Hi Behcet, > -----Original Message----- > From: Behcet Sarikaya [mailto:[email protected]] > Sent: Friday, September 12, 2014 9:33 AM > To: Alexandru Petrescu > Cc: Sri Gundavelli (sgundave); Templin, Fred L; [email protected] > Subject: Re: [DMM] "A Day in the Life of an Enterprise Mobile Device User" > > On Fri, Sep 12, 2014 at 4:36 AM, Alexandru Petrescu > <[email protected]> wrote: > > Le 11/09/2014 00:00, Sri Gundavelli (sgundave) a écrit : > >> > >> Hi Fred, > >> > >> On 9/4/14 7:50 AM, "Templin, Fred L" <[email protected]> wrote: > >> > >>>> No, in that "VPN" is cited in the scenario and VPN+Mobile IP are not > >>>> working well together. > >>> > >>> > >>> Right - switching between VPN and non-VPN will be important for > >>> enterprise network mobile device users. > >> > >> > >> > >> I think Alex is referring to the DSMIP and IKEv2 interactions and I don't > >> believe his point is about switching across VPN and non-VPN modes. > >> > >> FWIW, the 3GPP S2b interface allows a mobile node to perform handovers > >> from 3GPP access (S5/S8) to non-3GPP access (S2b). > >> > >> There are other examples of Mobile VPN solutions that are deployed and are > >> based on Mobile IP protocols. RFC5265 is only one example. > > > > > > Sri - I agree that specifications allow certain handovers. > > > > I am not sure what do you mean by Mobile VPN? Mobile IP using a MH-HA > > tunnel with a VPN-style tunnel? A VPN which changes the source address with > > a new IKE exchange? These are two different things. > > > > In my experience, once I successfully set up a VPN tunnel on a Host computer > > its Mobile IP implementation will no longer work, and vice-versa; although > > each one can support mobility ok, independently, to a certain extent. > > > > Alex, there is something called MOBIKE RFC 4621. I think it moves > IPSec tunnel when MN's address changes. So that could be used with > VPN.
AERO would be compatible with MOBIKE, yes. Or, it could be used in place of MOBIKE. If MOBKIE were used, the AERO Client would not need to issue DHCPv6 Rebind when it moves, but all other AERO functions would still be used. This is important especially when an AERO Client moves its VPN endpoint from a first security gateway to a second security gateway, e.g., if it discovers that the second security gateway is closer and/or could give better performance. Thanks - Fred [email protected] > Regards, > > Behcet > > > > Alex > > > > > >> > >> > >> Regards > >> Sri > >> > >> > >> > >> > > > > > > _______________________________________________ > > dmm mailing list > > [email protected] > > https://www.ietf.org/mailman/listinfo/dmm _______________________________________________ dmm mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmm
