For a Secure Mobile IP and Mobile IPv6 Deployment

This paper addresses the security problems raised by the introduction of Mobile IP and Mobile IPv6 protocols into existing networks. First, a protocol-based analysis highlights several malicious attacks like masquerade, and denial of service. Then a classical network architecture is studied for the best placements of mobility entities from the security point of view. Firewalls and, possibly NAT/NAPT devices should take into account the mobility dimension. Impact on the filtering rules enforced within a firewall is presented with inherent security risks. Solutions for the mobile behind a NAT/NAPT device to remain reachable are exposed with introduced security weaknesses.