Bay Networks Baystream 7 Configuration And Troubleshooting Manual page 94

Configuring and Troubleshooting Bay Dial VPN Services
6.
7.
8.
7-2
Enter the subnet mask for this interface.
For example, enter 255.255.255.0 for a Class C subnet mask.
Now enable the Mobile IP home agent for each circuit.
The home agent resides on the gateway and serves as the tunnel endpoint for
messages between the remote node and the destination network.
To configure the Mobile IP home agent from the Configuration
a.
Manager window, select Protocol > IP > Mobile IP > VPN Gateway.
The Edit Mobile IP Home Agents window opens.
Make sure that both parameters are set to Enable, then click on
b.
Done.
Enabling the Stats Enable parameter is optional, but it aids in
troubleshooting. Collecting statistics may have a minimal effect on
performance.
Add and configure the security parameter index entries and keys.
To configure the Mobile IP security from the Configuration Manager window,
select Protocol > IP > Mobile IP > Security.
The Edit Mobile IP SPIs window opens, from which you can set the security
parameters.
Add or set the Security Parameter Index (SPI) value.
a.
The SPI is a value that uniquely identifies a set of keys used to apply
security to messages that contain this value. The SPI value is an integer in
the range 256 through 65535. Setting the SPI value and the keys to 0 turns
off this security feature.
You add an SPI identifier by clicking Add in the Edit Mobile IP SPI's
window. You can also add or modify a key by clicking Key.
Specify the keys associated with this SPI value.
b.
Each SPI value has a 128-bit key associated with it. You must set at least
one bit in this key. The key is displayed in Site Manager as four 32-bit
fields (8 hex digits per field). Clicking on OK returns to the Edit Mobile
IP SPIs window. The SPI/key combination specified here must match the
SPI/key combination set in the TMS. The keys on both the gateway and
the TMS specify the most-significant bit (that is, bit 127) first.
Accept the default Authentication Type, MD5, and click on Done.
c.
BayStream Multiservice Software Version 7.2 115623B Rev. 00