NAT traversal for local IP access
The invention relates to a method for traversing a NAT device residing in a backhaul IP network. A home cellular base station (HeNB) and a collocated local gateway (L-GW) providing access to a local IP network are connected to a mobile operator's packet core network through the NAT device. The method comprises the steps of opening an IPsec tunnel between the home cellular base station (HeNB) and a security gateway (SeGW) via the NAT device, and of tunneling two interfaces through the same IPsec tunnel, wherein a first interface is an interface whose local endpoint is the home cellular base station (HeNB) and whose remote endpoint is a node residing in the operator's packet core network, and a second interface is an interface whose local endpoint is the local gateway (L-GW) and whose remote endpoint is a node residing in the operator's packet core network. The invention also relates to a node comprising a home cellular base station (HeNB) and a collocated local gateway (L-GW).
1. A node comprising a home base station collocated with a local gateway (L-GW) providing access to a local Internet Protocol (IP) network, wherein the node is configured to:
perform an establishment procedure with a security gateway (SeGW); and
discriminate packets, wherein:
the node uses a first interface which is an S5 interface configured at the L-GW and a second interface which is configured between the home base station and a gateway for the home base station;
the first interface and the second interface are tunneled through a same IP security (IPsec) tunnel which is opened between the home base station and the SeGW;
an IP address used by the home base station for the first interface is same as an IP address used by the home base station for the second interface;
the first interface and the second interface are respectively assigned distinct ranges of Tunnel Endpoint Identifiers (TEIDs) to discriminate the packets delivered on the first interface and the second interface; and
the home base station is a home evolved nodeB (HeNB) or a home nodeB (HNB).
2. The node according to claim 1 , wherein the second interface is an Iuh user plane interface.
3. The node according to claim 1 , wherein the second interface is an S1-U interface.
4. The node according to claim 1 , wherein the establishment procedure is performed by receiving an initial context setup request.
5. A method for providing a Local Internet Protocol (IP) Access (LIPA) service, the method comprising:
performing, by a node comprising a home base station collocated with a local gateway (L-GW), an establishment procedure with a security gateway (SeGW); and
discriminating, by the node, packets, wherein:
the node uses a first interface which is an S5 interface configured at the L-GW and a second interface which is configured between the home base station and a gateway for the home base station;
the first interface and the second interface are tunneled through a same IP security (IPsec) tunnel which is opened between the home base station and the SeGW;
an IP address used by the home base station for the first interface is same as an IP address used by the home base station for the second interface;
the first interface and the second interface are respectively assigned distinct ranges of Tunnel Endpoint Identifiers (TEIDs) to discriminate the packets delivered on the first interface and the second interface; and
the home base station is a home evolved nodeB (HeNB) or a home nodeB (HNB).
6. The method of claim 5 , wherein the second interface is an Iuh interface or an S1-U interface.
7. The method of claim 5 , wherein the establishment procedure is performed by receiving an initial context setup request.