IP mobility support for IPsec-based virtual private networks: an architectural solution

Seamless mobility and security are two of the main issues interesting those users, who need to keep working while travelling. Making a careful use of existing standard layer 3 protocols IPsec and mobile IP (MoIP), this paper provides a solution to integrate mobility at IP layer and virtual private network (VPN) services. The solution applies to a wide range of possible situations. We give an overview of all facing problems and we mention both advices and architectural requirements, needed to deploy the proposed solution in a real scenario. In the end we demonstrate the validity of the proposed solution by presenting an implementation on a Linux-based testbed. The deployment of the testbed allows also to show some performances of the combination of MoIP and IPsec, in terms of average added overhead.