LCoA test (OCOT) MN MAP BU BA (includes OCOT option) BA (includes OCOT option) All messages authenticated with IPsec (AH/ESP) OCOT option includes a sequence no sent from the MAP to the MN MN’s reply to MAP includes OCOT (sequence no + 1) If OCOT is used, MAP marks BCE as “tentative” till it receives MN’s reply MAP may also forward packets to the MN until it receives the MN’s reply. |