Monitoring the Mobile IP Security Associations Configured for Foreign Agents

Purpose

Display the security associations configured for all foreign agents on the virtual router.

Action

To display the security associations configured for all foreign agents on the virtual router:

host1#show ip mobile secure foreign-agent
IP address        SPI         Algorithm   Replay     Key
----------   --------------   ---------   ------   -------
10.10.10.1   628 ( 0x274 )    hmac-md5    ---      secret
20.20.20.1   628 ( 0x274 )    hmac-md5    255      secret
30.30.30.1   628 ( 0x274 )    hmac-md5    255      secret

Meaning

Table 52 lists the output fields for the show ip mobile secure foreign-agent command.

Table 52: show ip mobile secure foreign-agent Output Fields

Field Name

Field Description

IP address

IP address of foreign agent

SPI

Security parameter index key for authenticating registration requests

Algorithm

Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP messages

Replay

Interval (in seconds) within which a registration request can exceed the time value configured on the Mobile IP home agent

Key

128-bit hexadecimal number for authenticating the security association

Related Documentation