The remote access to IPsec-VPN gateway over mobile IPv6

Mobile IPv6 is thought to be dominant protocol for providing mobility. In the near future, most portable communication devices will deploy Mobile IPv6 mechanism. Our main concerns are that such mobile devices are going to access to their corporate network such as VPN. In this paper, we propose the efficient communication for IPsec-VPN access of mobile nodes. Our proposal is that mobile nodes use the IKEv2 CP to transfer BU. We think that our simple BU should be able to be done in IKEv2 initial exchange as well as in IKEv2 informational exchange. It is because BU can be occurred at any time before initial IPsec setup is not completed. Thus, we intend to use IKEv2 CP instead of IKEv2 Notify payload (N). We consider two cases. One is the case that home agent exists in VPN domain and the other is the case that home agent is away from VPN domain. In both cases, our proposal reduces the total signals to access to VPN. Nevertheless, the security is not compromised.