Access through non-3GPP access networks

A user equipment for communication to an external network through an access network, said user equipment comprising:

• one or more processing circuits configured to:
• interpret a special condition indicated in a first message sent to the user equipment from an Authentication, Authorization, Accounting (AAA) server in a home network of the user equipment in an authentication procedure being part of setting up a connection from the user equipment to the external network through the access network when the user equipment is not currently connected to the external network, the special condition being indicative of whether the AAA server considers the access network to be trusted;
• and elating to at least one network property of the access network;
• and
• subsequently establish a connection to the external network that selectively includes an Internet Protocol Security (IPSec) tunnel to a gateway in the home network based on the special condition such that:
• the connection to the external network omits the IPSec tunnel if the special condition indicates that the AAA server considers the access network to be trusted;
• and
• the connection to the external network includes the IPSec tunnel if the special condition indicates that the AAA server considers the access network to be untrusted.

A computer program product for use by a user equipment related to an Authentication, Authorization, Accounting (AAA) server in a home network of the user equipment, the computer product being stored in non-transitory electronic memory carrying computer readable instructions which when run by the user equipment causes the user equipment to:

• interpret a special condition indicated in one of the messages sent to the user equipment from the AAA server in an authentication procedure being part of setting up a connection from the user equipment to an external network through an access network when the user equipment is not already connected to the external network, the special condition being indicative of whether the AAA server considers the access network to be trusted;
• and
• subsequently establish a connection to the external network that selectively includes an Internet Protocol Security (IPSec) tunnel to a gateway in the home network based on the special condition such that the connection to the external network:
• omits the IPSec tunnel if the special condition indicates that the AAA server considers the access network to be trusted;
• and
• includes the IPSec tunnel if the special condition indicates that the AAA server considers the access network to be untrusted.