[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [mobile-ip] Re: FW: I-D ACTION:draft-tsirtsis-dsmip-problem-0 0.txt



Francis,

Not all is solved with VPN tunnels even if you manage to renegotiate the VPN
tunnel automatically when the mobile moves...BTW, I think this is a worthy
goal too and there are products already that support that kind of idea
combining MIPv4 and IPSEC.

There are other people, however, that would like to use Mobile IP (v4 or v6)
for local mobility management in a wireless operator kind of
environment....in which case it would be preferable not to have to use two
mobility management protocols.

You not being interested in that approach does not make this a non-issue
:--)

George

-----Original Message-----
From: Francis Dupont [mailto:Francis.Dupont@enst-bretagne.fr] 
Sent: Wednesday, July 30, 2003 2:20 PM
To: EricLKlein
Cc: mobile-ip@sunroof.eng.sun.com; v6ops@ops.ietf.org
Subject: Re: [mobile-ip] Re: FW: I-D ACTION:draft-tsirtsis-dsmip-problem-0
0.txt 


 In your previous mail you wrote:

   From: "Francis Dupont" >
   
   => as a cross-version tunnel will never be "optimized" (i.e., MN-CN
direct
   > communication is not possible), IMHO mobile-ip solutions are clearly
   > overkilling in this kind of environments: a smart "road warrior" IPsec
   > VPN will be enough. Today two parts are missing:
   >  - cross-version IPsec tunnels are not commonly available (note for
   >    IPsec implementors: they are specified in RFC 2401, why do you not
   >    support them?)
   
   
   Are you recommending that all mobile phone operators should create IP
VPN's
   for all phones on their network and to maintain them for visitors and
   roamers on other networks?
   
=> you already have a "VPN" between the MN and the HA in MIPv6, so I feel
free to recommend this (:-).

   This sounds like a lot of IP VPNs to create and maintain across multiple
   networks for people who roam, and unnecessary for those that don't.

=> I don't understand the "multiple networks" argument. The "VPN" is just an
IPsec SA pair (MIPv6 uses two pairs) between a mobile and a fix point (the
mobile-ip Home Agent).

   We are not talking dial-up users or even data users, jut straight
   3G, GPRS, or WAP users.
   
=> we are talking about IP users.

Regards

Francis.Dupont@enst-bretagne.fr