Source-aware technique for facilitating LISP host mobility

At least one non-transitory tangible media that includes code for execution and when executed by a processor, of a first network element of a first network, is operable to perform operations comprising:

• detecting a local connection of an endpoint identifier (“EID”) corresponding to a virtual machine (“VM”), where the EID relocated from a second network to the first network, wherein the first network element detects the EID at least by comparing a source in a packet header from the EID with a range of prefixes enabled to roam;
• receiving identifying information for a second network element of the second network previously connected to the EID;
• receiving, from the second network element of the second network, service information for a service to be applied to traffic associated with the VM using the identifying information;
• and
• in response to the relocation of the EID and the service, initiating a state transfer related to the EID from a firewall at the second network to a firewall at the first network, wherein the state transfer utilizes a filter to prevent transfer of state information unrelated to the EID.

A network element of a first network comprising:

• a memory element configured to store data;
• a processor operable to execute instructions associated with the data which when executed causes the processor to:
• detect a local connection of an endpoint identifier (“HD”) corresponding to a virtual machine (“VM”), where the EID relocated from a second network to the first network, wherein the first network element detects the EID at least by comparing a source in a packet header from the EID with a range of prefixes enabled to roam;
• receive identifying information for a second network element of the second network previously connected to the EID;
• receiving, from the second network element of the second network, service information for a service to be applied to traffic associated with the VM using the identifying information;
• and
• in response to the relocation of the EID and the service, initiating a state transfer related to the EID from a firewall at the second network to a firewall at the first network, wherein the state transfer utilizes a filter to prevent transfer of state information unrelated to the EID.