RFC - 2356

Sun's SKIP Firewall Traversal for Mobile IP

Original:	ftp://ftp.isi.edu/in-notes/rfc2356.txt
Authors:	G. Montenegro [Sun Microsystems, Inc.], V. Gupta [Sun Microsystems, Inc.]
Date:	June 1998
Category:	Informational

---

Referred by:	10 RFC
Refers to:	6 RFC

---

Status

This memo provides information for the Internet community. This memo does not specify an Internet standard of any kind. Distribution of this memo is unlimited.

Copyright Notice

Copyright (C) The Internet Society (1998). All Rights Reserved.

Abstract

The Mobile IP specification establishes the mechanisms that enable a mobile host to maintain and use the same IP address as it changes its point of attachment to the network. Mobility implies higher security risks than static operation, because the traffic may at times take unforeseen network paths with unknown or unpredictable security characteristics. The Mobile IP specification makes no provisions for securing data traffic. The mechanisms described in this document allow a mobile node out on a public sector of the internet to negotiate access past a SKIP firewall, and construct a secure channel into its home network.

In addition to securing traffic, our mechanisms allow a mobile node to roam into regions that (1) impose ingress filtering, and (2) use a different address space.

---