Combining mobile VPN and internet protocol

• US 8,379,623 B2
• Filed: 07/10/2007
• Issued: 02/19/2013
• Est. Priority Date: 07/10/2007
• Status: Active Grant

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola Solutions, Inc.
• Inventors: Lewis, Adam C., Janneteau, Christophe, Petrescu, Alexandru, Popovich, George
• Primary Examiner(s): Ho, Huy C
• Application Number:
  US11/775,307
• Publication Number:
  US 20090016253A1
• Time in Patent Office: 2,051 Days
• Field of Search: 370/349, 370/392, 370/393, 370/394
• US Class Current: 370/349
• CPC Class Codes: H04L 12/1836 with heterogeneous network architecture
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04W 80/045 involving different protocol versions, e.g. MIPv4 and MIPv6

Abstract

A method (200, 300, 400) of communicating an IPv6 packet (120) over an IPv4 based network (102). The method can include receiving the IPv6 packet to be communicated to a remote unit (104), encapsulating the IPv6 packet in an IPv4 transition packet (122), and communicating the IPv4 transition packet to an IPv4 MVPN (114) server configured to communicate the packet to the remote unit via infrastructure of an IPv4 radio access network. Another aspect of the present invention relates to a method of processing an IPv6 packet received over an IPv4 based network. The method can include receiving from an MVPN server an IPv4 formatted packet that is being communicated to a remote unit, and removing from the packet at least one IPv4 header to result in the packet being formatted in accordance with IPv6.

Claims

1. A method of processing an IPv6 packet received over an IPv4 based network, the method comprising:

receiving at a communication device, from a mobile virtual private network (MVPN) server an internet protocol version 4 (IPv4) packet via an IPv4 network that is being communicated to a remote unit, the IPv4 packet including encapsulated data, an internet protocol version 6 (IPv6) header, an internet protocol security (IPsec) tunnel header identifying the IPv4 address of the MVPN server and the first IPv4 address of the remote unit to form the IPv6 packet, and a MVPN tunnel header identifying an IPv4 address of the MVPN server and a first IPv4 address of the remote unit, but not including an IPv6 to IPv4 transition header identifying an IPv4 address of a transition gateway and a second IPv4 address of the remote unit; and

forming, by the communication device, an internet protocol version 6 (IPv6) packet by removing from the IPv4 packet the MVPN tunnel header and the IPsec tunnel header without having to remove the IPv6 to IPv4 transition header.

2. The method of claim 1, wherein forming the IPv6 packet further comprises removing from the IPv4 packet an IPsec encapsulating security payload (ESP).

3. The method of claim 2, wherein the IPv4 packet consists of the IPv6 packet, the IPsec ESP, the IPsec tunnel header, and the MVPN tunnel header.

4. The method of claim 1, wherein the remote unit is a mobile router.

5. The method of claim 1, wherein the remote unit is a mobile station.

6. The method of claim 1, wherein the first address is a home address of the remote unit.

7. The method of claim 1, wherein the second address is a care of address of the remote unit.

8. The method of claim 1, wherein the IPv6 packet comprises an IPv6 multicast packet or the IPv4 packet comprises an IPv4 multicast packet.

9. A method of communicating an internet protocol version 6 (IPv6) packet over an internet protocol version 4 (IPv4) based network, the method comprising:

receiving from a transition gateway, at an IPv4 mobile virtual private network (MVPN) server, an IPv4 transition packet including (i) an IPv6 to IPv4 transition header identifying an IPv4 address of the transition gateway and a first IPv4 address of the remote unit and (ii) an encapsulated IPv6 packet comprising an IPv6 header and data

removing, at the MVPN server, the IPv6 to IPv4 transition header of the IPv4 transition packet and appending an MVPN tunnel header and an internet protocol security (IPsec) tunnel header to form a nested MVPN packet, the MVPN tunnel header identifying an IPv4 address of the MVPN server and a second IPv4 address of the remote unit and the IPsec tunnel header identifying the IPv4 address of the MVPN server and the first IPv4 address of the remote unit to form the IPv6 packet; and

the MVPN server transmitting the nested MVPN packet towards the remote unit via an infrastructure comprising an IPv4 radio access network.

10. The method of claim 9, wherein the transition gateway and the MVPN server are collocated.

11. The method of claim 9, further comprising at the MVPN server appending an IPsec encapsulating security payload (ESP) after removing the IPv6 to IPv4 transition header and before appending the MVPN tunnel header and the IPsec tunnel header to form the nested MVPN packet.

12. The method of claim 11, wherein the nested MVPN packet consists of the IPv6 packet, the IPsec ESP, the IPsec tunnel header, and the MVPN tunnel header.

13. The method of claim 9, further comprising:

prior to receiving the IPv4 transition packet, the MVPN server receiving an IPv6 multicast listener discovery (MLD) report generated by the remote unit; and

joining an IPv6 multicast group identified in the MLD report;

receiving an IPv6 multicast packet communicated to the IPv6 multicast group, appending an MVPN tunnel header and IPsec tunnel header to the IPv6 multicast packet to create a nested multicast MVPN packet, and transmitting the nested multicast MVPN packet towards the remote unit via an infrastructure comprising an IPv4 radio access network.

14. The method of claim 13, further comprising maintaining mapping data associating the remote unit with the IPv6 multicast group.

15. The method of claim 14, further comprising maintaining mapping data associating an IPv4 multicast group with the IPv6 multicast group.

16. The method of claim 14, further comprising directly mapping an IPv6 address of a mobile station to an IPv4 address of a mobile router serving the mobile station so that the IPv4 home address of the mobile router is identified based on the IPv6 address of the remote unit.