Juniper JUNOSE 11.2.X IP SERVICES, Configuration Manual

Page: 337 / 356

•
Use to configure or associate a preconfigured interface profile with the home agent in
a virtual router.
•
For information about configuring a virtual router, see the JunosE System Basics
Configuration Guide .
•
Example
host1(config)# ip mobile profile virDefault
•
Use the no version to remove the profile configuration from the virtual router.
•
See ip mobile profile.
ip mobile secure foreign-agent
•
Use to configure the security associations for a foreign agent.
•
To specify a nonzero address for the foreign agent, include the IP address of the foreign
agent.
•
To specify the security parameter index (SPI) value to authenticate inbound requests
and permit authentication for outbound registration requests, include the required
spi
keyword followed by a 4-octet hexadecimal number, in the range 0x100–0xFFFFFFFF.
•
To specify the authentication key for this security association, include the required key
keyword followed by either the hex keyword or the ascii keyword, as follows:
•
To specify a hexadecimal key, use the hex keyword followed by a 32-character
(128-bit) hexadecimal value in the range 0x0–0xFFFFFFFE.
•
To specify an ASCII key, use the ascii keyword followed by an alphanumeric value
up to a maximum of 16 characters (128 bits).
•
To specify the number of seconds by which a registration request can exceed the time
value configured on the home agent, include the optional
replay timestamp within
keywords followed by the number of seconds, in the range 1–255; the default value is
7 seconds.
•
To specify the type of authentication algorithm for Mobile IP messages, include the
optional
algorithm keyword followed by either the hmac-md5 keyword or the
keyed-md5 keyword.
•
Example
host1(config)# ip mobile secure foreign-agent 100.1.1.3 spi 256 key ascii secret replay
timestamp within 255 algorithm hmac-md5
•
Use the no version to delete the security associations for the specified foreign agent
on the virtual router.
•
See ip mobile secure foreign-agent.
ip mobile secure host
•
Use to configure the security associations for a mobile node.
•
You must configure security associations only for mobile nodes on which local
authentication is configured.
311 Copyright © 2010, Juniper Networks, Inc.
Chapter 13: Configuring the Mobile IP Home Agent