Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual page 337

ip mobile secure foreign-agent
ip mobile secure host
Copyright © 2010, Juniper Networks, Inc.
Use to configure or associate a preconfigured interface profile with the home agent in
a virtual router.
For information about configuring a virtual router, see the JunosE System Basics
Configuration Guide.
Example
host1(config)#ip mobile profile virDefault
Use the no version to remove the profile configuration from the virtual router.
See ip mobile profile.
Use to configure the security associations for a foreign agent.
To specify a nonzero address for the foreign agent, include the IP address of the foreign
agent.
To specify the security parameter index (SPI) value to authenticate inbound requests
and permit authentication for outbound registration requests, include the required spi
keyword followed by a 4-octet hexadecimal number, in the range 0x100–0xFFFFFFFF.
To specify the authentication key for this security association, include the required key
keyword followed by either the hex keyword or the ascii keyword, as follows:
To specify a hexadecimal key, use the hex keyword followed by a 32-character
(128-bit) hexadecimal value in the range 0x0–0xFFFFFFFE.
To specify an ASCII key, use the ascii keyword followed by an alphanumeric value
up to a maximum of 16 characters (128 bits).
To specify the number of seconds by which a registration request can exceed the time
value configured on the home agent, include the optional replay timestamp within
keywords followed by the number of seconds, in the range 1–255; the default value is
7 seconds.
To specify the type of authentication algorithm for Mobile IP messages, include the
optional algorithm keyword followed by either the hmac-md5 keyword or the
keyed-md5 keyword.
Example
host1(config)#ip mobile secure foreign-agent 100.1.1.3 spi 256 key ascii secret replay
timestamp within 255 algorithm hmac-md5
Use the no version to delete the security associations for the specified foreign agent
on the virtual router.
See ip mobile secure foreign-agent.
Use to configure the security associations for a mobile node.
You must configure security associations only for mobile nodes on which local
authentication is configured.
Chapter 13: Configuring the Mobile IP Home Agent
311