Mobile IPv4 Traversal across IPsec-Based VPN Gateways

Vaarala, Sami; Klovning, Espen

doi:10.17487/rfc5265

Cited by 15 publications

(17 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Nevertheless, as explained in [17], many problems arise from the combination between IPsec and MobileIP. In order to overcome these problems, a model has been proposed which is based on the use of two HAs (Home Agents) -internal HA and external HA -and two FAs (Foreign Agents) -internal FA and external FA -by Vaarala et al in [18]. However, this model imposes the use of three imbricated tunnels({x-MIP{GW{i-MIP{original packet}}}}), as shown in figure 2.…”

Section: Ipsec + Mobile Ipmentioning

confidence: 99%

A Survey on Secure and Resilient Session Schemes: Technical Comparison and Assessment

Ahmat¹,

Magoni²

2018

ICST Transactions on Ubiquitous Environments

View full text Add to dashboard Cite

Cyber threats become more and more pervasive on the Internet and on distributed/decentralized systems. In order to secure communication over these infrastructures and respond to mobility constraint, a new class of Virtual Private Networks (VPN), which support both security and mobility, has emerged in the course of last years. Mobile Virtual Private Networks, called mobile VPN, provide not only secure tunnels but also session continuity mechanism despite location change or connection disruptions. This mechanism enables secure sessions to survive in dynamic/mobile environments without requiring a renegotiation of security keys during the session resumption phase. In this paper, on the one hand, we survey the recent literature on the mobile VPN systems followed by a detailed analysis and a technical comparison in tabulated form of existing technologies. On the other hand, we carry out experiments on open source mobile VPN infrastructures. We subsequently outline and discuss major features and performances of various assessed mobile VPN infrastructures.

show abstract

Section: Ipsec + Mobile Ipmentioning

confidence: 99%

A Survey on Secure and Resilient Session Schemes: Technical Comparison and Assessment

Ahmat¹,

Magoni²

2018

ICST Transactions on Ubiquitous Environments

View full text Add to dashboard Cite

show abstract

“…현재 IPSec은 IPv4의 고정경로 라우팅을 기반으로 설 계되었기 때문에 무선 환경의 로밍(roaming) 호스트로 인 한 동적경로 라우팅이 요구되는 무선 인터넷에서는 새로 운 라우팅 방안이 필요하다 [9,14]. 다시 말하면 MIPv4 기 반 IPSec은 동적 Host-to-Host Transport Mode 연결을 사용 할 수 없다는 의미이다.…”

Section: 연구 범위와 목적unclassified

“…다시 말하면 MIPv4 기 반 IPSec은 동적 Host-to-Host Transport Mode 연결을 사용 할 수 없다는 의미이다. 현재는 고정 호스트 또는 중간 게 이트웨이 사이 Tunnel Mode 연결만을 허용하고 있다 [14].…”

Section: 연구 범위와 목적unclassified

Study on WP-IBE compliant Mobile IPSec

Choi¹

2013

Journal of Korean Society for Internet Information

View full text Add to dashboard Cite

In the wireless Internet, it is so restrictive to use the IPSec. The MIPv4 IPSec's path cannot include wireless links. That is, the IPSec of the wireless Internet cannot protect an entire path of Host-to-Host connection. Also wireless circumstance keeps a path static during the shorter time, nevertheless, the IKE for IPSec SA agreement requires relatively long delay. The certificate management of IPSec PKI security needs too much burden. This means that IPSec of the wireless Internet is so disadvantageous. Our paper is to construct the Mobile IPSec proper to the wireless Internet which provides the host-to-host transport mode service to protect even wireless links as applying excellent WP-IBE scheme. For this, Mobile IPSec requires a dynamic routing over a path with wireless links. FA Forwarding is a routing method for FA to extend the path to a newly formed wireless link. The FA IPSec SA for FA Forwarding is updated to comply the dynamically extended path using Source Routing based Bind Update. To improve the performance of IPSec, we apply efficient and strong future Identity based Weil Pairing Bilinear Elliptic Curve Cryptography called as WP-IBE scheme. Our paper proposes the modified protocols to apply 6 security-related algorithms of WP-IBE into the Mobile IPSec. Particularly we focus on the protocols to be applied to construct ESP Datagram.

show abstract

“…The Internet Engineering Task Force (IETF) [9] proposes an approach that uses two instances of mobile IP (MIP) to support seamless and secure mVPN deployment between a user and an associated enterprise network. When the user moves to an external network, the first instance of MIP ensures that the established VPN tunnel is not broken due to the change of the user's IP address.…”

Section: Mobile Vpnsmentioning

confidence: 99%