1 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Gopal Dommety Mobile IP VPN Design Team Update

222 VPN Design Team Update Problem Statement Base solution Optimizations Time Line

333 Problem Statement Draft The Design Teams definition of Problem Statement is finished Focused on IPv4 Security Review by Radia Perlman Draft is published draft-ietf-mobileip-vpn-problem-statement-req-03 Last Call, Review by the WG and IESG

444 Solution Update Solution Base Solution Optimizations Base Solution – work completed Need security review Last Call for base solution after security review and Problem statement review by WG and IESG Optimizations to be completed before next IETF

555 Intranet Internet Problem statement DM Zone VPN Conc Enterprise -IP Sec VPN is used to access the Enterprise network -Seamless connectivity while outside the VPN domain Seamless mobility when moving from one hotspot to another or to wide area wireless -Seamless connectivity while inside the VPN domain -Mobility while moving between inside & outside a VPN Domain

666 Intranet Internet Scenarios Internet MSP Encrypted IP Tunnel Airline 1 Ticketing, Baggage CN HA DM Zone VPN Conc Enterprise -Placement of mobile IP and VPN elements: Several scenarios -The scenario shown above is considered in detail. Assumptions Access to the Enterprise from the Internet is via IP Sec VPNs IP Sec may not be always used when MN is within the Enterprise network FAs may be present and the solution has to take care of this scenario NOT CONSIDERED: IP sec instead of L2 encryption (of WLANs)

777 Issues and Requirements Issues With out FA: The IPsec SA needs to be renegotiated on movement With FA: FA has no visibility into IP sec packets Problem Statement Draft Includes: Issues that need to be addressed for providing seamless mobility in this scenario Requirements for the solution Working Group Last Call

888 Thank You