How to Configure the Advertisements Section

• Edit the /etc/inet/mipagent.conf file and add or change the following lines by using the values that are required for your configuration.

  [Advertisements Interface-name] HomeAgent = <yes/no> ForeignAgent = <yes/no> PrefixFlags = <yes/no> AdvertiseOnBcast = <yes/no> RegLifetime = n AdvLifetime = n AdvFrequency = n ReverseTunnel = <yes/no/FA/HA/both> ReverseTunnelRequired = <yes/no/FA/HA>

Note - You must include a different Advertisements section for each interface on the local host that provides Mobile IP services.

"Advertisements Section" provides descriptions of the labels and values that are used in this section.

How to Configure the GlobalSecurityParameters Section

• Edit the /etc/inet/mipagent.conf file and add or change the following lines by using the values that are required for your configuration.

  [GlobalSecurityParameters] MaxClockSkew = n HA-FAauth = <yes/no> MN-FAauth = <yes/no> Challenge = <yes/no> KeyDistribution = files

"GlobalSecurityParameters Section" provides descriptions of the labels and values that are used in this section.

How to Configure the Pool Section

• Edit the /etc/inet/mipagent.conf file and add or change the following lines by using the values that are required for your configuration.

  [Pool Pool-identifier] BaseAddress = IP-address Size = size

"Pool Section" provides descriptions of the labels and values that are used in this section.

How to Configure the SPI Section

• Edit the /etc/inet/mipagent.conf file and add or change the following lines by using the values that are required for your configuration.

  [SPI SPI-identifier] ReplayMethod = <none/timestamps> Key = key

Note - You must include a different SPI section for each security context that is deployed.

"SPI Section" provides descriptions of the labels and values that are used in this section.

How to Configure the Address Section

• Edit the /etc/inet/mipagent.conf file and add or change the following lines by using the values that are required for your configuration.

  • For a mobile node, use the following:

    [Address address] Type = node SPI = SPI-identifier

  • For an agent, use the following:

    [Address address] Type = agent SPI = SPI-identifier IPsecRequest = action {properties} [: action {properties}] IPsecReply = action {properties} [: action {properties}] IPsecTunnel = action {properties} [: action {properties}]

    action and {properties} are any action and associated properties that are defined in the ipsec(7P) man page.

    ---

    Note - The SPI that is configured previously corresponds to the MD5 protection mechanism that is required by RFC 2002. The SPI that is configured previously does not correspond to the SPI that is used by IPsec. For more information about IPsec, see Chapter 19, IPsec (Overview) and Chapter 20, Administering IPsec (Task). Also see the ipsec(7P) man page.

    ---

  • For mobile node that is identified by its NAI, use the following:

    [Address NAI] Type = Node SPI = SPI-identifier Pool = Pool-identifier

  • For default mobile node, use the following:

    [Address Node-Default] Type = Node SPI = SPI-identifier Pool = Pool-identifier

"Address Section" provides descriptions of the labels and values that are used in this section.

Modifying the Mobile IP Configuration File

This section shows you how to modify the Mobile IP configuration file by using the mipagentconfig(1M) command. The section also shows you how to display the current settings of parameter destinations.

"Configuring the Mobility IP Agent" provides a conceptual description of the mipagentconfig(1M) command's usage. You can also review the mipagentconfig(1M) man page.

Modifying the Mobile IP Configuration File Task Map

Table 24-2 Modifying the Mobile IP Configuration File Task Map

How to Modify the General Section

1. Become superuser on the system where you want to enable Mobile IP.

2. On a command line, type the following command for each label that you want to modify in the General section.

   # mipagentconfig change <label> <value>

The following example shows how you might change the version number (in the future) in the configuration file's General section.

Example 24-1 Changing Parameters in the General Section

# mipagentconfig change version 2

How to Modify the Advertisements Section

1. Become superuser on the system where you want to enable Mobile IP.

2. On a command line, type the following command for each label that you want to modify in the Advertisements section.

   # mipagentconfig change adv device-name <label> <value>

For example, if you are changing the agent's advertised lifetime to 300 seconds for device le0, use the following command.

# mipagentconfig change adv le0 AdvLifetime 300

The following example shows how you might change other parameters in the configuration file's Advertisements section.

Example 24-2 Changing Parameters in the Advertisements Section

# mipagentconfig change adv le0 HomeAgent yes
# mipagentconfig change adv le0 ForeignAgent no
# mipagentconfig change adv le0 PrefixFlags no
# mipagentconfig change adv le0 RegLifetime 300
# mipagentconfig change adv le0 AdvFrequency 4
# mipagentconfig change adv le0 ReverseTunnel yes