Network address translation for tunnel mobility
View Patent ↗An access terminal identity based mobility is provided in which a first network tunnel is established between an access gateway and a first access router, and a second network tunnel is established between the access gateway and a second access router. At the access gateway, source addresses of packets sent from an access terminal to a remote correspondent node are translated by replacing the local address of the access terminal with the public address of the access terminal. The access terminal continuously maintain a communication session with the correspondent node as the access terminal moves from a first location to a second location and switches from accessing the first access router to accessing the second access router. A mapping between the local address and the public address is updated as the access terminal switches from the first access router to the second access router.
1. A method comprising:
establishing a first network tunnel between an access gateway and a first access router that provides a first access point for access terminals, the access gateway providing a first subnet of addresses to the first access router that the first access router can use to assign local addresses to the access terminals;
establishing a second network tunnel between the access gateway and a second access router that provides a second access point for access terminals;
assigning, by the access gateway, a public address to the access terminal having a local address assigned by the first or second access router, the access gateway assigning different public addresses to different access terminals connected to the access gateway through corresponding access router or routers;
at the access gateway, translating source addresses of packets sent from an access terminal to a remote correspondent node by replacing the local address of the access terminal with the public address of the access terminal, to enable the access terminal to continuously maintain a communication session with the correspondent node as the access terminal moves from a first location to a second location and switches from accessing the first access router to accessing the second access router; and
updating a mapping between the local address and the public address as the access terminal switches from the first access router to the second access router.
2. The method of claim 1 , comprising, at the access gateway, translating destination addresses of the packets sent from the correspondent node to enable the access terminal to continuously receive packets from the correspondent node as the access terminal switches connection from the first access router to the second access router.
3. The method of claim 1 , comprising, at the access gateway, storing in a table information about the mapping between the local address of the access terminal and the corresponding public address.
4. The method of claim 1 wherein packets sent through the first network tunnel from the first access router to the access gateway are encapsulated to have a source address comprising an address of the first access router and a destination address comprising an address of the access gateway.
5. The method of claim 1 , comprising encapsulating packets sent through the first network tunnel from the access gateway to the first access router and causing the encapsulated packets to have a source address comprising an address of the access gateway and a destination address comprising an address of the access router.
6. The method of claim 1 , comprising, at the access gateway, associating an identifier of the access terminal with a local address of the access terminal, and mapping the local address of the access terminal to the public address of the access terminal.
7. The method of claim 6 , comprising, at the access gateway, receiving the identifier of the access terminal and a new local address of the access terminal, and updating the mapping between the local address of the access terminal and the public address of the access terminal.
8. The method of claim 6 wherein the identifier comprises at least one of a network address identifier, an international mobile subscriber identity, and a temporary mobile subscriber identity.
9. The method of claim 1 wherein the access terminal comprises at least one of a notebook computer, a mobile phone, and a personal digital assistant.
10. The method of claim 1 wherein establishing the first network tunnel comprises establishing a secure network tunnel.
11. The method of claim 10 wherein establishing the secure network tunnel comprises establishing a secure network tunnel according to IP Security protocol.
12. A method comprising:
establishing network tunnels between an access gateway and a plurality of access routers that each provides an access point for access terminals
at the access gateway, providing a subnet of addresses to each of the access routers that each access router can use to assign local addresses to the access terminals;
at the access gateway, assigning a public address to the access terminal, the access gateway assigning different public addresses to different access terminals connected to the access gateway through corresponding access router or routers;
at the access gateway, translating source addresses of packets that are sent from an access terminal to a correspondent node by replacing the local address of the access terminal with the public address of the terminal, and maintaining a mapping between the local address and the public address of the access terminal to enable the access terminal to continuously send packets to the correspondent node as the access terminal switches connection among different access routers; and
at the access gateway, updating the mapping between the local address and the public address as the access terminal switches connection among different access routers.
13. The method of claim 12 , comprising, at the access gateway, translating destination addresses of the packets that are sent from the correspondent node to the access terminal, to enable the access terminal to continuously receive packets from the correspondent node as the access terminal switches connection among different access routers.
14. The method of claim 12 wherein establishing network tunnels comprises establishing secure network tunnels according to IP Security protocol.
15. An apparatus comprising:
an access gateway to establish network tunnels with a plurality of access routers that provide access points for access terminals, the access gateway providing a subnet of addresses to at least one of the access routers that the access router can use to assign local addresses to the access terminals, the access gateway comprising
an address translator to translate source addresses of packets that are sent from an access terminal to a correspondent node by replacing the local address of the access terminal with a public address of the access terminal, and
a table to store information about a mapping between the local address and the public address of the access terminal to enable the access terminal to continuously send packets to the correspondent node as the access terminal switches among different access routers,
wherein the access gateway assigns different public addresses to different access terminals connected to the access gateway through corresponding access router or routers, and
wherein the access gateway updates the local address of the access terminal in the table when the access terminal switches from accessing one of the access routers to another one of the access routers.
16. The apparatus of claim 15 wherein the address translator also translates destination addresses of packets that are sent from the correspondent node to the access terminal, to enable the access terminal to continuously receive packets from the correspondent node as the access terminal switches among different access routers.
17. The apparatus of claim 15 wherein the access gateway encapsulates packets sent through the network tunnels to the access routers such that the encapsulated packets have a source address comprising an address of the access gateway and destination addresses comprising the addresses of the access routers.
18. The apparatus of claim 15 wherein the access gateway associates an identifier of the access terminal with a local address of the access terminal and maps the local address of the access terminal to a public address of the access terminal.
19. The apparatus of claim 18 wherein the access gateway receives the identifier of the access terminal and a new local address of the access terminal when the access terminal switches to a new access router, and updates the mapping between the local address and the public address of the access terminal.
20. The apparatus of claim 18 wherein the access terminal comprises at least one of a notebook computer, a mobile phone, and a personal digital assistant.
21. The apparatus of claim 18 wherein the access gateway establishes secure network tunnels with the access routers.
22. A system comprising:
means for establishing network tunnels between an access gateway and a plurality of access routers that each provides an access point for access terminals, the access gateway providing a subnet of addresses to at least one of the access routers that the access router can use to assign local addresses to the access terminals;
means for assigning public addresses to the access terminals, the access gateway assigning different public addresses to different access terminals connected to the access gateway through corresponding access router or routers;
means for translating, at the access gateway, source addresses of packets sent from an access terminal to a correspondent node by replacing the local address of the access terminal with the public address of the terminal, and maintaining a mapping between a local address and a public address of the access terminal to enable the access terminal to continuously send packets to the correspondent node as the access terminal switches among different access routers; and
means for updating the mapping between the local address and the public address as the access terminal switches connection among different access routers.
23. The system of claim 22 , comprising means for translating, at the access gateway, destination addresses of packets sent from the correspondent node to the access terminal to enable the access terminal to continuously receive packets from the correspondent node as the access terminal switches among different access routers.
24. A non-transitory computer-readable medium having a computer program capable of controlling an access gateway to process packets by:
establishing network tunnels between the access gateway and a plurality of access routers that each provides an access point for access terminals, the access gateway providing a subnet of addresses to at least one of the access routers that the access router can use to assign local addresses to the access terminals; and
at the access gateway, translating source addresses of packets sent from an access terminal to a correspondent node by replacing the local address of the access terminal with a public address of the access terminal and maintaining a mapping between a local address and a public address of the access terminal to enable the access terminal to continuously send packets to the correspondent node as the access terminal switches among different access routers;
wherein the access gateway assigns different public addresses to different access terminals connected to the access gateway through corresponding access router or routers;
wherein the access gateway updates the mapping between the local address and the public address as the access terminal switches connection among different access routers.