Home virtual local area network identification for roaming mobile clients

1. A computer implemented method, comprising:

determining, by a network device, that a mobile client has roamed from a home network to a foreign network, wherein the home network is associated with a home agent for the mobile client, wherein the foreign network is associated with a foreign agent for the mobile client, and wherein the network device serves as the home agent;

establishing a tunnel associated with a data connection between the home agent and the foreign agent, wherein the tunnel corresponds to a virtual local area network (VLAN) used for transmitting packets to or from the mobile client, and wherein the tunnel has a tunnel identifier and the VLAN has a VLAN identifier;

maintaining a map between the mobile client and the tunnel, wherein the map is maintained in a bridge table that includes the VLAN identifier, the tunnel identifier, and a Media Access Control (MAC) address corresponding to the mobile client;

receiving a packet;

using the map to associate the tunnel with the packet; and

forwarding the packet using the map.

2. The method of claim 1 , wherein receiving the packet includes receiving the packet using the tunnel.

3. The method of claim 2 , further comprising:

decapsulating the packet.

4. The method of claim 2 , further comprising:

overwriting a VLAN identifier value of the packet, wherein the VLAN identifier value of the packet is overwritten with an assigned VLAN identifier value associated with the home agent for the mobile client.

5. The method of claim 4 , wherein overwriting includes looking up the assigned VLAN identifier value in the bridge table.

6. The method of claim 1 , wherein the tunnel is a secure tunnel.

7. The method of claim 1 , wherein forwarding includes assigning a VLAN identifier value to the packet, and wherein forwarding includes forwarding the packet using the secure tunnel.

8. The method of claim 1 , further comprising:

receiving a home agent discovery request, wherein the home agent discovery request includes the MAC address corresponding to the mobile client; and

modifying the bridge table to associate the VLAN identifier with the tunnel identifier.

9. A system comprising:

one or more processors; and

a non-transitory computer readable storage medium communicatively coupled to the one or more processors, wherein the non-transitory computer readable storage medium includes instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including:

determining, by a network device, that a mobile client has roamed from a home network to a foreign network, wherein the home network is associated with a home agent for the mobile client, wherein the foreign network is associated with a foreign agent for the mobile client, and wherein the network device serves as the home agent;

establishing a tunnel associated with a data connection between the home agent and the foreign agent, wherein the tunnel corresponds to a virtual local area network (VLAN) used for transmitting packets to or from the mobile client, and wherein the tunnel has a tunnel identifier and the VLAN has a VLAN identifier;

maintaining a map between the mobile client and the tunnel, wherein the map is maintained in a bridge table that includes the VLAN identifier, the tunnel identifier, and a Media Access Control (MAC) address corresponding to the mobile client;

receiving a packet;

using the map to associate the tunnel with the packet; and

forwarding the packet using the map.

10. The system of claim 9 , wherein receiving the packet includes receiving the packet using the tunnel.

11. The system of claim 10 , wherein the operations further include:

decapsulating the packet.

12. The system of claim 10 , wherein the operations further include:

overwriting a VLAN identifier value of the packet, wherein the VLAN identifier value of the packet is overwritten with an assigned VLAN identifier value associated with the home agent for the mobile client.

13. The system of claim 12 , wherein overwriting includes looking up the assigned VLAN identifier value in the bridge table.

14. The system of claim 9 , wherein the tunnel is a secure tunnel.

15. The system of claim 9 , wherein forwarding includes assigning a VLAN identifier value to the packet, and wherein forwarding includes forwarding the packet using the secure tunnel.

16. The system of claim 9 , wherein the operations further include:

receiving a home agent discovery request, wherein the home agent discovery request includes the MAC address corresponding to the mobile client; and

modifying the bridge table to associate the VLAN identifier with the tunnel identifier.

17. A non-transitory computer readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:

determining, by a network device, that a mobile client has roamed from a home network to a foreign network, wherein the home network is associated with a home agent for the mobile client, wherein the foreign network is associated with a foreign agent for the mobile client, and wherein the network device serves as the home agent;

establishing a tunnel associated with a data connection between the home agent and the foreign agent, wherein the tunnel corresponds to a virtual local area network (VLAN) used for transmitting packets to or from the mobile client, and wherein the tunnel has a tunnel identifier and the VLAN has a VLAN identifier;

maintaining a map between the mobile client and the tunnel, wherein the map is maintained in a bridge table that includes the VLAN identifier, the tunnel identifier, and a Media Access Control (MAC) address corresponding to the mobile client;

receiving a packet;

using the map to associate the tunnel with the packet; and

forwarding the packet using the map.

18. The non-transitory computer readable medium of claim 17 , wherein receiving the packet includes receiving the packet using the tunnel.

19. The non-transitory computer readable medium of claim 18 , further comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including:

decapsulating the packet.

20. The non-transitory computer readable medium of claim 18 , further comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including:

overwriting a VLAN identifier value of the packet, wherein the VLAN identifier value of the packet is overwritten with an assigned VLAN identifier value associated with the home agent for the mobile client.

21. The non-transitory computer readable medium of claim 20 , wherein overwriting includes looking up the assigned VLAN identifier value in the bridge table.

22. The non-transitory computer readable medium of claim 17 , wherein the tunnel is a secure tunnel.

23. The non-transitory computer readable medium of claim 17 , wherein forwarding includes assigning a VLAN identifier value to the packet, and wherein forwarding includes forwarding the packet using the secure tunnel.

24. The non-transitory computer readable medium of claim 17 , further comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including:

receiving a home agent discovery request, wherein the home agent discovery request includes the MAC address corresponding to the mobile client; and

modifying the bridge table to associate the VLAN identifier with the tunnel identifier.