Abstract: A mobile node may roam away from its home network to a foreign network. The mobile node may communicate using the Mobile Internet Protocol, and it may use Internet Protocol security to communicate with its home network. A foreign agent on the foreign network and a home agent on the home network may dynamically link a policy to be used for a Internet Protocol security session between the foreign agent and the home agent. The foreign agent and the home agent may dynamically create a filter to be used for the Internet Protocol Security session.

Abstract: A mobile node may roam away from its home network to a foreign network. The mobile node may communicate using the Mobile Internet Protocol, and it may use Internet Protocol security to communicate with its home network. A foreign agent on the foreign network and a home agent on the home network may dynamically link a policy to be used for a Internet Protocol security session between the foreign agent and the home agent. The foreign agent and the home agent may dynamically create a filter to be used for the Internet Protocol Security session.

Abstract: A system and method are shown for establishing tunnel connections across multiple networks of differing types. A tunnel media translator device is connected to both a first and second network of different types. The translator receives a tunnel connection set-up request (SCCRQ) from a tunnel initiator on the first network. The translator uses the value from a host name field of the SCCRQ to obtain an address for a tunnel endpoint on the second network, through the use of either pre-configured static tables or a host name resolution service. The translator creates a dynamic table entry that contains the address and tunnel identifier value for the tunnel initiator from the SCCRQ message and the address of the tunnel endpoint obtained from resolving the host name. The translator inserts the address for the tunnel endpoint into a destination address field of the SCCRQ and its own address on the second network into a source address field of the SCCRQ and re-transmits the SCCRQ onto the second network.