
220 Chapter 9: A Look Ahead
AAA-Based Dynamic Key Generation
The Cisco Dynamic security association and Key Distribution feature has been covered
extensively, but it is not currently a standards-based solution. Chapter 3, “Mobile IP Security,”
mentioned that work on a standard AAA-based dynamic key-generation mechanism is under
way. At the time of this writing, this work was still under way, so we are presenting a preview
of the yet-to-be-accepted standard.
Mobile IPv4 provides the following extensions to protect control messages between the
entities:
• Mobile Node—Home Agent Authentication Extension
• Mobile Node—FA Authentication Extension
• FA ...