Device to facilitate the deployment of mobile virtual private networks for medium/large corporate networks
A mobile agent device in a Mobile Virtual Private Network, said device comprising: termination of Mobile IP tunnel ( 6 ) from a remotely connecting Mobile Node ( 1 ); termination of an IPSec VPN tunnel ( 7 ) from the remotely connecting Mobile Node; dynamic Selection of Internal Mobile IP Home Agent based on user Authentication; tunneling of traffic to and/or from the assigned Internal Mobile Home Agent for this Mobile Node; and, provision of extended authentication, after Mobile IP connection establishment, and during the VPN negotiation phase, based on extra user credentials, one-time-password mechanism or similar.
1 . A mobile agent device in a Mobile Virtual Private Network, said device comprising:
a. termination of Mobile IP tunnel from a remotely connecting Mobile Node;
b. termination of an IPSec VPN tunnel from the remotely connecting Mobile Node;
c. dynamic Selection of Internal Mobile IP Home Agent based on user Authentication;
d. tunneling of traffic to and/or from the assigned Internal Mobile Home Agent for this Mobile Node; and
e. provision of extended authentication, after Mobile IP connection establishment, and during the VPN negotiation phase, based on extra user credentials, one-time-password mechanism or similar.
2 . The device of claim 1 , wherein the mobile agent device appears as a Mobile IP Foreign Agent towards the Internal Home Agent.
3 . The device of claim 1 , wherein the mobile agent device appears as a Mobile IP Home Agent towards the remotely connecting Mobile Node.
4 . The device of claim 1 , wherein the mobile agent device provides a dynamically assigned Mobile IP address to the Mobile Node, if requested to do so by the Mobile Node.
5 . The device of claim 1 , wherein the mobile agent device provides a termination point for IKE & IPSec VPN connections from a remotely connecting Mobile Node.
6 . The device of claim 1 , wherein IP encapsulated tunneling is used for transfer of traffic between the mobile agent device and the Internal Home Agent.
7 . The device recited in claim 1 , wherein UDP encapsulated tunneling is used for transfer of traffic between the mobile agent device and the Internal Home Agent.
8 . The device of claim 1 , wherein traffic can be routed directly from the mobile agent device towards its destination, on receipt from the mobile node.
9 . The device of claim 1 , wherein IP encapsulated tunneling is used for transfer of traffic between the mobile node and the mobile agent device.
10 . The device claim 1 , wherein UDP encapsulated tunneling is used for transfer of traffic between the mobile node and the mobile agent device.
11 . The device claim 9 , wherein IPSec tunneling is used for protection of the transfer of traffic between the mobile node and the mobile agent device, within said encapsulation.
12 . The device of claim 1 , further comprising restriction of user access to the internal home agent or internal network, until extended user authentication is carried out.
13 . The device of claim 1 , further comprising time and volume based accounting is carried out a per Mobile Node basis.
14 . (canceled)
15 . The device of claim 10 , wherein IPSec tunneling is used for protection of the transfer of traffic between the mobile node and the mobile agent device, within said encapsulation.