System Administration Guide: IP Services

Mobility Agent

The Address section for a mobility agent contains the Type and SPI labels that define the address type and SPI identifier. This section also contains IPsec request, reply, and tunnel labels. The Address section has the following syntax:


[Address address]
     Type = agent
     SPI = SPI-identifier
     IPsecRequest = action {properties} [: action {properties}]
     IPsecReply = action {properties} [: action {properties}]
     IPsecTunnel = action {properties} [: action {properties}]

You must include an Address section in a home agent's configuration file for each mobility agent that is supported.

If Mobile IP message authentication is required between the foreign and home agent, you must include an Address section for each peer with which an agent needs to communicate.

The SPI value that you configure must represent an SPI section that is present in the configuration file.

The following table describes the labels and values that you can use in the Address section for a mobility agent.

Table 25–6 Address Section Labels and Values—Mobility Agent

Label 

Value 

Description 

Type

agent

Specifies that the entry is for a mobility agent 

SPI

n

Specifies the SPI value for the associated entry 

IPsecRequest

apply or permit (see following note)

IPsec properties to invoke for registration requests to and from this mobility agent peer 

IPsecReply

apply or permit (see following note)

IPsec properties to invoke for registration replies to and from this mobility agent peer 

IPsecTunnel

apply or permit (see following note)

IPsec properties to invoke for tunnel traffic to and from this mobility agent peer 


Note –

The apply values correspond to outbound datagrams. The permit values correspond to inbound datagrams. Therefore, IPsecRequest apply values and IPsecReply permit values are used by the foreign agent to send and receive registration datagrams. The IPsecRequest permit values and the IPsecReply apply values are used by the home agent to receive and send registration datagrams.