Monitoring the Mobile IP Home Agent
Use the commands described in this section to set a statistics baseline, remove the binding table, and verify the configuration of the Mobile IP home agent on a virtual router.
baseline ip mobile home-agent
host1#baseline ip mobile home-agentThere is no no version. clear ip mobile binding
- Use to remove the binding table in the specified virtual router or a specified binding by the mobile node home address or NAI.
- Example
host1#clear ip mobile binding nai john@yahoo.comThere is no no version. show ip mobile binding
- Use to display the binding table information of the home agent in the virtual router.
- Field descriptions
- MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or @ format
- AAA-NAI—Network access identifier returned from the AAA server in user@realm, @realm, or @ format
- Home IP address—IP address of the mobile node
- Home agent address—IP address of the home agent
- Care-of-address—IP address of the foreign agent care-of address or co-located care-of address
- Lifetime granted—Interval, in hh:mm:sec format, granted during registration before which the registration request exceeds the home agent configured time
- Lifetime remaining—Remaining interval, in hh:mm:sec format, at which the registration request exceeds the home agent configured time
- Tunnel—Configuration information provided while setting up the tunnel between the foreign agent and the home agent
- Reverse tunnel—Whether reverse tunneling is enabled or disabled
host1#show ip mobile bindingMN-NAI: jr@zoom.comAAA-NAI: user@zoom.comHome IP address: 55.0.0.5Home agent address: 66.0.0.5Care-of-address: 72.1.1.15Lifetime granted : 10:00:00 (36000 seconds)Lifetime remaining : 01:46:32Tunnel: Source 66.0.0.5, Destination 72.1.1.15, Encapsulation GREReverse tunnel: enabledshow ip mobile home-agent
- Use to display the configuration information of the home agent in the virtual router.
- Field descriptions
- Access list name—Name of the access control list applied to the care-of address that restricts access for foreign agents or networks
- Registration lifetime (in seconds)—Number of seconds before which the registration requests are established
- Replay protection time (in seconds)—Number of seconds before which a registration request can exceed the home agent configured time value
- Reverse tunnel—Whether reverse tunneling is enabled or disabled
host1#show ip mobile home-agentHome Agent ParametersAccess list name ---Registration lifetime (in seconds) 36000Replay protection time (in seconds) 7Reverse tunnel enabledshow ip mobile host
- MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or @ format
- Home IP address—IP address of the mobile node
- Lifetime—Number of seconds the registration request is active for a mobile node
- Care-Of-Access—Name of the ACL applied to the care-of address to restrict network roaming
- Aaa-Configured—Whether AAA server is configured or not
host1#show ip mobile hostHomeMN-NAI IP address Lifetime Care-Of-Access Aaa-Configured-------------- ------------- -------- -------------- --------------@warner.com --- 36000 --- no@yahoo.com --- --- --- yespj@juniper.net --- 100 --- nopm@juniper.net --- 500 --- noExample 2 host1#show ip mobile host nai @warner.comHome IPMN-NAI address Lifetime Care-Of-Access Aaa-Configured----------- ------- -------- -------------- --------------@warner.com --- 36000 --- noshow ip mobile profile
host1#show ip mobile profileMobile IP profile is: mobileIpProfileshow ip mobile secure foreign-agent
- Use to display the security associations configured for all foreign agents on the virtual router.
- Field descriptions
- IP address—IP address of foreign agent
- SPI—Security parameter index (SPI) key for authenticating registration requests
- Algorithm—Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP messages
- Replay—Interval, in seconds, before which the registration request exceeds the home agent configured time
- Key—128-bit hexadecimal number for authenticating the security association.
host1#show ip mobile secure foreign-agentIP address SPI Algorithm Replay Key---------- -------------- --------- ------ -------10.10.10.1 628 ( 0x274 ) hmac-md5 --- secret20.20.20.1 628 ( 0x274 ) hmac-md5 255 secret30.30.30.1 628 ( 0x274 ) hmac-md5 255 secretshow ip mobile secure host
- Use to display the security associations configured on all mobile node hosts in the virtual router.
- Field descriptions
- MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or @ format
- Home IP address—IP address of the mobile node host
- SPI—Security parameter index (SPI) key for authenticating registration requests
- Algorithm—Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP messages
- Replay—Interval, in seconds, before which the registration request exceeds the home agent configured time
- Key—128-bit hexadecimal number for authenticating the security association
host1#show ip mobile secure hostHome IPMN-NAI address SPI Algorithm Replay Key----------- ------- -------------- --------- ------ ----@warner.com --- 288 ( 0x120 ) hmac-md5 255 timeshow ip mobile traffic
- Use to display protocol statistics for the Mobile IP home agent traffic, including advertisements, solicitations, registrations, registration errors, and security violations.
- To display baseline-relative statistics for the Mobile IP home agent traffic, use the optional delta keyword.
- Field descriptions
- Registration requests—Total number of registration requests, de-registration requests, and accepted registration requests for mobile nodes
- Register—Number of registration requests received by the home agent
- Deregister—Number of de-registration requests received by the home agent
- Accept—Number of registration requests accepted by the home agent
- Registration rejects—Total number of and reasons for unsuccessful responses to registration requests
- Denied—Number of registration requests denied by the home agent
- Unspecified—Number of registration requests rejected for an unspecified reason, such as an internal communication failure
- Unknown HA—Number of registration requests rejected because of an unknown home agent address, or because the specified home agent address is not serviced by this home agent
- Administratively prohibited—Number of registration requests prohibited for administrative reasons, such as the broadcast or B bit being set without the corresponding D bit, or a denial by the registration filters
- No Resources—Number of registration requests rejected due to insufficient resources, such as a full binding table, an inability to create a tunnel, or an inability of the IP subscriber management application to create a dynamic subscriber interface
- Authentication failed MN—Number of registration requests rejected because the mobile node failed authentication
- FA—Number of registration requests rejected because the foreign agent failed authentication
- Bad identification—Number of registration requests rejected because the registration ID field is out of range
- Bad request form—Number of registration requests rejected because of a malformed request
- Unavailable encapsulation—Number of registration requests rejected because of unsupported encapsulation
- No reverse tunnel—Number of registration requests rejected because reverse tunneling is disabled
host1#show ip mobile trafficHome Agent Registrations:Registration requests:Register: 0Deregister: 0Accept: 0Registration rejects:Denied: 0Unspecified: 0Unknown HA: 0Administratively prohibited: 0No Resources: 0Authentication failed MN: 0FA: 0Bad identification: 0Bad request form: 0Unavailable encapsulation: 0No reverse tunnel: 0show license mobile-ip home-agent
- Mobile IP license is—Mobile IP license key associated with the home agent and the maximum number of users allowed by this license
host1#show license mobile-ip home-agentMobile IP license is PcZJ93Mt17 which allows 48000 users