Example

Suppose we have a mobile device, such as a smartphone, that is using IPv6 and is connected to a Wi-Fi network in a cafe. The IPv6 address of the mobile device is 2001:0db8:85a3:0000:0000:8a2e:0370:7334.

Now, the mobile device user decides to leave the cafe and moves towards an area where a cellular network is available. When changing networks, the mobile device's IP address will remain the same, but the address prefix will change to reflect the new network.

Here is an example of what mobility on IPv6 would look like for this device:

1. Connection in the cafe (Wi-Fi Network)

• Dirección IPv6: 2001:0db8:85a3:0000:0000:8a2e:0370:7334
• Network prefix: 2001:0db8:85a3:0000::/64 (assuming this is the prefix assigned for the Wi-Fi network)

2. Mobility to the cellular network

• The mobile device detects the available cellular network and decides to switch to it.
• The mobile device sends a message to the “home agent” (a server that helps manage mobility) to report its new location.

3. Location update

• The home agent updates its routing table to reflect the mobile device's new location.
• The routing table now associates the network prefix of the cellular network to the mobile device.

4. New IPv6 address after mobility

• Dirección IPv6 actualizada: 2001:0db8:85a3:1111:0000:8a2e:0370:7334
• New network prefix: 2001:0db8:85a3:1111::/64 (assuming this is the prefix assigned for the cellular network)

In this example, the mobile device switches from Wi-Fi network to cellular network while maintaining its IPv6 address. Mobility in IPv6 allows the device to remain accessible and can continue to communicate with other devices and services on the Internet without interruptions. Updating the routing table and changing the network prefix ensures that packets sent to the mobile device are correctly directed to their new location on the cellular network.

Security in mobile IPv6

Mobile IPv6 security is a crucial aspect of ensuring that mobile devices can maintain secure and reliable connectivity while moving between different networks. Some important aspects of mobile IPv6 security include:

Authentication and authorization

Mobile IPv6 uses authentication and authorization mechanisms to ensure that only authorized devices and users can access network services and resources. This prevents unauthorized devices from accessing the mobile network and protects against malicious attacks.

Cryptography

Mobile IPv6 can make use of cryptographic technologies, such as IPSec (Internet Protocol Security), to protect the confidentiality, integrity and authenticity of data transmitted between the mobile device and network access points. This prevents data from being intercepted or modified by unauthorized actors.

Protection against packet forwarding attacks

In mobile networks, there is a possibility of packets being maliciously forwarded through compromised nodes. Mobile IPv6 uses protection mechanisms, such as the use of Authentication Header Extensions (AH) and Security Encapsulation (ESP) in IPSec, to mitigate these types of attacks.

Network access control

Mobile IPv6 can implement access control policies that limit which devices or users can access certain parts of the network or specific services. This ensures that only authorized devices and users have access to critical resources.

Security in the mobility process

During the mobility process, when a device moves from one network to another, steps must be taken to ensure that authentication and security are not compromised. Mobile IPv6 handles this process securely, ensuring that the mobile device maintains a secure connection during the transition between networks.

Key management

The cryptography used in mobile IPv6 requires the use of keys to encrypt and decrypt data. Proper management of these keys is essential to guarantee the security of communications on the mobile network.