1 Mobile-IP Priority Home Agents for Aerospace and Military Applications Terry Bell, Will Ivancic, Dave Stewart, Dan Shell and Phil Paulsen

2 Outline Mobile-IPv4 Operations Priority Home Agent Implementation Architectural Concepts Field Demonstration Virtual Mission Operations Center Potential Problems and Issues Migration Toward IPv6

3 Mobile-IP Operation IPv4

Internet or Intranet Mobile Node “ ” Home IP Care-Off-Address Corresponding Node Access Router NASA Ames Home Agent NASA Goddard Mobile-IP (IPv4) Teminology Foreign Agent NASA Glenn 1.Advertises Mobile Node’s Network to the world 2.Maintains current location for Mobile Node 3.Tunnels datagrams for delivery to the Mobile Node 1.Provides routing service for Mobile Node while registered with HA 2.Provides temporary address to Mobile Node (Care-off-Address) 3.Detunnels and delivers datagrams to the Mobile Node 1.Mobile Node can be a host or a router 2.Changes its point of attachment from one network or subnetwork to the next 3.Detunnels datagrams is collocated- care-of-address is used (attached to access router) 4.Can be multi-homed (have more than one interface active) 1.Any node that is communicating with the mobile node 2.Can be router or host 1.Provides routing service for Mobile Node while registered with HA 2.Provides temporary address to Mobile Node (Collocated Care-off- Address)

Mobile Node Foreign Agent Home Agent “ ” NASA Ames Corresponding Node Internet or Intranet NASA Glenn Home IP Care-Off-Address NASA Goddard Registration using Foreign Agents Bi-directional Tunnel if Reverse Tunneling Is specified. Foreign Agent Services Advertisement Request for Foreign Agent Services Registration Create Tunnel between FA and HA

Mobile Node Foreign Agent Home Agent “ ” NASA Ames Corresponding Node Internet or Intranet NASA Glenn Home IP Care-Off-Address NASA Goddard Data Flow using Foreign Agents (Triangular Routing)

Mobile Node Foreign Agent Home Agent “ ” NASA Ames Corresponding Node Internet or Intranet NASA Glenn Home IP Care-Off-Address NASA Goddard Data Flow using Foreign Agents (Reverse Tunneling)

Mobile Node Access Router Home Agent “ ” NASA Ames Corresponding Node Internet or Intranet NASA Glenn Home IP Care-Off-Address NASA Goddard Mobile-IP (IPv4) using Collocated Care-Of-Address DHCP or Connection Established Bi-directional Tunnel if Reverse Tunneling Is specified.

Mobile Node Access Router Home Agent “ ” NASA Ames Corresponding Node Internet or Intranet NASA Glenn Home IP Care-Off-Address NASA Goddard Data Flow using Collocated Care-Of-Address (Triangular Routing)

Mobile Node Access Router Home Agent “ ” NASA Ames Corresponding Node Internet or Intranet NASA Glenn Home IP Care-Off-Address NASA Goddard Data Flow using Collocated Care-Of-Address (Reverse Tunneling)

Tunnel-0 Tunnel-1 Mobile Router (Mobile Node) Foreign Agent Home Agent Corresponding Node Internet WAN Internet WAN Internet Roaming Interface Virtual LAN Interface HA Loopback Virtual Interface FA WAN MR Loopback Virtual Interface COA Mobile-Router (IPv4) Mobile Router Second Tunnel Created between FA and HA Tunnel Created between MR and HA Bi-directional Tunnels if Reverse Tunneling Is specified.

Mobile Router (Mobile Node) Foreign Agent Home Agent Corresponding Node Internet WAN Tunnel Internet WAN Internet Roaming Interface Tunnel HA Loopback Virtual Interface FA WAN Data Flow Mobile Router (Reverse Tunneling) Virtual LAN Interface MR Loopback Virtual Interface COA

Mobile Router (Mobile Node) Home Agent Corresponding Node Internet WAN Tunnel Internet WAN Roaming Interface Foreign Agent Tunnel HA Loopback Virtual Interface FA WAN Data Flow Collocated Care-Of-Address (NO reverse tunneling) Internet No Foreign Agent No Second Tunnel Virtual LAN Interface MR Loopback Virtual Interface COA

Mobile Router (Mobile Node) Home Agent Corresponding Node Internet WAN Tunnel Internet WAN Internet Roaming Interface HA Loopback Virtual Interface Mobile-Router (IPv4) Collocated Care-Of-Address (NO reverse tunneling) Access Router Virtual LAN Interface MR Loopback Virtual Interface COA

15 Priority Home Agent Operation IPv4

16 Secondary Home Agent (reparenting the HA) Primary Home Agent Secondary Home Agent Reparenting Home Agent Helps resolve triangular routing And Route optimization Problem over long distances X

Mobile Router Home Agent #2 Foreign Agent Europe Home Agent # Paris, France Internet or Intranet Frankfort, Germany Home IP Virginia, USA Prioritized Home Agents – Using Access Lists Registration Request HA Priority: HA#1 then HA#2 Care-Off-Address Acess List: Deny Allow Foreign Agent United States Baltimore, Maryland Must be in same Autonomous System so route is advertised properly Acess List: Deny Allow Registration Request Denied Registration Request to HA#2 Registration Request Granted Establish Tunnels

18 Emergency Backup (Hub / Spoke Network) If primary control site becomes physically inaccessible but can be electronically connected, a secondary site can be established. If primary control site is physically incapacitated, there is no backup capability.

19 Secondary Home Agent (Fully Meshed Network) If primary control site is physically incapacitated, a second or third or forth site take over automatically.

Mobile Router Home Agent #2 Foreign Agent Europe Home Agent # Paris, France Internet or Intranet Frankfort, Germany Home IP Virginia, USA Prioritized Home Agents – Catastrophic Failure HA Priority: HA#1 then HA#2 Care-Off-Address Acess List: Allow All Foreign Agent United States Baltimore, Maryland Must be in same Autonomous System so route is advertised properly Acess List: Allow All Registration Request Granted Catastrophic Failure Waiting for Registration Request Granted Registration Request #2 Waiting for Registration Request Granted Registration Request #1 Registration Request #3 Waiting for Registration Request Granted Establish Tunnels Registration Request HA#2

21 Intelligence Control Center Battle Group Command Center (BGCC) Primary HA Reach Back via Satellite Tactical data forwarded from surveillance satellites to the BGCC. Mobile Network Secondary HA Foreign Agents Mobile Network Command on the move Tear Down for move to new location X X Secondary HA takes control during move

Access List: Allow FA2 Deny FA1 Access List: Allow FA1 Deny FA2 WAN connection for Call Manager (VOIP) to operate at HA2 Protected LANs

Protected LAN Prioritized HAs

24 Virtual Mission Operations Center HA2 Open Internet SSTL DMC Satellite SSTL Satellite Controllers Surrey, England FA1 MR Universal Space Network FA2 Virtual Mission Operations Center Colorado Springs HA1 Shadow VMOC GRC FA3 EOSDIS Cisco / GRC Researchers Cleveland b link with HAIPE Mobile Warfighter Vandenburg Synchronized Databases

Trusted Network Environment (TNE) at VMOC core Data Virtual Mission Operations Center (VMOC ) VMOC routes operator request to SV and or Knowledge Data Base Secure Network Operations Center Information Protection IO/IW Centers Trusted Gateway Knowledge Base Data Warehouse Mission Integrator Condition Monitor Scheduler Intelligent Multiplexor / Demultiplexor Shadow VMOC Europe HA United States HA Europe FA Command And Control Virtual Mission Operations Center For a Global Space Network

26 Potential Problems / Issues Number or registration retries and time between retries are critical parameters effecting system performance Particularly applicable to VMOC for LEO spacecraft control Prioritized Home Agents must reside in the same autonomous systems to ensure mobile routes are advertised with the proper weighting

27 Migration to IPv6 Work is taking place in the Networks in Motion (NEMO) working group of the Internet Engineering Task Force (IETF) Bidirectional Tunnels specified in “Basic Implementation” – similar to reverse tunneling. No route optimization in Basic draft Interoperability with IPv4 specification including IPv4 and NAT transversal IPv6 Inter-Home Agent draft specification is similar to dynamic Home Agents for IPv4

Mobile Network Access Router Home Agent Corresponding Node Internet or Intranet Basic Mobile Network Support for IPv6 x Link UP Mobile Network Nodes Binding Update Single Bidirectional Tunnel From MR to HA

30

31 IPv6 Aeronautical Network Status IPv6 Mobile Router working over IPv6 and IPv4 WAN networks (including T- Mobile GRPS and Verizon 1xRTT cellular networks). IPv6 Mobile connectivity between NASA Glenn, Eurocontrol and Computer Networks and Software, Inc.

32 Papers and Presentations or and pick “Papers and Presentations”

33 Backup Slide

34 Mobile Networking Solutions Routing Protocols Route Optimization  Convergence Time  Sharing Infrastructure – who owns the network? Mobile-IP  Route Optimization Convergence Time Sharing Infrastructure Security – Relatively Easy to Secure Domain Name Servers Route Optimization  Convergence Time  Reliability