Automatic IPSec Security Association Negotiation in Mobile-Oriented IPv6 Networks

Abstract

Integrated mobility and security support is one of the most desirable feature for a network. Although IPv6 offers protocol which satisfies both these requirements, practical issues still exist which do not allow for a really integrated environment. Our contribution towards such integration is the development of a solution to automate the task of setting up the appropriate IPSec Security Associations each time a node connects to an IPv6 subnet. The result is mipsd, a user-space daemon which interacts with the IKE daemon running at the mobile host to allow the completely automated setup of SA towards the corresponding Security Gateway.