Network architecture and protocols for BGP/MPLS based mobile VPN

Abstract

We propose a provider edge (PE)-based provider provisioned mobile VPN mechanism, which enables efficient communication between a mobile VPN user and one or more correspondents located in different VPN sites. The proposed mechanism not only reduces the IPSec tunnel overhead at the mobile user node to the minimum, but also enables the traffic to be delivered through optimized paths among the (mobile) VPN users without incurring significant extra IPSec tunnel overhead. The proposed architecture and protocols are based on the BGP/MPLS VPN. A service provider platform entity named PPVPN (Provider Provisioned VPN) Network Server (PNS) is defined in order to extend the BGP/MPLS VPN service to the mobile users. Compared to the existing mechanisms, the proposed mechanism requires less overhead with respect to the IPSec tunnel management. The simulation results also show that it outperforms the existing mobile VPN mechanisms with respect to the handoff latency and/or the end-to-end packet delay. © 2008 Springer Berlin Heidelberg.