Cross Reference: /illumos-gate/usr/src/cmd/cmd-inet/etc/mipagent.conf.fa-sample
mipagent.conf.fa-sample revision 7c478bd95313f5f23a4c958a745db2134aa03244
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
#
#pragma ident "%Z%%M% %I% %E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License"). You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Sample configuration file for mobility agents. Lines starting with the hash
# character are treated as comments. Blank lines are ignored. All the time
# values are in seconds unless stated otherwise. For the variable names that
# are composed of multiple words, the practice is each word should start with
# upper-case letter, and each value should start with lower-case.
[General]
Version = 1.0 # version number for the configuration file. (required)
#
# One section for all interfaces supported by mipagent.
# The section name must be [Advertisements <intf-name>]
#
# HomeAgent yes, no (Determines whether mipagent will provide
# Home Agent functionality)
# ForeignAgent yes, no (Determines whether mipagent will provide
# Foreign Agent functionality)
# PrefixFlags yes, no (Specifies whether advertisements will include
# the prefix extension).
# AdvertiseOnBcast yes, no (If yes, advertisements are sent on
# 255.255.255.255, rather than 224.0.0.1)
# RegLifetime n (maximum lifetime value accepted in registration
# requests).
# AdvLifetime n (Lifetime advertised in the RFC1256 portion)
# AdvFrequency n (The frequency of mobility advertisements, in
# seconds)
# ReverseTunnel yes, no (Determines whether mipagent has reverse tunnel
# decapsulation/encapsulation capability. In
# case of foreign-agent it also means that the
# foreign agent is advertising reverse tunnel)
#
# ReverseTunnelRequired yes, no (Determines local policy of the mipagent
# on registration request, i.e whether a mobile
# should/must request reverse tunnel)
[Advertisements hme0]
HomeAgent = no
ForeignAgent = yes
PrefixFlags = yes
AdvertiseOnBcast = yes
RegLifetime = 200
AdvLifetime = 200
AdvFrequency = 5
ReverseTunnel = yes
ReverseTunnelRequired = no
# Advertisement section for dynamic interfaces:
# The interface with '*' suffix determines dynamic interfaces to mipagent.
# Additional parameters which may control Advertisement frequency in a newly
# created mobility interface are useful when a mobility
# interface does not want to have a periodic advertisement all the time.
# The following configuration is useful for foreign agents.
# AdvInitCount n Initial Advertisement count when
# Unsolicited advertisements are limited.
# AdvLimitUnsolicited yes, no Determines the local policy of the mipagent
# (foreign agent) if it sends limited or
# unlimited unsolicited advertisement.
# Uncomment the following section, if your foreign agent allows mobility
# service through newly created Solaris PPP interfaces. For more information
# on dynamic interface support, please check mipagent.conf(1M).
#[Advertisements sppp*]
# HomeAgent = no
# ForeignAgent = yes
# AdvertiseOnBcast = no
# PrefixFlags = yes
# RegLifetime = 300
# AdvLifetime = 300
# AdvFrequency = 2
# ReverseTunnel = yes
# ReverseTunnelRequired = no
# AdvInitCount = 5
# AdvLimitUnsolicited = yes
#
# The GlobalSecurityParameters contains all security related configuration
# parameters.
#
# MaxClockSkew n (The number of seconds that mipagent will
# accept as a difference between its own local
# time and the time found in Registration Requets)
# HA-FAAuth yes, no (Specifies whether HA-FA Authentication
# extensions must be present in Registration
# Requests and Replies)
# MN-FAAuth yes, no (Specifies whether MN-FA Authentication
# extensions must be present in Registration
# Requests and Replies)
# Challenge yes, no (Specifies whether the Foreign Agent will
# include Challenges in it's mobility
# advertisements)
# KeyDistribution files (must be set to files)
[GlobalSecurityParameters]
MaxClockSkew = 300
HA-FAauth = yes
MN-FAauth = yes
Challenge = no
KeyDistribution = files
#
# The SPIs must be configured. An SPI entry contains a numerical value
# the replay method and keying information.
#
# ReplyMethod none, timestamp (Specifies the type of replay
# authentication for the SPI)
# Key x (Authentication key in hexadecimal)
[SPI 257]
ReplayMethod = none
Key= 11111111111111111111111111111111
[SPI 258]
ReplayMethod = none
Key= 15111111111111111111111111111111
#
# The Address section contains configuration information for mobility
# nodes (foreign and home agents) as well as mobile nodes.
#
# The # Node-Default keyword in the section header is used to define a
# default SPI for all mobile nodes. This allows an administrator to
# simply include a single entry for all mobile nodes, assuming that
# they all use the same SPI. The Default-Node entry must include the
# pool entry.
#
# The Address section may also contain an NAI as opposed to
# the home address. These entries must also include the Pool
# entry.
#
# Type node, agent (Specifies whether the entry is for
# a mobile node, or a mobility agent)
# SPI n (The SPI value associated with the
# entry, which must be configured above)
# Pool n (If the section header contained an NAI,
# an address will be allocated for the
# mobile node from the pool defined)
[Address 10.1.1.1]
Type = node
SPI = 258
[Address 10.68.30.36]
Type = agent
SPI = 257