Transcript Document
Mobile IP Presented by Team : Pegasus Kishore Reddy Yerramreddy Jagannatha Pochimireddy Sampath k Bavipati Spandana Nalluri Vandana Goyal Agenda What is Mobile IP? Mobile IP Architecture Why Mobile IP? How Mobile IP Works Registration Message Format Tunneling in Mobile IP Mobile IP in Action Security in Mobile IP Mobile in IPv6 Conclusion What is Mobile IP Definition: Mobile IP is a standard communication protocol, defined to allow mobile device users to move from one IP network to another while maintaining their permanent IP address [2] Mobile IP Architecture Correspondent node (CN) Home Agent (HA) Remote Agent (RA) Mobile node (MN) Entities in Mobile IP Mobile Node (MN) - A Node moving to different network, with permanent Home Address. Home Agent (HA) - A router on a mobile node's home network which tunnels datagrams for delivery to the mobile node when it is away from home, and maintains current location information for the mobile node. Home Address - The static fixed IP Address allocated to a mobile node by Home Agent. Home Network - A network, having a network prefix/network id.matching that of a mobile node's home address Foriegn Network - A network other than a Mobile node’s home network. Foreign Agent - Router in foreign network that provides CoA and tunneling with HA and forward the packets to MN. Care-of Address - Termination point of a tunnel toward a MN in the foreign netwrok. Mobility Binding - The association of a home address with a care-of address (CoA). Correspondent Node (CN) - A peer node with which a Mobile node is communicating. Why Mobile IP ? CN is successfully communicating with MN via HA Correspondent node (CN) Mobile node (MN) Packets for MN are dropped by the Home Agent as Mobile node is not present in its network Router Home Agent (HA) Mobile Node moves to remote network Remote Agent (RA) Why Mobile IP (Cont.) Trends: People’s perspective of looking at internet has changed from ages, with the introduction of Mobility. Increase in the variety of mobile devices, such as PDA’s, laptops and cellular phones, more and more internet services are accessible to moving users with the widely deployed wireless networks. Need: Gene X: 3G Networks, Mobile IPV6 How Mobile IP works Registration 1. FA Registration Request by MN to FA 2. FA Relays Registration request to HA 3. HA sends Registration reply to FA 4. FA Relays Registration reply to MN 1 MN 2 4 3 HA Mobility Binding Table Registration message format Register request Register response Tunneling in Mobile IP CN sends packets to HA Home Agent (HA) Correspondent node (CN) IP-in-IP or GRE tunnel between HA and FA HA tunnels the Packet and sends to FA MN moves to FA Foreign Agent(FA) FA extracts original Packet and sends to the MN Mobile Node (MN) Tunneling in Mobile IP(Cont.) When CN sends the data to MN, it uses the original address of the MN, so the packet goes to HA. From the mobility binding HA encapsulates the packet (IP-in-IP or GRE) and sends to CoA. The FA de-capsulate the packet and extracts the original packet that was sent by the CN. The FA then sends this packet to the MN using the Home address destination. The reverse route from MN to CN may or may not follow this path. Triangle routing – Reply packets are sent directly to CN from MN Reverse Tunneling – Reply packet are tunneled to HA by FA. Mobile IP in Action CN is successfully communicating with MN via HA Mobility Binding table Home Address A Mobile node (MN) Correspondent node (CN) Care-of-Address B HA Looks binding table Home Address = A Home Agent (HA) 1. MN sends Registration request with its new CoA 2. Mobile binding created for MN with new CoA 3. MN sends Registration response, after validating request and updating binding table Remote Agent (RA) 4. Packets sent to MN from CN are tunneled to RA using binding table CoA = B Mobile Node moves to remote network Security in Mobile IP Required as Mobile Nodes are often in unprotected remote network Authenticity and Integrity of Registration messages using Authentication (e.g. HMAC-MD5). Replay attack protection for Registration messages using sequence number. Security Issues in Mobile IP Issue Protocol Solution Optional authentication between MN and FA IPv4 AAA and Broker AAA services Location Privacy IPv4,IPv6 None Confidentiality for Data Packets IPv4,IPv6 IPSec or SSL Security in Mobile IP (Cont.) Mobile IP with AAA (e.g. RADIUS) 8 7 4 3 Remote AAA Broker AAA 2 9 Home AAA 5 6 Remote Agent (RA) 1 Home Agent (HA) 10 Registration Request Registration Response Mobile node (MN) Security in Mobile IP (Cont.) IPSec for Data Confidentiality Correspondent node (CN) Home Agent (HA) Remote Agent (RA) IPSec Tunnel Mobile IP Tunnel (IP-in-IP or GRE) Mobile node (MN) Mobile IP in IPv6 Conceptually same as MIPv4 Inbuilt support using specific extensions for mobile IP Route optimization using new type of routing header “Triangle routing” problem solved using new destination header option Mobility Header to exchange binding messages ( e.g. Registration) Better security using IPSec extensions for binding messages Conclusion Mobile IP plays important role in future with advanced mobile computing devices ( 3G phones, Wi-Fi and WiMAX nodes etc) Mobility vs. security will always be a trade off Security is provided with IPSec and AAA services Problem of QoS with Mobile IP need to be addressed Standard is driven by IETF , which helps in faster deployment without much interoperability issues. References 1. 2. 3. 4. 5. 6. IP Mobility Support for IPv4; RFC 3344, Perkins, Charlie; http://www.ietf.org/rfc/rfc3344.txt Wikipedia : http://en.wikipedia.org/wiki/Mobile_IP Mobility Support in IPv6; RFC 3775; http://www.ietf.org/rfc/rfc3775.txt TCP/IP Tutorial and Technical Overview, IBM Redbooks http://www.cisco.com/en/US/tech/tk827/tk369/technologies_white_paper09186a0080 0c9906.shtml http://www.isoc.org/inet2001/CD_proceedings/T40/inet_T40.htm Thank You ?