Secure Mobile IP Communication

1
Secure Mobile IP Communication

• Torsten Braun and Marc Danzeisen
• LCN01

2
Outline

• Introduction
• Secure Mobile IP(SecMIP)
• SecMIP Implementation
• Performance Evaluation
• Conclusion

3
Introduction

• Goal
• To describe a solution called SecMIP
• Provide mobile IP users secure access to their
  companys firewall protected to VPN
• Motivation
• To solve firewall traversal problem
• Only Authorized user(mobile user) must get access
  to their private network

4
Secured Mobile IP(SecMIP)

• SecMIP Scenario

• IPSec in SecMIP

5
Secured Mobile IP(SecMIP)

• SecMIP Operation
• Step 1 Network detection

• Step 2 acquiring a routable IP address

6
Secured Mobile IP(SecMIP)

• SecMIP Operation
• Step 3 establishment of a IPSec tunnel between
  MN and firewall

• step 4 mobile IP registration at home Agent

7
Secured Mobile IP(SecMIP)

• SecMIP Operation
• Step 5 Data transfer

8
SecMIP implementation

• Implementation
• Linux-based end systems and routers
• Two tunnel
• For mobility
• Dynamics Mobile IP
• Handle agent advertisements
• Establishes Mobile IP tunnels between HA and MN
• Redirects packets to the MN from HN
• For IPSec
• FreeS/Wan IPSec
• Negotiates keys between MN and HF
• Establish secured tunnels between MN and HF
• Encrypts/authenticates all data between MN and HF

9
Test Performance

• Test scenario
• No tunnel has been established
• The Mobile IP tunnel has been used
• IPSec tunnel has been established
• Performance Summary
• IPSec implementation as S/W modules impacts on
  performance (up to 80)
• Use H/W IPSec device
• Minimize performance degradation by encryption
• Establish two simultaneous IPSec tunnel and two
  Mobile IP registrations

10
Conclusion

• Goal
• Present an approach to allow Mobile IP users to
  access firewall protected VPNs
• Future work
• Modify IPSec tunnel to improve performance