Section: 11.2.1 Access to Internet, Intranet or ISP through Packet Domain
Content: The access to Internet, Intranet or ISP may involve specific functions such as user authentication, user’s authorization, end to end encryption between MS and Intranet/ISP, allocation of a dynamic address belonging to the PLMN/Intranet/ISP addressing space, IPv6 address autoconfiguration, etc. For this purpose the Packet Domain may offer: - either direct transparent access to the Internet; or - a non transparent access to the Intranet/ISP. In this case the Packet Domain, i.e. the GGSN/P-GW, takes part in the functions listed above. The mechanisms for host configuration and user authentication described in this subclause and its subclauses are applicable for the initial IP-CAN session establishment to allocate IP addresses (IPv4 and/or IPv6) to the MS. For GTP based access, the activation of any subsequent IP-CAN bearers for that IP-CAN session, (i.e.secondary PDP context activation Procedure’, dedicated bearer activation), as well as the use of TFTs, is described in 3GPP TS 23.060[ General Packet Radio Service (GPRS); Service description; Stage 2 ]  [3], 3GPP TS 23.401[ General Packet Radio Service (GPRS) enhancements for Evolved Universal Terrestrial Radio Access Network (E-UTRAN) access ]  [77].