The growth of the Internet and the success of mobile networks suggest that the next trend will be an increasing demand for mobile access to Internet applications. It is therefore increasingly important that mobile radio networks support these applications in an efficient manner. Moreover, in such a hybrid environment, where clients are connecting to ever growing networks in an ad-hoc fashion, t...

BGP/MPLS VPN is recently receiving much attention from industries and standard bodies. It enables ISP to provide IP-service with QoS guarantee to the customers over shared MPLS backbone. In this paper, we present a resilient path management mechanism for BGP/MPLS VPN. An existence condition for finding fast backup path which satisfies the resilience constraint is derived for a full mesh BGP/MPL...

Status of This Memo This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. This document proposes an automated mechanism for establishing tunnels between provider-edge routers in a VPN, but does not provide an automated mechanism for establishing security associations for these tunnels. Without suc...

The VPN Tree Routing Conjecture is a conjecture about the Virtual Private Network Design problem. It states that the symmetric version of the problem always has an optimum solution which has a tree-like structure. In recent work, Hurkens, Keijsper and Stougie (Proc. IPCO XI, 2005; SIAM J. Discrete Math., 2007) have shown that the conjecture holds when the network is a ring. A shorter proof of t...

Companies nowadays rely on the Internet for various purposes. One of these, is communication between employees or work teams at different locations. Suspicions of governmental agencies performing traffic collection and decryption exist, posing the threat of companies having their Internet communication leaked. This is specially relevant when confidential information is transmitted and their bus...

Abbildung 1: AH und ESP im Transport-und Tunnelmodus (vereinfachte Darstellung) Der Transportmodus hat den Vorteil, dass jedem IP-Paket nur wenige Bytes hinzugefügt werden. Demgegenüber bietet der Tunnelmodus eine höhere Sicherheit, weil das gesamte IP-Paket authentifiziert bzw. verschlüsselt wird.on Authority (RA) und Certificate Authority (CA) zusammen, die in einem Trust Center angesiedelt s...

This paper addresses the issue of cost-optimal voice over IP (VoIP) network design. In the applied model, the whole VoIP network is divided into two logical components: the access network and the transport network. The access network consists of VoIP end-points that connect to the transport network through edge routers serving as gateways. Since multiple edge routers may be available for any gi...

IPsec protocol[1] is a set of security extensions developed by the IETF and it provides privacy and authentication services at the IP layer by using modern cryptography. In this paper, we describe both of H/W and S/W architectures of our router system, SRS-10. The system is designed to support high performance routing and IPsec VPN. Especially, we used Cavium’s CN2560 processor to implement IPs...