Mobile IPv6 Tutorial Karim El Malki Core Unit Core Network Development Ericsson AB

Transcription

1 Mobile IPv6 Tutorial Karim El Malki Core Unit Core Network Development Ericsson AB North American IPv6 Summit 1

2 Outline Mobile IPv6 overview Mobile IPv6 improvements Mobile IPv6 Applications North American IPv6 Summit 2

3 Why IP mobility? Address 1: PREFIX_B: HOST_ID Host 1 Host2 WLAN 1 Router A Router B Router C WLAN 2 North American IPv6 Summit 3

4 Why IP mobility? Address 1: PREFIX_B: HOST_ID Host 1 WLAN 1 Router A Router B Address 2: PREFIX_C: HOST_ID Host2 Router C WLAN 2 North American IPv6 Summit 4

5 Mobile IPv6 Routing through HA IPv6 Data MIPv6 messages Home Network Home Agent BU (Binding Update) BA (Binding Ack ) Correspondent Node (CN) Reverse Tunnelling IP Network Mobile Node (MN) Foreign Network Access Router Foreign Network North American IPv6 Summit 5

6 Mobile IPv6 Route Optimisation IPv6 Data MIPv6 BU/BA Home Network Home Agent Correspondent Node (CN) Mobile Node (MN) BU (Binding Update) Foreign Network BA (Binding Ack.) Routing through HA eliminated Foreign Network North American IPv6 Summit 6

7 Securing Route optimisation signalling Why do we need to secure it? The BU orders the receiver to send traffic to a different IP address (e.g. Packets intended for address X should be sent to Y) Attackers can: Direct a MN s traffic to themselves (steal traffic) Direct a MN s traffic somewhere else (Bombing attacks) Deny a MN from communicating with other nodes (DoS attacks). More attacks are possible. Send MN_A traffic to Bad Guy CN Bad Guy steals MN_A s traffic Send Bad Guy s traffic to MN_A CN Bad Guy bombs MN_A Bad Guy MN_A (victim) Bad Guy MN_A (victim) North American IPv6 Summit 7

8 Securing Route optimisation signalling cont What type of security is needed? The CN needs to determine whether the MN has the right to send the BU To do this the MN must prove that it owns both Home Address and Careof Address Encryption is not required, no confidential information. Is a proof of identity enough? Proof that a user is Person@ericsson.com does not mean that Person owns home address X or CoA Y. Certificate including Home Address could be used but can be complex to set up in practice (i.e. who gives out these special certificates, global PKI) North American IPv6 Summit 8

9 MIPv6 security Return Routability Inititate Test for HoA and CoA Test for HoA and CoA BU, authenticated with keys exchanged during test Correspondent Node (CN) Home Agent Mobile Node (MN) North American IPv6 Summit 9

10 Current and future Mobile IPv6 optimisations Localised Mobility Management (LMM) Fast handovers Granularity of movement: Flow movement Network mobility North American IPv6 Summit 10

11 Why are Fast & Local Mobility important? Home Network Home Agent Mobile IP: Correspondent Node (CN) Access Router Foreign Network Mobile Node (MN) Reacts AFTER L2 movement Introduces a period of service disruption after L2 movement until signalling is complete Performance depends on MIP Registration time and MN-HA distance Fast Handoffs: Anticipates Mobile IP messaging (before L2 movement) Local Mobility: Reduces Mobile to Home network roundtrip delay Local Mobility: Reduces number of messages (radio transm. efficiency) North American IPv6 Summit 11

12 Mobile IP Handover performance 3.4e e e e+06 MIP handoff started MIP handoff completed Packet Sequence Numbers 3.2e e e e+06 1st timeout 0.2 sec 3rd timeout 0.8 sec 5th timeout 3.2 sec 3e e+06 2nd timeout 0.4 sec 4th timeout 1.6 sec Packet dropped by the Path MTU discovery mechanism Slow start period 2.9e e e Real-time services are sensitive to Mobile IP delays Mobile IP delays DO affect non-real-time services Time (in Seconds) From Performance Evaluation of TCP over Mobile IP, PIMRC 1999, Fikouras, El Malki et al. Results would be worse if we considered Route Optimisation RR tests North American IPv6 Summit 12

13 Local Mobility using Mobile IPv6 Correspondent Node (CN) Home Network Home Agent HMIPv6: Correspondent Correspondent Node (CN) Node (CN) draft-ietf-mobileip-hmipv6-08 Local HA MN acquires 2 addresses: LCoA and RCoA Reduce MIPv6 signalling load Improve Handoff delay AR AR Access Network A Access Network B Mobile Node (MN) North American IPv6 Summit 13

14 Old AR Fast Handoffs Overview A. Handoff Initiate (HI) New AR L2 Trigger (source) 3. Fast Binding Update/ Ack B. Handoff Acknowledge (HAck) 1. Proxy Router Solicitation 2. Proxy Router Advertisement Mobile Movement L2 Trigger (mobile) Mobile Node (MN) Detect Movement in Anticipation -> Update Old AR (before L2 mov.) Traffic is then forwarded from Old AR to New AR (non-optimal) The MN must then also update HA and CNs (for optimal routing) Bicasting can improve performance North American IPv6 Summit 14

15 Flow movement Correspondent Node (CN) Home Network Home Agent Correspondent Node (CN) AR AR Access technology A Access Technology B Mobile Node (MN) North American IPv6 Summit 15

16 Where can we find mobile nets: Cars, PANs, Trains, Buses, multi-access technologies..etc Internet WLAN Cellular North American IPv6 Summit 16

17 Mobile IPv6 in current wireless systems Why is it needed? Session continuity Access independence Reachability => Permanent Public IP addresses The role of Mobile IP in current wireless systems: IP Network Mobile IP Core Network GPRS CN (GTP) CDMA2000 (MIP-based) RAN GSM WCDMA CDMA WLAN/Other North American IPv6 Summit 17

18 Thank You! North American IPv6 Summit 18