mipagent.conf.ha-sample revision 5c0b7edee9bd9fad49038456b16972ff28fa4187
155N/A#
155N/A#pragma ident "%Z%%M% %I% %E% SMI"
155N/A#
155N/A# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
155N/A# Use is subject to license terms.
155N/A#
155N/A# CDDL HEADER START
155N/A#
155N/A# The contents of this file are subject to the terms of the
155N/A# Common Development and Distribution License, Version 1.0 only
155N/A# (the "License"). You may not use this file except in compliance
155N/A# with the License.
155N/A#
155N/A# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
155N/A# or http://www.opensolaris.org/os/licensing.
155N/A# See the License for the specific language governing permissions
155N/A# and limitations under the License.
155N/A#
155N/A# When distributing Covered Code, include this CDDL HEADER in each
155N/A# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
5680N/A# If applicable, add the following below this CDDL HEADER, with the
5680N/A# fields enclosed by brackets "[]" replaced with your own identifying
5270N/A# information: Portions Copyright [yyyy] [name of copyright owner]
155N/A#
5680N/A# CDDL HEADER END
155N/A#
155N/A# Sample configuration file for mobility agents. Lines starting with the hash
5680N/A# character are treated as comments. Blank lines are ignored. All the time
485N/A# values are in seconds unless stated otherwise. For the variable names that
277N/A# are composed of multiple words, the practice is each word should start with
277N/A# upper-case letter, and each value should start with lower-case.
277N/A
277N/A[General]
155N/A Version = 1.0 # version number for the configuration file. (required)
1499N/A
155N/A
618N/A#
155N/A# One section for all interfaces supported by mipagent.
844N/A# The section name must be [Advertisements <intf-name>]
1499N/A#
155N/A# HomeAgent yes, no (Determines whether mipagent will provide
3557N/A# Home Agent functionality)
155N/A# ForeignAgent yes, no (Determines whether mipagent will provide
5680N/A# Foreign Agent functionality)
5680N/A# PrefixFlags yes, no (Specifies whether advertisements will include
5680N/A# the prefix extension).
5680N/A# AdvertiseOnBcast yes, no (If yes, advertisements are sent on
155N/A# 255.255.255.255, rather than 224.0.0.1)
155N/A# RegLifetime n (maximum lifetime value accepted in registration
215N/A# requests).
215N/A# AdvLifetime n (Lifetime advertised in the RFC1256 portion)
215N/A# AdvFrequency n (The frequency of mobility advertisements, in
215N/A# seconds)
215N/A# ReverseTunnel yes, no (Determines whether mipagent has reverse tunnel
215N/A# decapsulation/encapsulation capability. In
215N/A# case of foreign-agent it also means that the
215N/A# foreign agent is advertising reverse tunnel)
215N/A#
215N/A# ReverseTunnelRequired yes, no (Determines local policy of the mipagent
215N/A# on registration request, i.e whether a mobile
215N/A# should/must request reverse tunnel)
215N/A
215N/A
3901N/A[Advertisements hme0]
3901N/A HomeAgent = yes
3901N/A ForeignAgent = no
215N/A PrefixFlags = yes
155N/A AdvertiseOnBcast = yes
155N/A RegLifetime = 200
155N/A AdvLifetime = 200
155N/A AdvFrequency = 5
155N/A ReverseTunnel = yes
155N/A ReverseTunnelRequired = no
155N/A
155N/A#
5680N/A# The GlobalSecurityParameters contains all security related configuration
5680N/A# parameters.
5680N/A#
5680N/A# MaxClockSkew n (The number of seconds that mipagent will
5680N/A# accept as a difference between its own local
5680N/A# time and the time found in Registration Requets)
1405N/A# HA-FAAuth yes, no (Specifies whether HA-FA Authentication
1405N/A# extensions must be present in Registration
5680N/A# Requests and Replies)
1405N/A# MN-FAAuth yes, no (Specifies whether MN-FA Authentication
5680N/A# extensions must be present in Registration
5680N/A# Requests and Replies)
5680N/A# Challenge yes, no (Specifies whether the Foreign Agent will
5680N/A# include Challenges in it's mobility
5680N/A# advertisements)
155N/A# KeyDistribution files (must be set to files)
155N/A
155N/A[GlobalSecurityParameters]
155N/A MaxClockSkew = 300
155N/A HA-FAauth = yes
155N/A MN-FAauth = yes
3837N/A Challenge = no
155N/A KeyDistribution = files
155N/A
1405N/A#
155N/A# The Address Pools are defined via numerical identifiers, and contain
1405N/A
1405N/A# BaseAddress n.n.n.n (The first address in the address pool)
1641N/A# Size n (The number of addresses in the pool)
1641N/A
1641N/A[Pool 1]
1405N/A BaseAddress = 10.68.30.7
155N/A Size = 4
155N/A
155N/A#
155N/A# The SPIs must be configured. An SPI entry contains a numerical value
155N/A# the replay method and keying information.
155N/A#
5270N/A# ReplyMethod none, timestamp (Specifies the type of replay
155N/A# authentication for the SPI)
155N/A# Key x (Authentication key in hexadecimal)
155N/A
155N/A[SPI 257]
155N/A ReplayMethod = none
155N/A Key= 11111111111111111111111111111111
155N/A
5425N/A[SPI 258]
155N/A ReplayMethod = none
155N/A Key= 15111111111111111111111111111111
155N/A
155N/A#
155N/A# The Address section contains configuration information for mobility
155N/A# nodes (foreign and home agents) as well as mobile nodes.
155N/A#
1641N/A# The # Node-Default keyword in the section header is used to define a
1641N/A# default SPI for all mobile nodes. This allows an administrator to
1641N/A# simply include a single entry for all mobile nodes, assuming that
1641N/A# they all use the same SPI. The Default-Node entry must include the
1641N/A# pool entry.
1641N/A#
1641N/A# The Address section may also contain an NAI as opposed to
1641N/A# the home address. These entries must also include the Pool
1641N/A# entry.
1641N/A#
1641N/A# Type node, agent (Specifies whether the entry is for
1641N/A# a mobile node, or a mobility agent)
1641N/A# SPI n (The SPI value associated with the
1641N/A# entry, which must be configured above)
1641N/A# Pool n (If the section header contained an NAI,
1641N/A# an address will be allocated for the
155N/A# mobile node from the pool defined)
155N/A
155N/A[Address 10.1.1.1]
155N/A Type = node
181N/A SPI = 258
4337N/A
5680N/A[Address mobilenode@sun.com]
5680N/A Type = node
155N/A SPI = 257
4941N/A Pool = 1
3817N/A
3817N/A[Address Node-Default]
3817N/A Type = node
3817N/A SPI = 258
4941N/A Pool = 1
[Address 10.68.30.36]
Type = agent
SPI = 257