A method, system, and computer-readable media are provided for allowing a mobile device to maintain communication connectivity during a handoff between wireless access points. In one aspect, the method may include negotiating security association information and establishing a first communication tunnel by tunneling an inner IP address within a first outer IP address. The method may further include authenticating a request for establishing a second communication tunnel by identifying the negotiated security association information within the request. Additionally, the method may include establishing the second communication tunnel by tunneling the inner IP address within a second outer IP address. Moreover, the method may include pushing data associated with the communication session through the second communication tunnel.