针对现阶段路由器难以同时支持移动IP通信和安全保障的问题,提出一种基于主动网络技术的主动式移动IP包过滤方案,解决了反向隧道技术中“移动节点—家乡代理—通信对端”存在的“反向三角路由”问题。实验表明,此方案在对路由器的软件和硬件稍作改动的前提下,较好地支持了移动IP通信,提高了分组路由的有效性。 Aiming at the problem that it is difficult for routers to support both mobile IP communication and security at the same time, this paper proposes a proactive mobile IP packet filtering scheme based on active network technology, which solves the problem of “mobile node-home agent-communication peer” “Existence ” reverse delta routing "problem. Experiments show that under the premise of a slight modification to the software and hardware of the router, this solution better supports mobile IP communication and improves the efficiency of packet routing.