Authors: Carlos J. Bernardos, Santiago Zapata, Francisco J. Galera and Ignacio Soto.

Transcription

1 Mo: Mobile Access Router. Providing Security and Localised Mobility support for Mobile Networks Workshop on Reasearch and Deployment Possibilities based on MIPv6 Authors: Carlos J. Bernardos, Santiago Zapata, Francisco J. Galera and Ignacio Soto

2 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

3 Network Mobility Home Network What is a mobile network? Internet = Access Router MR = Mobile Router HA = Home Agent CN = Correspondent Node MNN = Mobile Network Node MNP = Mobile Network HA CN Visited Network 1 2 MR MNNs Mobile Network Demand for ubiquitous Internet access in mobile platforms (like trains, planes, buses, boats, cars) is increasing Visited Network 2

4 Network Mobility (NEMO) NEMO Basic Support protocol Home Network Internet HA CN Visited Network

5 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

6 Network-based Localised Mobility Management Historical background Some host-based solutions already standardised at the IETF to improve the performance of MIPv6 by managing the local mobility closer to the MN Motivation New IETF work on global mobility management protocols that are not MIPv6, such as HIP e.g., HMIPv6 future wireless IP nodes may support a more diverse set of global mobility protocols The success in the WLAN infrastructure market of WLAN switches, which perform localised management without any host stack involvement This triggered a new interest at the IETF to take a fresh look at localised mobility management NetLMM Working Group, created in January 2006

7 Network-based Localised Mobility Management Basic idea To provide IP mobility management for mobile nodes within an access network (a geographical area) Localised Mobility Domain (LMD): area (set of fixed and mobile network components) where a Localised Mobility Protocol (LMP) is run. An MN attached to an LMD does not change its IP address while roaming within the same LMD MNs are not involved in the localised mobility management (it is network based) No specific support required on the MN The solution does not impose any particular L2 technology to work

8 Network-based Localised Mobility Management Daidalos solution Internet MN 1 LMA MAG 1 MN 1 s assigned prefix MAG 2 MAG 1 s IP address MAG 3 MN 1

9 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

10 Protocol for carrying Authentication for Network Access (PANA) Access networks in most cases require some form of authentication in order to prevent unauthorised usage PANA defines a standard network layer access authentication protocol

11 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

12 Use Cases Scenarios and Motivation Airport scenario

13 Use Cases Scenarios and Motivation Motivation The integration of NEMO and NetLMM brings several interesting advantages A reduction in the required signalling (which in NEMO can be significant when a Route Optimisation solution is used) An overall gain in the performance This integration might be hard, depending on the type of nodes that connects to the NEMO Local Fixed Nodes (LFNs): not really a problem Visiting Mobile Nodes (VMNs) and nested NEMOs: handovers between NEMO and the infrastructure are challenging

14 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

15 Mo: Mobile Access Router Overview (I) We extend LMDs with attached MRs To do so, the role of the MR is two-folded: the MR behaves as a normal MN on its egress interface the MR behaves as a MAG/ of the attached LMD on its ingress interface That s why we called it Mobile Access Router (Mo) A Mo can be considered as a MAG/ that is able to move within the LMD to which it belongs Therefore, Mobile Nodes do not change their IP addresses, even when moving between a Mo and a fixed MAG/

16 Mo: Mobile Access Router Overview (II) LMA MN 1 2 MNWireless 3 16th IST Mobile and Communications Summit MN 1 MN 2 Pref1::/64 Pref3::/64 Pref2::/64 Pref4::/64 3 MR MN 2

17 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

18 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA

19 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA attaches to LocationRegistration(, ) LocationRegistrationACK (,, Pref2::/64) Pref2::/64

20 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA attaches to LocationRegistration(, ) LocationRegistrationACK (,, Pref2::/64) 's CoA = Pref2::MR1/64 Pref2::/64 Router Advertisement( Pref2::/64) BU to 's HA ('s CoA = Pref2::MR_1/64)

21 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA attaches to LocationRegistration(, ) LocationRegistrationACK (,, Pref2::/64) 's CoA = Pref2::MR1/64 attaches to Pref2::/64 Router Advertisement( Pref2::/64) BU to 's HA ('s CoA = Pref2::MR_1/64) LocationRegistration(, ) LocationRegistrationACK (,, Pref4::/64) Pref2::/64 Pref4::/64

22 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA attaches to LocationRegistration(, ) LocationRegistrationACK (,, Pref2::/64) 's CoA = Pref2::MR1/64 attaches to Pref2::/ 64 Router Advertisement(Pref2::/64) BU to 's HA ('s CoA = Pref2::MR_1/64) LocationRegistration (, ) 's CoA = Pref4::MN_3/64 LocationRegistrationACK (,, Pref4::/64) PANA DHCPv6 (Pref4::/64) Pref2::/ 64 Pref4::/ 64 BU to 's HA ('s CoA = Pref4::MN_3/64)

23 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA attaches to LocationRegistration(, ) LocationRegistrationACK (,, Pref2::/64) 's CoA = Pref2::MR1/64 attaches to Pref2::/ 64 Router Advertisement(Pref2::/64) BU to 's HA ('s CoA = Pref2::MR_1/64) LocationRegistration (, ) 's CoA = Pref4::MN_3/64 LocationRegistrationACK (,, Pref4::/64) PANA DHCPv6 (Pref4::/64) BU to 's HA ('s CoA = Pref4::MN_3/64) Pref2::/ 64 Pref4::/ 64 attaches to 2 LocationRegistration(, 2) LocationRegistrationACK (, 2, Pref4::/64) Pref2::/64 Pref4::/64 2

24 Mo: Mobile Access Router Detailed protocol operation (I) 2 LMA attaches to LocationRegistration(, ) LocationRegistrationACK (,, Pref2::/64) 's CoA = Pref2::MR1/64 attaches to Pref2::/ 64 Router Advertisement(Pref2::/64) BU to 's HA ('s CoA = Pref2::MR_1/64) LocationRegistration (, ) 's CoA = Pref4::MN_3/64 LocationRegistrationACK (,, Pref4::/64) PANA DHCPv6 (Pref4::/64) Pref2::/ 64 Pref4::/ 64 attaches to 2 BU to 's HA ('s CoA = Pref4::MN_3/64) LocationRegistration(, 2) LocationRegistrationACK (, 2, Pref4::/64) Router Advertisement(Pref4::/64) Pref2::/64 Pref4::/64 2 LocationDeregistration(,, Pref4::/64) LocationDeregistrationACK (, )

25 Mo: Mobile Access Router Detailed protocol operation (II) Source IPv6 address: CN Source IPv6 address: LMA Destination IPv6 address: IPv6 Routing Header Next Hop: MR s CoA Destination IPv6 address: VMN s CoA Original IP datagram payload Encapsulated IP datagram payload Packet encapsulation (traffic from CN to VMN ) Source IPv6 address: VMN s CoA Source IPv6 address: MR s CoA Destination IPv6 address: IPv6 Routing Header Next Hop: LMA Destination IPv6 address: CN Original IP datagram payload Encapsulated IP datagram payload Packet encapsulation (traffic from VNN to CN )

26 Outline Introduction Use Cases Scenarios and Motivation Mo: Mobile Access Router 4. Network Mobility (NEMO) Network-based Localised Mobility Management (NetLMM) Protocol for Carrying Authentication for Network Access (PANA) Overview Detailed protocol operation Conclusions and Future work

27 Conclusions and Future work Mo architecture enables extending Localised Mobility Domains with attached Mobile Networks This integration has been proved to be useful in real use cases scenarios It improves the overall performance and reduces signalling load Future work Simulation and evaluation of the proposed architecture in several real deployment scenarios Integration of NEMO and Proxy Mobile IPv6 (PMIPv6)