Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 349

ip mobile profile
ip mobile secure foreign-agent
ip mobile secure host
Use to configure or associate a preconfigured interface profile with the home
agent in a virtual router.
For information about configuring a virtual router, see the JUNOSe System Basics
Configuration Guide.
Example
host1(config)#ip mobile profile virDefault
Use the no version to remove the profile configuration from the virtual router.
See ip mobile profile.
Use to configure the security associations for a foreign agent.
To specify a nonzero address for the foreign agent, include the IP address of the
foreign agent.
To specify the security parameter index (SPI) value to authenticate inbound
requests and permit authentication for outbound registration requests, include
the required spi keyword followed by a 4-octet hexadecimal number, in the
range 0x100–0xFFFFFFFF.
To specify the authentication key for this security association, include the required
key keyword followed by either the hex keyword or the ascii keyword, as follows:
To specify a hexadecimal key, use the hex keyword followed by a
32-character (128-bit) hexadecimal value in the range 0x0–0xFFFFFFFE.
To specify an ASCII key, use the ascii keyword followed by an alphanumeric
value up to a maximum of 16 characters (128 bits).
To specify the number of seconds by which a registration request can exceed
the time value configured on the home agent, include the optional replay
timestamp within keywords followed by the number of seconds, in the range
1–255; the default value is 7 seconds.
To specify the type of authentication algorithm for Mobile IP messages, include
the optional algorithm keyword followed by either the hmac-md5 keyword or
the keyed-md5 keyword.
Example
host1(config)#ip mobile secure foreign-agent 100.1.1.3 spi 256 key ascii secret
replay timestamp within 255 algorithm hmac-md5
Use the no version to delete the security associations for the specified foreign
agent on the virtual router.
See ip mobile secure foreign-agent.
Chapter 13: Configuring the Mobile IP Home Agent
Configuring the Mobile IP Home Agent
323