 the MN is outside the network protected by the firewall and the CN is in the network protected by the firewall. Therefore, the five elements in the entry item includes a source home address, a destination home address 0, a source port, a destination port and a protocol number. Step 000: Match the replaced source address of the data packet, i.e. the home address of the MN with the 