Home Agent Hard Switch Assumptions IPsec SA states are not synchronized among a redundancy home agent set Each HA has distinct IP address 1) MN pre-establishes IPsec SAs with all the HAs 2) MN sends BU to one of HA as RFC3775 3) Binding States are exchanged among HAs 4) If HA is failed, backup-HA sends a HA switch message to MNs by using the pre-established SA. 5) MN then re-associates with the backup HA by: sending BU to backup-HA update binding information and tunnel end points by trigger of the received HA switch message 2001::a backup 2001::b 3) Binding States Exchange 1) IPsec SA pre-establishment to both HAs 2)BU 4)HA switch 5)BU HA1 HA2 |