Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual page 342

JunosE 11.2.x IP Services Configuration Guide
show ip mobile secure host
show ip mobile traffic
316
Algorithm—Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP
messages
Replay—Interval, in seconds, before which the registration request exceeds the home
agent configured time
Key—128-bit hexadecimal number for authenticating the security association.
Example
host1#show ip mobile secure foreign-agent
IP address SPI
---------- --------------
10.10.10.1 628 ( 0x274 )
20.20.20.1 628 ( 0x274 )
30.30.30.1 628 ( 0x274 )
See show ip mobile secure foreign-agent.
Use to display the security associations configured on all mobile node hosts in the
virtual router.
Field descriptions
MN-NAI—Network access identifier of the mobile node in user@realm, @realm, or
@ format
Home IP address—IP address of the mobile node host
SPI—Security parameter index (SPI) key for authenticating registration requests
Algorithm—Algorithm (hmac-md5 or keyed-md5) for authenticating Mobile IP
messages
Replay—Interval, in seconds, before which the registration request exceeds the home
agent configured time
Key—128-bit hexadecimal number for authenticating the security association
Example
host1#show ip mobile secure host
Home IP
MN-NAI address
----------- -------
@warner.com ---
See show ip mobile secure host.
Use to display protocol statistics for the Mobile IP home agent traffic, including
advertisements, solicitations, registrations, registration errors, and security violations.
To display baseline-relative statistics for the Mobile IP home agent traffic, use the
optional delta keyword.
Algorithm Replay
--------- ------
hmac-md5 ---
hmac-md5 255
hmac-md5 255
SPI Algorithm
-------------- ---------
288 ( 0x120 ) hmac-md5
Copyright © 2010, Juniper Networks, Inc.
Key
-------
secret
secret
secret
Replay Key
------ ----
255 time