ch27 AAA for Mobile IP 移动IP技术 教学课件.pptVIP

AAA for Mobile IP the AAA server not only to authenticate the MN and its message, but also to generate the necessary keying material to establish trust relationships for the protection of future Mobile IP transactions. When the AAA server has access to the user’s service profile, it can make decisions regarding authorization of the user for using network resources as well Mobile IP registration request is really an authorization request. Through the registration, the mobile node asks the HA to grant it the right to have two IP addresses and to use the HA resources required for support of traffic routing for those two IP addresses. Using the AAA infrastructure, the foreign network can simply refer to the client’s home domain to verify its legitimacy, provide the required services, collect the accounting data for the provided services and bill the user’s home domain accordingly, without having to deal with the client directly. Mobile IP-AAA signaling 1 MIPv4 Authentication Extension draft-ietf-mip4-rfc3344bis-06,March 2008 -RFC 5944 2 Mobile IPv4 Challenge/Response Extensions (RFC3012/4721) 3 Key Generation Extensions (RFC 3957) 4 AAA Extensions for Interaction with Mobile IP Diameter Mobile IPv4 Application, RFC4004 Mobile IPv4 RADIUS Requirements, RFC 5030 RADIUS Mobile IPv4 extensions draft-nakhjiri-radius-mip4-02 Mobile IP-AAA signaling S. Glass, T. Hiller, S. Jacobs and C. Perkins, “Mobile IP Authentication, Authorization, and Accounting Requirements”, RFC2977, October 2000. F. Johansson, T. Johansson, “Mobile IPv4 Extension for Carrying Network Access Identifiers”, RFC3846, June 2004 C. Perkins, P. Calhoun and J. Bharatia, Mobile IPv4 Challenge/Response Extensions (3012 Revised), RFC4721, January 2007 Perkins, C. and P. Calhoun, Authentication, Authorization, and Accounting (AAA) Registration Keys for Mobile IPv4, RFC 3957, March 2005. P. Calhoun, T. Johansson, C. Perkins, T. Hiller, Ed. P. McCann, “Diameter Mobile IPv4 Application”, RFC4004, August 2005