ip mobile secure foreign-agent

Syntax

ip mobile secure foreign-agent ipAddress spi spi key { hex hexKeyVal | ascii asciiKeyVal } [ replay timestamp within seconds ] [ algorithm { hmac-md5 | keyed-md5 } ]

no ip mobile secure foreign-agent ipAddress spi spi key { hex hexKeyVal |
ascii asciiKeyVal }

Release Information

Command introduced in JUNOSe Release 9.0.0.

Description

Configures the security associations for a foreign agent by specifying a security parameter index (SPI) value and an authentication key. You can specify the interval within which a registration request can exceed the home agent configured time value by specifying the replay timestamp within keyword. The no version deletes the security associations for the specified foreign agent on the virtual router.

Options

• ipAddress—IP address of the foreign agent
• spi—Security parameter index (SPI) value, a specific 4-octet hexadecimal number, in the range 0x100–0xFFFFFFFF, that authenticates inbound requests and permits authentication for outbound registration requests
• hexKeyVal—128-bit hexadecimal number, in the range 0x0–0xFFFFFFFE, that specifies the authentication key for a specific security association
• asciiKeyVal—128-bit alphanumeric value, up to a maximum of 16 characters, that specifies the authentication key for a specific security association
• seconds—Number of seconds, in the range 1–255, by which a registration request can exceed the home agent configured time value; default value is 7 seconds
• hmac-md5—Specifies the authentication algorithm for Mobile IP messages, default value is hmac-md5
• keyed-md5—Specifies the authentication algorithm for Mobile IP messages

Global Configuration

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.