# Monitoring the Mobile IP Home Agent

Use the commands described in this section to set a statistics baseline, remove the binding table, and verify the configuration of the Mobile IP home agent on a virtual router.

baseline ip mobile home-agent

- Use to set a statistics baseline for a specified Mobile IP home agent.
- Example
  host1#baseline ip mobile home-agent
- There is no no version.
- See baseline ip mobile home-agent.

clear ip mobile binding

- Use to remove the binding table in the specified virtual router or a specified binding by the mobile node home address or NAI.
- Example
  host1#clear ip mobile binding nai john@yahoo.com
- There is no no version.
- See clear ip mobile binding.

show ip mobile binding

- Use to display the binding table information of the home agent in the virtual router.
- Field descriptions
  - MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or @ format
  - AAA-NAI—Network access identifier returned from the AAA server in user@realm, @realm, or @ format
  - Home IP address—IP address of the mobile node
  - Home agent address—IP address of the home agent
  - Care-of-address—IP address of the foreign agent care-of address or co-located care-of address
  - Lifetime granted—Interval, in hh:mm:sec format, granted during registration before which the registration request exceeds the home agent configured time
  - Lifetime remaining—Remaining interval, in hh:mm:sec format, at which the registration request exceeds the home agent configured time
  - Tunnel—Configuration information provided while setting up the tunnel between the foreign agent and the home agent
  - Reverse tunnel—Whether reverse tunneling is enabled or disabled
- Example

      host1#show ip mobile binding
       MN-NAI:  jr@zoom.com
           AAA-NAI: user@zoom.com
           Home IP address:  55.0.0.5
           Home agent address:  66.0.0.5
           Care-of-address:  72.1.1.15
           Lifetime granted :  10:00:00 (36000 seconds)
           Lifetime remaining :  01:46:32
           Tunnel:   Source  66.0.0.5,  Destination 72.1.1.15,  Encapsulation GRE
           Reverse tunnel: enabled

- See show ip mobile binding.

show ip mobile home-agent

- Use to display the configuration information of the home agent in the virtual router.
- Field descriptions
  - Access list name—Name of the access control list applied to the care-of address that restricts access for foreign agents or networks
  - Registration lifetime (in seconds)—Number of seconds before which the registration requests are established
  - Replay protection time (in seconds)—Number of seconds before which a registration request can exceed the home agent configured time value
  - Reverse tunnel—Whether reverse tunneling is enabled or disabled
- Example

      host1#show ip mobile home-agent
      Home Agent Parameters
      Access list name                        ---
      Registration lifetime   (in seconds)    36000
      Replay protection time  (in seconds)    7
      Reverse tunnel                          enabled

- See show ip mobile home-agent.

show ip mobile host

- Use to display configuration of all or specified mobile nodes or domain users.
- Field descriptions
  - MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or @ format
  - Home IP address—IP address of the mobile node
  - Lifetime—Number of seconds the registration request is active for a mobile node
  - Care-Of-Access—Name of the ACL applied to the care-of address to restrict network roaming
  - Aaa-Configured—Whether AAA server is configured or not
- Example 1

      host1#show ip mobile host
      Home
          MN-NAI        IP address     Lifetime   Care-Of-Access   Aaa-Configured
      --------------   -------------   --------   --------------   --------------
      @warner.com           ---           36000   ---                    no
      @yahoo.com            ---             ---   ---                   yes
      pj@juniper.net        ---             100   ---                    no
      pm@juniper.net        ---             500   ---                    no

- Example 2

      host1#show ip mobile host nai @warner.com
                    Home IP
        MN-NAI      address   Lifetime   Care-Of-Access   Aaa-Configured
      -----------   -------   --------   --------------   --------------
      @warner.com     ---        36000   ---                    no

- See show ip mobile host.

show ip mobile profile

- Use to display the interface profile name associated with the home agent.
- Field descriptions
  - Mobile IP profile is—Name of the interface profile name associated with the home agent
- Example

      host1#show ip mobile profile
      Mobile IP profile is: mobileIpProfile

- See show ip mobile profile.

show ip mobile secure foreign-agent

- Use to display the security associations configured for all foreign agents on the virtual router.
- Field descriptions
  - IP address—IP address of foreign agent
  - SPI—Security parameter index (SPI) key for authenticating registration requests
  - Algorithm—Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP messages
  - Replay—Interval, in seconds, before which the registration request exceeds the home agent configured time
  - Key—128-bit hexadecimal number for authenticating the security association.
- Example

      host1#show ip mobile secure foreign-agent
      IP address        SPI         Algorithm   Replay     Key
      ----------   --------------   ---------   ------   -------
      10.10.10.1   628 ( 0x274 )    hmac-md5    ---      secret
      20.20.20.1   628 ( 0x274 )    hmac-md5    255      secret
      30.30.30.1   628 ( 0x274 )    hmac-md5    255      secret

- See show ip mobile secure foreign-agent.

show ip mobile secure host

- Use to display the security associations configured on all mobile node hosts in the virtual router.
- Field descriptions
  - MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or @ format
  - Home IP address—IP address of the mobile node host
  - SPI—Security parameter index (SPI) key for authenticating registration requests
  - Algorithm—Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP messages
  - Replay—Interval, in seconds, before which the registration request exceeds the home agent configured time
  - Key—128-bit hexadecimal number for authenticating the security association
- Example

      host1#show ip mobile secure host
                    Home IP
        MN-NAI      address        SPI         Algorithm   Replay   Key
      -----------   -------   --------------   ---------   ------   ----
      @warner.com     ---     288 ( 0x120 )    hmac-md5    255      time

- See show ip mobile secure host.

show ip mobile traffic

- Use to display protocol statistics for the Mobile IP home agent traffic, including advertisements, solicitations, registrations, registration errors, and security violations.
- To display baseline-relative statistics for the Mobile IP home agent traffic, use the optional delta keyword.
- Field descriptions
  - Registration requests—Total number of registration requests, de-registration requests, and accepted registration requests for mobile nodes
    - Register—Number of registration requests received by the home agent
    - Deregister—Number of de-registration requests received by the home agent
    - Accept—Number of registration requests accepted by the home agent
  - Registration rejects—Total number of and reasons for unsuccessful responses to registration requests
    - Denied—Number of registration requests denied by the home agent
    - Unspecified—Number of registration requests rejected for an unspecified reason, such as an internal communication failure
    - Unknown HA—Number of registration requests rejected because of an unknown home agent address, or because the specified home agent address is not serviced by this home agent
    - Administratively prohibited—Number of registration requests prohibited for administrative reasons, such as the broadcast or B bit being set without the corresponding D bit, or a denial by the registration filters
    - No Resources—Number of registration requests rejected due to insufficient resources, such as a full binding table, an inability to create a tunnel, or an inability of the IP subscriber management application to create a dynamic subscriber interface
    - Authentication failed MN—Number of registration requests rejected because the mobile node failed authentication
    - FA—Number of registration requests rejected because the foreign agent failed authentication
    - Bad identification—Number of registration requests rejected because the registration ID field is out of range
    - Bad request form—Number of registration requests rejected because of a malformed request
    - Unavailable encapsulation—Number of registration requests rejected because of unsupported encapsulation
    - No reverse tunnel—Number of registration requests rejected because reverse tunneling is disabled
- Example

      host1#show ip mobile traffic
      Home Agent Registrations:
          Registration requests:
              Register: 0
              Deregister: 0
              Accept: 0

          Registration rejects:
              Denied: 0
              Unspecified: 0
              Unknown HA: 0
              Administratively prohibited: 0
              No Resources: 0
              Authentication failed MN: 0
              FA: 0
              Bad identification: 0
              Bad request form: 0
              Unavailable encapsulation: 0
              No reverse tunnel: 0

- See show ip mobile traffic.

show license mobile-ip home-agent

- Use to display the license key for the home agent.
- Field descriptions
  - Mobile IP license is—Mobile IP license key associated with the home agent and the maximum number of users allowed by this license
- Example

      host1#show license mobile-ip home-agent
      Mobile IP license is PcZJ93Mt17 which allows 48000 users

- See show license mobile-ip home-agent.