Professional Documents
Culture Documents
UNIT-4
(Network Protocols/Mobile IP)
SUGUMAR.D,
Lecturer,
ECE Department,
Karunya University.
7/1/2015
Karunya University
Karunya University
Unit-4 Mobile IP
Routing
based on IP destination address, network prefix (e.g. 129.13.42) determines
physical subnet
change of physical subnet implies change of IP address to have a topological
correct address (standard IP) or needs special entries in the routing tables
Specific routes to end-systems?
change of all routing table entries to forward packets to the right destination
does not scale with the number of mobile hosts and frequent changes in the
location, security problems
Changing the IP-address?
adjust the host IP address depending on the current location
almost impossible to find a mobile system, DNS updates take to long time
TCP connections break, security problems
7/1/2015
Karunya University
Unit-4 Mobile IP
Requirements for Mobile IPv4 (RFC 3344, was: 3220, was: 2002 , updated by:
4721)
Transparency
mobile end-systems keep their IP address
continuation of communication after interruption of link possible
point of connection to the fixed network can be changed
Compatibility
support of the same layer 2 protocols as IP
no changes to current end-systems and routers required
mobile end-systems can communicate with fixed systems
Security
authentication of all registration messages
Efficiency and scalability
only little additional messages to the mobile system required (connection
typically via a low bandwidth radio link)
world-wide support of a large number of mobile systems in the whole Internet
7/1/2015
Karunya University
Unit-4 Mobile IP
Terminology
Karunya University
Unit-4 Mobile IP
Example network
HA
MN
router
home network
mobile end-system
Internet
FA foreign
network
router
CN
end-system
7/1/2015
router
5
MN
home network
receiver
Internet
FA
CN
sender
7/1/2015
foreign
network
home network
MN
sender
Internet
FA
foreign
network
CN
receiver
7/1/2015
Karunya University
Overview
COA
home
network
router
FA
router
HA
MN
foreign
network
Internet
CN
router
3.
home
network
router
HA
router
FA
2.
MN
4.
foreign
network
Internet
1.
CN
7/1/2015
router
Karunya University
Karunya University
Unit-4 Mobile IP
Network integration
Agent Advertisement
HA and FA periodically send advertisement messages into their physical
subnets
MN listens to these messages and detects, if it is in the home or a foreign
network (standard case for home network)
MN reads a COA from the FA advertisement messages
Advertisement
HA advertises the IP address of the MN (as for fixed systems), i.e. standard
routing information
routers adjust their entries, these are stable for a longer time (HA responsible
for a MN over a longer period of time)
packets to the MN are sent to the HA,
independent of changes in COA/FA
7/1/2015
Karunya University
Unit-4 Mobile IP
Agent advertisement
0
7 8
15 16
23 24
type
code
checksum
#addresses addr. size
lifetime
router address 1
preference level 1
router address 2
preference level 2
31
...
type = 16
type = 16
length
length = 6 + 4 * #COAs
registration lifetime
R: registration required
COA 1
B: busy, no more registrations
COA 2
H: home agent
F: foreign agent
M: minimal encapsulation
G: GRE encapsulation
r: =0, ignored (former Van Jacobson compression)
T: FA supports reverse tunneling
reserved: =0, ignored
7/1/2015
sequence number
R B H F M G r T reserved
...
10
Karunya University
Unit-4 Mobile IP
Registration
MN
FA
HA
MN
HA
7/1/2015
11
Karunya University
Unit-4 Mobile IP
31
identification
extensions . . .
S: simultaneous bindings
B: broadcast datagrams
D: decapsulation by MN
M mininal encapsulation
G: GRE encapsulation
r: =0, ignored
T: reverse tunneling requested
x: =0, ignored
7/1/2015
12
Karunya University
Unit-4 Mobile IP
15 16
lifetime
31
identification
Example codes:
extensions . . .
registration successful
0 registration accepted
1 registration accepted, but simultaneous mobility bindings unsupported
registration denied by FA
65 administratively prohibited
66 insufficient resources
67 mobile node failed authentication
68 home agent failed authentication
69 requested Lifetime too long
registration denied by HA
129 administratively prohibited
131 mobile node failed authentication
133 registration Identification mismatch
135 too many simultaneous mobility bindings
7/1/2015
13
Karunya University
Unit-4 Mobile IP
Encapsulation
original IP header original data
7/1/2015
new IP header
new data
outer header
inner header
original data
14
Karunya University
Unit-4 Mobile IP
Encapsulation I
length
flags fragment offset
IP checksum
length
flags fragment offset
IP checksum
7/1/2015
15
Karunya University
Unit-4 Mobile IP
Encapsulation II
7/1/2015
16
Karunya University
Unit-4 Mobile IP
outer header
GRE
header
new header
new data
original
header
original data
original
header
original data
length
flags fragment offset
IP checksum
C reserved0
checksum (optional)
ver. protocol
reserved1 (=0)
length
flags fragment offset
IP checksum
7/1/2015
17
Karunya University
Unit-4 Mobile IP
7/1/2015
18
Karunya University
Unit-4 Mobile IP
HA
Data
Update
FAold
FAnew
Data
MN
Data
ACK
Data
Data
MN changes
location
Update
ACK
Data
Data
Warning
Registration
Data
Request
Update
ACK
Data
Data
t
7/1/2015
19
Karunya University
Unit-4 Mobile IP
MN
home network
Internet
sender
FA foreign
network
CN
receiver
7/1/2015
1. MN sends to FA
2. FA tunnels packets to HA
by encapsulation
3. HA forwards the packet to the
receiver (standard case)
20
Karunya University
Unit-4 Mobile IP
7/1/2015
21
Karunya University
Unit-4 Mobile IP
Mobile IP was developed for IPv4, but IPv6 simplifies the protocols
security is integrated and not an add-on, authentication of registration is
included
COA can be assigned via auto-configuration (DHCPv6 is one candidate), every
node has address auto-configuration
no need for a separate FA, all routers perform router advertisement which can
be used instead of the special agent advertisement; addresses are always colocated
MN can signal a sender directly the COA, sending via HA not needed in this
case (automatic path optimization)
soft hand-over, i.e. without packet loss, between two subnets is supported
MN sends the new COA to its old router
the old router encapsulates all incoming packets for the MN and forwards
them to the new COA
authentication is always granted
7/1/2015
22
Karunya University
Unit-4 Mobile IP
Security
authentication with FA problematic, for the FA typically belongs to another
organization
no protocol for key management and key distribution has been standardized in
the Internet
patent and export restrictions
Firewalls
typically mobile IP cannot be used together with firewalls, special set-ups are
needed (such as reverse tunneling)
QoS
many new reservations in case of RSVP
tunneling makes it hard to give a flow of packets a special treatment needed for
the QoS
Security, firewalls, QoS etc. are topics of research and discussions
7/1/2015
23
Karunya University
Unit-4 Mobile IP
Security in Mobile IP
Security requirements (Security Architecture for the Internet Protocol, RFC 4301,
was: 1825, 2401)
Integrity
any changes to data between sender and receiver can be detected by the
receiver
Authentication
sender address is really the address of the sender and all data received is really
data sent by this sender
Confidentiality
only sender and receiver can read the data
Non-Repudiation
sender cannot deny sending of data
Traffic Analysis
creation of traffic and user profiles should not be possible
Replay Protection
receivers can detect replay of messages
7/1/2015
24
Karunya University
Unit-4 Mobile IP
IP security architecture I
Authentification-Header
authentication
header
UDP/TCP-Paket
UDP/TCP
data
IP header
7/1/2015
encrypted
ESP header
encrypted data
25
Karunya University
Unit-4 Mobile IP
IP security architecture II
MH
registration reply
registration request
FA
registration reply
HA
7/1/2015
26
Karunya University
Unit-4 Mobile IP
Key distribution
HA
MH
response:
EHA-FA {session key}
EHA-MH {session key}
7/1/2015
27
Karunya University
Unit-4 Mobile IP
IP Micro-mobility support
Micro-mobility support:
Efficient local handover inside a foreign domain
without involving a home agent
Reduces control traffic on backbone
Especially needed in case of route optimization
Important criteria:
Security Efficiency, Scalability, Transparency, Manageability
7/1/2015
28
Karunya University
Unit-4 Mobile IP
Cellular IP
Operation:
CIP Nodes maintain routing
entries (soft state) for MNs
Multiple entries possible
Routing entries updated based on
packets sent by MN
CIP Gateway:
Internet
Mobile IP
CIP Gateway
data/control
packets
from MN 1
Security provisions:
all CIP Nodes share
network key
MN key: MD5(net key, IP addr)
MN gets key upon registration
7/1/2015
BS
MN1
BS
BS
packets from
MN2 to MN 1
MN2
29
Karunya University
Unit-4 Mobile IP
Advantages:
Initial registration involves authentication of MNs
and is processed centrally by CIP Gateway
All control messages by MNs are authenticated
Replay-protection (using timestamps)
Potential problems:
MNs can directly influence routing entries
Network key known to many entities
(increases risk of compromise)
No re-keying mechanisms for network key
No choice of algorithm (always MD5, prefix+suffix mode)
Proprietary mechanisms (not, e.g., IPSec AH)
7/1/2015
30
Karunya University
Unit-4 Mobile IP
Advantages:
Simple and elegant architecture
Mostly self-configuring (little management needed)
Integration with firewalls / private address support possible
Potential problems:
Not transparent to MNs (additional control messages)
7/1/2015
31
Karunya University
Operation:
HAWAII
Unit-4 Mobile IP
Internet
HA
Backbone
Router
Crossover
Router
Security provisions:
MN-FA authentication mandatory
Challenge/Response Extensions mandatory
4
BS
BS
Mobile IP
3
MN
7/1/2015
2
Mobile IP
BS
MN
DHCP
Server
DHCP
32
Karunya University
Unit-4 Mobile IP
HAWAII: Security
Advantages:
Mutual authentication and C/R extensions mandatory
Only infrastructure components can influence routing entries
Potential problems:
Co-located COA raises DHCP security issues
(DHCP has no strong authentication)
Decentralized security-critical functionality
(Mobile IP registration processing during handover)
in base stations
Authentication of HAWAII protocol messages unspecified
(potential attackers: stationary nodes in foreign network)
MN authentication requires PKI or AAA infrastructure
7/1/2015
33
Karunya University
Unit-4 Mobile IP
Advantages:
Mostly transparent to MNs
(MN sends/receives standard Mobile IP messages)
Explicit support for dynamically assigned home addresses
Potential problems:
Mixture of co-located COA and FA concepts may not be
supported by some MN implementations
No private address support possible
because of co-located COA
7/1/2015
34
Karunya University
Unit-4 Mobile IP
Internet
Operation:
Network contains mobility anchor point (MAP)
mapping of regional COA (RCOA) to link COA (LCOA)
HA
RCOA
MAP
binding
update
AR
AR
LCOAnew LCOAold
Security provisions:
no HMIP-specific
security provisions
binding updates should be
authenticated
7/1/2015
MN
MN
35
Karunya University
Unit-4 Mobile IP
Advantages:
Local COAs can be hidden,
which provides at least some location privacy
Direct routing between CNs sharing the same link is possible (but might be
dangerous)
Potential problems:
Decentralized security-critical functionality
(handover processing) in mobility anchor points
MNs can (must!) directly influence routing entries via binding updates
(authentication necessary)
7/1/2015
36
Karunya University
Unit-4 Mobile IP
Advantages:
Handover requires minimum number
of overall changes to routing tables
Integration with firewalls / private address support possible
Potential problems:
Not transparent to MNs
Handover efficiency in wireless mobile scenarios:
Complex MN operations
All routing reconfiguration messages
sent over wireless link
7/1/2015
37
Karunya University
Unit-4 Mobile IP
Application
simplification of installation and maintenance of networked computers
supplies systems with all necessary information, such as IP address, DNS
server address, domain name, subnet mask, default router etc.
enables automatic integration of systems into an Intranet or the Internet, can be
used to acquire a COA for Mobile IP
Client/Server-Model
the client sends via a MAC broadcast a request to the DHCP server (might be
via a DHCP relay)
DHCPDISCOVER
DHCPDISCOVER
server
client
7/1/2015
client
relay
38
Karunya University
Unit-4 Mobile IP
client
initialization
DHCPDISCOVER
DHCPDISCOVER
server
(selected)
determine the
configuration
DHCPOFFER
DHCPOFFER
collection of replies
selection of configuration
DHCPREQUEST
(reject)
DHCPREQUEST
(options)
confirmation of
configuration
DHCPACK
initialization completed
release
DHCPRELEASE
7/1/2015
delete context
39
Karunya University
Unit-4 Mobile IP
DHCP characteristics
Server
several servers can be configured for DHCP, coordination not yet standardized
(i.e., manual configuration)
Renewal of configurations
IP addresses have to be requested periodically, simplified protocol
Options
available for routers, subnet mask, NTP (network time protocol) timeserver,
SLP (service location protocol) directory, DNS (domain name system)
7/1/2015
40
Karunya University
Unit-4 Mobile IP
A
7/1/2015
C
41
Karunya University
Unit-4 Mobile IP
Examples
Single-hop: All partners max. one hop apart
Bluetooth piconet, PDAs in a room,
gaming devices
Multi-hop: Cover larger distances,
circumvent obstacles
Bluetooth scatternet, TETRA police network,
car-to-car networks
7/1/2015
42
Karunya University
Unit-4 Mobile IP
Router
7/1/2015
End system
43
Karunya University
Unit-4 Mobile IP
N6
N6
N7
N1
N1
N2
N3
N4
N3
N2
N4
N5
time = t1
N5
time = t2
good link
weak link
7/1/2015
44
Karunya University
Unit-4 Mobile IP
Distance Vector
periodic exchange of messages with all physical neighbors that contain
information about who can be reached at what distance
selection of the shortest path if several paths available
Link State
periodic notification of all routers about the current state of all physical links
router get a complete picture of the network
Example
ARPA packet radio network (1973), DV-Routing
every 7.5s exchange of routing tables including link quality
updating of tables also by reception of packets
routing problems solved with limited flooding
7/1/2015
45
Karunya University
Unit-4 Mobile IP
Reasons
Classical approaches from fixed networks fail
Very slow convergence, large overhead
High dynamicity, low bandwidth, low computing power
7/1/2015
46
Karunya University
Unit-4 Mobile IP
7/1/2015
47
Karunya University
Unit-4 Mobile IP
Early work
on demand version: AODV
7/1/2015
48
Karunya University
Unit-4 Mobile IP
Discover a path
only if a path for sending packets to a certain destination is needed and no path
is currently available
Maintaining a path
only while the path is in use one has to make sure that it can be used
continuously
7/1/2015
49
Karunya University
Unit-4 Mobile IP
Path discovery
broadcast a packet with destination address and unique ID
if a station receives a broadcast packet
if the station is the receiver (i.e., has the correct destination address) then return the
packet to the sender (path was collected in the packet)
if the packet has already been received earlier (identified via ID) then discard the
packet
otherwise, append own address and broadcast packet
Optimizations
limit broadcasting if maximum diameter of the network is known
caching of address lists (i.e. paths) with help of passing packets
stations can use the cached information for path discovery (own paths or paths for
other hosts)
7/1/2015
50
Karunya University
Unit-4 Mobile IP
Sending from C to O
H
L
D
F
7/1/2015
51
Karunya University
Unit-4 Mobile IP
Broadcast
[O,C,4711]
C
[O,C,4711]
H
L
D
F
7/1/2015
52
Karunya University
Unit-4 Mobile IP
[O,C/G,4711]
C
[O,C/B,4711]
B
[O,C/G,4711]
I
[O,C/E,4711] H
L
D
F
7/1/2015
53
Karunya University
Unit-4 Mobile IP
[O,C/G/I,4711]
[O,C/B/A,4711]
[O,C/E/H,4711]
D
F
[O,C/B/D,4711]
(alternatively: [O,C/E/D,4711])
7/1/2015
54
Karunya University
Unit-4 Mobile IP
[O,C/G/I/K,4711]
H
L
D
F
J
[O,C/E/H/J,4711]
[O,C/B/D/F,4711]
7/1/2015
55
Karunya University
Unit-4 Mobile IP
[O,C/G/I/K/M,4711]
H
L
D
F
J
[O,C/E/H/J/L,4711]
(alternatively: [O,C/G/I/K/L,4711])
7/1/2015
56
Karunya University
Unit-4 Mobile IP
H
L
D
F
N
[O,C/E/H/J/L/N,4711]
7/1/2015
57
Karunya University
Unit-4 Mobile IP
Path: M, K, I, G
H
L
D
F
7/1/2015
58
Karunya University
Unit-4 Mobile IP
7/1/2015
59
Karunya University
Unit-4 Mobile IP
Interference-based routing
N2
R1
S1
N3
N4
N5
N6
R2
S2
N7
N8
N9
neighbors
(i.e. within radio range)
7/1/2015
60
Karunya University
Unit-4 Mobile IP
7/1/2015
61
Karunya University
Unit-4 Mobile IP
Flat
proactive
FSLS Fuzzy Sighted Link State
FSR Fisheye State Routing
OLSR Optimized Link State Routing Protocol (RFC 3626)
TBRPF Topology Broadcast Based on Reverse Path Forwarding
reactive
AODV Ad hoc On demand Distance Vector (RFC 3561)
DSR Dynamic Source Routing (RFC 4728)
DYMO Dynamic MANET On-demand
Hierarchical
Two promising
candidates:
OLSRv2 and
DYMO
7/1/2015
62
Karunya University
Unit-4 Mobile IP
Multicast
Transmission to a selected group of receivers
Quality-of-Service
Maintenance of a certain transmission quality
Power control
Minimizing interference, energy conservation mechanisms
Security
Data integrity, protection from attacks (e.g. Denial of Service)
Scalability
10 nodes? 100 nodes? 1000 nodes? 10000 nodes?
63
Karunya University
Unit-4 Mobile IP
Base station
Cluster
Super cluster
7/1/2015
64
Karunya University
Unit-4 Mobile IP
Differences to MANETs
Applications: MANET more powerful, more
general WSN more specific
Example:
www.scatterweb.net
65
Karunya University
Unit-4 Mobile IP
GW
SN
SN
Bluetooth, TETRA,
SN
SN
SN
SN
GW
SN
SN
SN
SN
GW
GW
7/1/2015
SN
SN
66
Karunya University
Unit-4 Mobile IP
7/1/2015
Karunya University
Unit-4 Mobile IP
Software
Firmware (C interface)
TinyOS, Contiki
Routing, management, flashing
ns-2 simulation models
Integration into Visual Studio, Eclipse, LabVIEW, Robotics Studio
68
Karunya University
Unit-4 Mobile IP
Gateways
Bluetooth, WLAN, Ethernet, serial, USB,
RS485, GSM/GPRS
Software
Auto-configuration, GPS tracking,
over-the-air programming, building monitoring,
Evaluation board
69
Karunya University
Unit-4 Mobile IP
MSB2148H
Firmware
Very low footprint
Platform independent
Minimal power consumption (5A stand-by)
7/1/2015
70
Karunya University
Unit-4 Mobile IP
Features
Tickless timer/clock (interrupts only if necessary)
Uses 3 kbyte RAM, 28 kbyte Flash (on MSP430)
Highly modular, rule-based programming possible
99% ANSI C, platforms LPC2148, MSP430, i386
Sleep
5A
TX
11-26mA 600mA
RX
19mA
3mA
80mA
>3km
71
Karunya University
Unit-4 Mobile IP
Sensor
Networks:
Research
Areas
Real-World Integration
Gaming, Tourism
Emergency, Rescue
Monitoring, Surveillance
Self-configuring networks
Robust routing
Low-power data aggregation
Simple indoor localization
72
Karunya University
Unit-4 Mobile IP
Sink
7/1/2015
73
Karunya University
Unit-4 Mobile IP
Energy-aware routing
Only sensors with sufficient energy forward
data for other nodes
Example: Routing via nodes with enough solar
power is considered for free
7/1/2015
74
Karunya University
Unit-4 Mobile IP
Solar-aware
routing
Solar-powered node
Send status updates to neighbors
Either proactive or when sniffing ongoing traffic
Have neighbor nodes reroute the traffic
7/1/2015
75
Karunya University
Unit-4 Mobile IP
Manx
Shearwater
7/1/2015
76
Karunya University
Unit-4 Mobile IP
77
Karunya University
Unit-4 Mobile IP
Berliner
Feuerwehr
4450 fire fighters
300000 incidents/year (8000 fires)
7/1/2015
Data transmission
& localization
78
Karunya University
Unit-4 Mobile IP
Step
detection
Part of the fire fighter project
Precise 3D indoor localization without any infrastructure
Sensor fusion, particle filter
RF ToA, RSSI, step detection, compass
Outdoor: GPS
(522721.19N - 131747.76O)
Indoor?
(522721.22N
- 131748.81O)
7/1/2015
79
Karunya University
Real path
GPS values
7/1/2015
Unit-4 Mobile IP
80
Karunya University
Unit-4 Mobile IP
Walking
At least one foot on the ground
Low step frequency
Running
Periods without ground contact
Similar to jumping
Higher step frequency, wider steps
Sprinting
Similar to running
Highest step frequency
Only short distances
81
Karunya University
Unit-4 Mobile IP
Filtered
acceleration
150
100
50
0
0
200
400
600
800
1000
1200
1400
1600
1800
2000
time [ms]
8 km/h
12 km/h
7/1/2015
9 km/h
13 km/h
10 km/h
14 km/h
11 km/h
15 km/h
82
Karunya University
Unit-4 Mobile IP
7/1/2015
83
Karunya University
Unit-4 Mobile IP
7/1/2015
84
Karunya University
Unit-4 Mobile IP
ALARM!
ALARM!
7/1/2015
85
Karunya University
Unit-4 Mobile IP
Event detection
Different Types of Events (Raw Data)
Kicking
Climbing
Peeking
1000
Shaking
900
800
Intensity
Intensity
700
Leaning
600
500
400
300
200
100
0
90.00
100.00
110.00
120.00
130.00
140.00
150.00
160.00
170.00
180.00
190.00
Time(s)
(s)
Time
7/1/2015
86
Karunya University
Unit-4 Mobile IP
Still a lot to do
87
Karunya University
Unit-4 Mobile IP
References
7/1/2015
88