Three layer solution – Pros and Cons Pros Only mobile node aware of solution No changes to IPsec or Mobile IPv4 standards Existing VPN, HA, FA boxes can be used Cons Overhead (latency, packet size) Three layers to manage (e.g. authentication) Software complexity Three layers != three boxes Combined VPN+HA box possible |