REN , Zuzhou ZHENG , Yajuan QIN , Shuai GAO , Jianglin WANG , Ying LIU
发明人: Fuyou MIAO , Hongke ZHANG , Sidong ZHANG , Shen YANG , Wei SU , Yan REN , Zuzhou ZHENG , Yajuan QIN , Shuai GAO , Jianglin WANG , Ying LIU
IPC分类号: H04L9/00
CPC分类号: H04W80/04 , H04L63/029
摘要: A method for a MIPv6 packet traversing a firewall includes: acquiring filtering information containing the home address of a Mobile Node (MN) from an MIPv6 packet initiating communication; establishing a filtering rule according to the filtering information; and filtering a sequent MIPv6 packet according to the filtering rule. A firewall according to the above method is also provided. According to the present invention, it may be guaranteed that a MIPv6 pack may reliably traverse a firewall in various cases. Moreover, in the case that an MN and a CN do not know whether there is a firewall between them and do not know the location of the firewall, the normal communication may still ensure not to be interrupted when the address of the MN changes.
摘要翻译: 穿过防火墙的MIPv6分组的方法包括:从MIPv6分组发起通信获取包含移动节点(MN)的归属地址的过滤信息; 根据过滤信息建立过滤规则; 并根据过滤规则过滤后续的MIPv6报文。 还提供了根据上述方法的防火墙。 根据本发明,可以确保在各种情况下MIPv6包可以可靠地穿过防火墙。 此外,在MN和CN不知道它们之间是否存在防火墙并且不知道防火墙的位置的情况下,当MN的地址改变时,正常通信仍然可以确保不被中断。