Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 347

4.
5.
6.
7.
The following example illustrates how you can configure a Mobile IP home agent on
a virtual router named test:
ip mobile home-agent
Configure the Mobile IP security associations for mobile hosts.
Configure the Mobile IP security associations for foreign agents.
Assign an interface profile to be referenced by the Mobile IP home agent.
(Optional) Verify the Mobile IP configuration. See "Monitoring the Mobile IP
Home Agent" on page 325.
! Configure the Mobile IP home agent license.
host1:test(config)#license mobile-ip home-agent demo
! Configure the Mobile IP home agent settings.
host1:test(config)#ip mobile home-agent care-of-access acl lifetime 2000 replay 255
reverse-tunnel-off
! Configure mobile hosts and their security associations.
host1:test(config)#ip mobile host 200.1.1.1 lifetime 200
host1:test(config)#ip mobile secure host 200.1.1.1 spi 0x398 key ascii w4ex
algorithm keyed-md5 replay timestamp within 225
! Configure foreign agents and their security associations.
host1:test(config)#ip mobile secure foreign-agent 100.1.1.3 spi 256 key ascii secret
replay timestamp within 255 algorithm hmac-md5
! Assign an interface profile for the Mobile IP home agent.
host1:test(config)#ip mobile profile testProfile
Use to configure the Mobile IP home agent on a virtual router.
To specify the access control list (ACL) applied to the care-of address (CoA) that
restricts access for foreign agents or networks, include the care-of-access keyword
followed by the ACL name.
To specify the interval within which the registration requests are established,
include the lifetime keyword followed by the number of seconds, in the range
5–65535; the default value is 36,000 seconds.
To specify the interval within which a registration can exceed the home agent
configured value, include the replay keyword followed by the number of seconds,
in the range 1–255; the default value is 7 seconds.
To disable reverse tunneling support by the home agent for denying T bit
registration requests, include the reverse-tunnel-off keyword; reverse tunneling
is enabled by default.
Example
host1(config)#ip mobile home-agent care-of-access acl lifetime 2000 replay 255
reverse-tunnel-off
Use the no version to disable the home agent service on the virtual router.
Chapter 13: Configuring the Mobile IP Home Agent
Configuring the Mobile IP Home Agent
321