MIP Home Agent (HA) architectures are described that decompose, e.g., split, packet forwarding control functionality from actual data packet forwarding operations performed by a conventional MIP HA. This places MIP routing control in a node which is distinct from the tunnel end-points which perform packet forwarding operations to direct packets including a mobile's Home Address. Tunneling establishment and control functionality is implemented by what is referred to herein as decomposed HA (DHA) while data packet forwarding and redirection is performed, under the control of the DHA, by a tunneling agent (TA) node. The tunneling agent node serves as the data packet redirection node for a mobile as it moves from one location to another and may be located outside of a firewall used to protect the DHA. Tunnel endpoint nodes (Mobile Nodes and/or Access Nodes) send tunnel packets to the tunnel agent whilst directing control signaling packets to the DHA.