Background%20

1
Background Main Scenario

• Tero Kivinen
• ltkivinen_at_iki.figt
• IETF58, Minneapolis

2
Background

• Decision to leave mobility out from IKEv2
• Better support for mobility in IKEv2 and IPsec
  needed by Mobile IP protocol
• Rekeying is not an option for some cases
• Too slow
• May require user interaction (SecurID etc)
• Consumes extra resources (extra SAs)

3
Main Scenario
GPRS
Internet
SGW
WLAN
Laptop
4
Main Scenario
GPRS
Internet
SGW
WLAN
Laptop
5
Main Scenario
GPRS
Internet
SGW
WLAN
Laptop
6
Main Scenario
GPRS
Internet
SGW
WLAN
Laptop
7
Main Scenario

• Road warrior user with laptop connected to
  multiple networks (for example GPRS and WLAN)
  connecting to the corporate VPN SGW with fixed
  address.
• Multiple networks means multihoming
• As user moves around the IP-Addresses might
  change at any time
• Need a way to inform VPN SGW about the new
  IP-Address(es)