| |
| |
| Foreword | |
| |
| |
| Preface | |
| |
| |
| Wireless Data Fundamentals | |
| |
| |
| Introduction to MVPN | |
| |
| |
| The Era of Pervasive Mobility | |
| |
| |
| Pervasive Mobility Drivers | |
| |
| |
| Increase in Productivity | |
| |
| |
| Mobile Device Evolution | |
| |
| |
| Cellular Systems Advances | |
| |
| |
| Mobile Lifestyles and Workplaces | |
| |
| |
| Background on VPN | |
| |
| |
| MVPN Business Case | |
| |
| |
| Moving to Mobile VPN | |
| |
| |
| Wireless Communications with MVPN | |
| |
| |
| MVPN as a Differentiation Tool | |
| |
| |
| Mobile VPN Market and Stakeholders | |
| |
| |
| MVPN Service Providers | |
| |
| |
| MVPN Customers | |
| |
| |
| Small Businesses | |
| |
| |
| Enterprises | |
| |
| |
| Institutions | |
| |
| |
| Application Service Providers | |
| |
| |
| Wireless Data Standards | |
| |
| |
| Regional Standards Organizations | |
| |
| |
| 3GPP | |
| |
| |
| 3GPP Documents and Standardization Process | |
| |
| |
| 3GPP2 | |
| |
| |
| 3GPP2 Documents and Standardization Process | |
| |
| |
| Internet Engineering Task Force | |
| |
| |
| IETF Documents and Standardization Process | |
| |
| |
| IEEE 802 LAN/MAN Standards Committee | |
| |
| |
| IEEE Documents and Standardization Process | |
| |
| |
| Finding Standards Documents Online | |
| |
| |
| Summary | |
| |
| |
| Data Networking Technologies | |
| |
| |
| Tunneling and Labeling Technologies | |
| |
| |
| Layer Two Tunneling Protocol | |
| |
| |
| IP in IP Tunneling | |
| |
| |
| GRE Protocol | |
| |
| |
| Mobile IP | |
| |
| |
| Implementing Mobile IP | |
| |
| |
| GPRS Tunneling Protocol | |
| |
| |
| Addressing Security | |
| |
| |
| IPSec | |
| |
| |
| Public Key Infrastructure | |
| |
| |
| SSL and TLS | |
| |
| |
| Labeling with Multi-Protocol Label Switching | |
| |
| |
| Quality of Service and VPN | |
| |
| |
| Per-Hop Behavior Types | |
| |
| |
| QoS and Tunnels | |
| |
| |
| QoS and MPLS | |
| |
| |
| Authentication, Authorization, and Accounting | |
| |
| |
| User Authentication and Authorization | |
| |
| |
| Accounting Data Collection | |
| |
| |
| AAA and Network Access Services: RADIUS | |
| |
| |
| Authentication Methods for Network Access | |
| |
| |
| AAA and Roaming: The Network Access Identifier | |
| |
| |
| AAA Evolution: DIAMETER | |
| |
| |
| Network Services | |
| |
| |
| Address Management | |
| |
| |
| DHCP Protocol | |
| |
| |
| Host Naming | |
| |
| |
| Domain Name System | |
| |
| |
| Network Address Translation | |
| |
| |
| Summary | |
| |
| |
| Wireless Systems Overview: A Radio Interface Perspective | |
| |
| |
| Three Wireless Generations | |
| |
| |
| 1G Cellular Systems | |
| |
| |
| AMPS | |
| |
| |
| Nordic Mobile Telephone and Total Access Communication System | |
| |
| |
| 2G Cellular Systems | |
| |
| |
| North American TDMA (IS 136) | |
| |
| |
| Global System for Mobile Communications (GSM) | |
| |
| |
| High-Speed Circuit-Switched Data | |
| |
| |
| @cdmaOne | |
| |
| |
| 3G Cellular Systems | |
| |
| |
| CDMA2000 | |
| |
| |
| CDMA2000-1xEV | |
| |
| |
| CDMA2000-3x | |
| |
| |
| Universal Mobile Telecommunications System | |
| |
| |
| UMTS Standardization | |
| |
| |
| UMTS Radio Interface | |
| |
| |
| Enchased Data Rate for Global Evolution | |
| |
| |
| EDGE Classification | |
| |
| |
| The Future of EDGE | |
| |
| |
| Wireless LAN | |
| |
| |
| WLAN Technology | |
| |
| |
| Summary | |
| |
| |
| Wireless Systems Overview: Data Services Perspective | |
| |
| |
| Circuit versus Packet | |
| |
| |
| Data Services in 1G, 2G, and 3G Systems | |
| |
| |
| 1G Systems Circuit Data | |
| |
| |
| Circuit-Switched Data in 2G and 3G Systems | |
| |
| |
| CDMA and TDMA Circuit-Switched Data | |
| |
| |
| GSM and UMTS Circuit-Switched Data | |
| |
| |
| GSM/UMTS CSD Service Capabilities | |
| |
| |
| CDMA2000 Packet Data | |
| |
| |
| CDMA2000 Packet Data Architecture | |
| |
| |
| Mobile Station Perspective | |
| |
| |
| Dormancy | |
| |
| |
| Mobile Station Types | |
| |
| |
| CDMA2000 Mobility Levels | |
| |
| |
| CDMA2000 Mobile AAA | |
| |
| |
| GSM and UMTS Packet Data: General Packet Radio Service and UMTS PS Domain | |
| |
| |
| GPRS Elements | |
| |
| |
| UMTS Elements | |
| |
| |
| GPRS and UMTS PS Domain System Architecture | |
| |
| |
| GPRS and UMTS PS Domain Service Capabilities | |
| |
| |
| GPRS and UMTS PS Domain Terminal | |
| |
| |
| Summary | |
| |
| |
| MVPN and Advanced Wireless Data Services | |
| |
| |
| Mobile VPN Fundamentals | |
| |
| |
| Defining VPN | |
| |
| |
| VPN Building Blocks | |
| |
| |
| Access Control | |
| |
| |
| Policy Provisioning and Enforcement | |
| |
| |
| Captive Portal | |
| |
| |
| Authentication | |
| |
| |
| Security | |
| |
| |
| Tunneling as the VPN Foundation | |
| |
| |
| Labeling (MPLS) and VPN | |
| |
| |
| Service Level Agreements | |
| |
| |
| MVPN SLA | |
| |
| |
| Classifying VPN Technology | |
| |
| |
| Tunneling Taxonomy | |
| |
| |
| Voluntary VPN | |
| |
| |
| Compulsory VPN | |
| |
| |
| Chained Tunnel VPN | |
| |
| |
| Architecture Taxonomy: Site-to-Site and Remote Access VPN | |
| |
| |
| Site-to-Site VPN | |
| |
| |
| Remote Access VPN | |
| |
| |
| Moving from Wireline to Wireless and Mobile | |
| |
| |
| Wireless versus Mobile | |
| |
| |
| Significance of VPN in the Wireless Packet Data Environment | |
| |
| |
| Voluntary MVPN | |
| |
| |
| Compulsory MVPN | |
| |
| |
| Summary | |
| |
| |
| GSM/GPRS and UMTS VPN Solutions | |
| |
| |
| GSM and UMTS Circuit-Switched Data Solutions | |
| |
| |
| CSD Solutions Technologies | |
| |
| |
| CSD Deployment Scenarios | |
| |
| |
| Packet Data Solutions | |
| |
| |
| Packet Data Technology Solutions | |
| |
| |
| IP PDP Type | |
| |
| |
| Simple IP | |
| |
| |
| IP with Protocol Configuration Options | |
| |
| |
| DHCP Relay and Mobile IPv4 | |
| |
| |
| PPP PDP Type | |
| |
| |
| PPP Relay | |
| |
| |
| PPP Terminated at the GGSN | |
| |
| |
| Service Level Agreements | |
| |
| |
| Charging and Billing | |
| |
| |
| Roaming | |
| |
| |
| Case Study: ACME Wireless | |
| |
| |
| Summary | |
| |
| |
| CDMA2000 VPN Solutions | |
| |
| |
| Overview of CDMA2000 Private Network Access | |
| |
| |
| Simple IP: A True Mobile VPN? | |
| |
| |
| Simple IP VPN Architecture | |
| |
| |
| Simple IP VPN Call Scenario | |
| |
| |
| Mobile IP-Based VPN | |
| |
| |
| Public HA VPN Option | |
| |
| |
| Public HA VPN Security | |
| |
| |
| Private HA VPN | |
| |
| |
| HA Allocation in the Network | |
| |
| |
| Private HA Allocation Relative to the PDSN | |
| |
| |
| Collocated PDSN/HA | |
| |
| |
| Centrally Located HA | |
| |
| |
| Dynamic HA Allocation | |
| |
| |
| CDMA2000 IP Address Management | |
| |
| |
| Simple IP VPN Address Assignment | |
| |
| |
| Mobile IP VPN Address Assignment | |
| |
| |
| Authentication, Authorization, and Accounting for MVPN Service | |
| |
| |
| CDMA2000 AAA Architecture | |
| |
| |
| CDMA2000 AAA Brokerage | |
| |
| |
| Mobile IP VPN Perspective | |
| |
| |
| Simple IP VPN Perspective | |
| |
| |
| Case Study | |
| |
| |
| Summary | |
| |
| |
| Mobile VPN Equipment | |
| |
| |
| MVPN Clients | |
| |
| |
| MVPN Client Implementation | |
| |
| |
| MVPN Client Functions | |
| |
| |
| Software-Based Clients | |
| |
| |
| Hardware-Based Clients | |
| |
| |
| MVPN Client Design Issues | |
| |
| |
| Limited Platform Resources | |
| |
| |
| Unreliable Physical Environment | |
| |
| |
| Support and Distribution | |
| |
| |
| Security Requirements | |
| |
| |
| MVPN Gateways | |
| |
| |
| MVPN Gateway Implementation | |
| |
| |
| MVPN Gateways and Wireless Data Platforms | |
| |
| |
| General-Purpose Computing Platforms | |
| |
| |
| Routers and IP Switches | |
| |
| |
| Summary | |
| |
| |
| The Future of Mobile Services | |
| |
| |
| Current Wireless Systems Industry and Evolution of 3G Systems | |
| |
| |
| Service Aspects | |
| |
| |
| IP-Based Mobility | |
| |
| |
| Billing for Wireless Data Services | |
| |
| |
| The Future of Wireless Service and Systems | |
| |
| |
| Person-to-Person Services | |
| |
| |
| Person-to-Machine Services | |
| |
| |
| Machine-to-Machine Services | |
| |
| |
| Mobile Virtual Network Operator | |
| |
| |
| Lightweight MVNO | |
| |
| |
| Full-Scale MVNO | |
| |
| |
| MVPN in an MVNO Environment | |
| |
| |
| WLAN/Cellular Convergence and MVPN | |
| |
| |
| WLAN and Cellular Integration | |
| |
| |
| WLAN Integration Methods | |
| |
| |
| IMSI-Based Authentication for WLAN Integration | |
| |
| |
| NAI-Based Authentication and Mobile IP | |
| |
| |
| Summary | |
| |
| |
| Mobile IP Extensions | |
| |
| |
| Challenge/Response Extensions | |
| |
| |
| NAI Extension | |
| |
| |
| Private Extensions | |
| |
| |
| CDMA2000 RADIUS Accounting Attributes | |
| |
| |
| Accounting Container | |
| |
| |
| IKE Attributes | |
| |
| |
| Security Level, HA, Reverse Tunnel, and DiffServ Attributes | |
| |
| |
| RADIUS Usage in 3GPP | |
| |
| |
| Possible Network Configurations | |
| |
| |
| RADIUS for Authentication | |
| |
| |
| RADIUS for Accounting | |
| |
| |
| RADIUS for Interaction with Application Servers | |
| |
| |
| Acronyms | |
| |
| |
| Bibliography | |
| |
| |
| Index | |