Methods and apparatus for enabling VPN based mobility are provided. A VPN
client having a client subnetwork address corresponding to a particular subnetwork
can create a VPN tunnel using an enterprise address from a VPN server. Using the
VPN tunnel, the VPN client can establish sessions with a variety of destination
nodes including destination nodes on a private or enterprise network associated
with the VPN server. When the client moves, the VPN client can acquire a new address
that may correspond to a new subnetwork, but the VPN server provides the VPN client
with the same enterprise address. Accordingly, the VPN client can maintain existing
sessions with destination nodes using the same enterprise address.