Method, system and proxy apparatus for regulating rule and policy of through apparatus

Abstract

The embodiment of the invention discloses a method, a system and a proxy device for adjusting rules and strategies of a traversal device, the embodiment of the invention implements the authentication mechanism of a packet which passes through the traversal device through the introduction of an authentication proxy and dynamically adjusts the rules and the strategies of the traversal device through the introduction of a strategy proxy in the vicinity of a protective network of the traversal device, thereby solving the packet processing problem of the traversal device under the two-way tunnel and the route optimization mode in mobile IPv6 network environment and solving the problem of dynamically adjusting the rules and the strategies of the traversal device in a fixed network; the embodiment of the invention does not need the traversal device to support the AAA extension protocol and has smaller changes for upgrading the prior traversal device.

Description

technical field [0001] The present invention relates to communication technology, in particular to a method, system and proxy device for adjusting rules and policies of traversal devices. Background technique [0002] As a kind of network security middleware, the firewall has become an indispensable part of the IP (Internet Protocol) network. It monitors the network traffic and implements corresponding filtering policies and access control to protect internal communication network elements. It can be viewed as a library of rules and actions consisting of rules and policies by which network traffic is allowed or blocked. An important role of a firewall is to detect and prevent denial of service attacks. [0003] The earliest firewalls were designed for IPv4 (Internet Protocol version4) networks. Although the current IP network is still dominated by IPv4, with the saturation of network addresses, IPv6 (Internet Protocol version6) networks are deployed on a large scale, and IP...

AI Technical Summary

Problems solved by technology

[0018] The inventor found in the process of implementing the present invention that since the above solution only solves the method of firewall traversal in the tunnel mode, for the situation where there is a firewall between the MN and the CN in the routing optimization mode, the AAAH server cannot normally notify the firewall on the CN side , so that the firewall on the CN side cannot adjust the filtering rules and policies for the MN; at the same time, for the firewall A, the MN is a node inside the firewall A, so it is redundant to notify the firewall A to adjust the filtering rules and policies through AAAL ; In addition, because firewall A and firewall B need to communicate with AAAL and AAAH respectively, the requirements for firewalls are relatively high, that is, both firewall A and firewall B need to support the AAA extension protocol

Images