/* 00comp_ipnet_mobility.cdf - IPNet Mobility configuration file */ /* * Copyright (c) 2006-2007 Wind River Systems, Inc. * * The right to copy, distribute or otherwise make use of this software * may be licensed only pursuant to the terms of an applicable Wind River * license agreement. No license to Wind River intellectual property rights * is granted herein. All rights not licensed by Wind River are reserved * by Wind River. */ /* modification history -------------------- 01i,03oct07,jho RADIUS and DIAMETER CDF mappings 01h,19sep07,rme Added missing backslash (line: 191, 211) 01g,12sep07,jho Indentation, diameter addition, NAI AAAH update and naming conventions, NAI HA. 01f,27feb07,kch Added MIPMN_IPSEC_PROTECTED configuration parameter for mobile node. Also renamed MIPMN_IFNAME_LIST to MIPMN_IFNAME since only one interface can be configured at any time in the mobile node (WIND00089286). 01e,23jan06,tlu Fix MIP CDF defects (85299, 85297, 85290) 01d,25nov06,kch Added MIPHA_IF_NAT_T_KEEPALIVE_LIST configuration parameter. 01c,23sep06,kch Fixed IPCOM shell commands description. 01b,26aug06,kch Added support for configuration parameters. 01a,22may06,kch created. */ #ifdef _WRS_CONFIG_COMPONENT_IPMIPHA Component INCLUDE_IPMIPHA { NAME IPv4 Home Agent SYNOPSIS IPv4 Home Agent MODULES ipmipha.o REQUIRES INCLUDE_IPCOM INCLUDE_IPNET INCLUDE_IPMIP4 CONFIGLETTES ipmipha_config.c _CHILDREN FOLDER_MOBILITY_HA CFG_PARAMS MIPHA_IFNAME_LIST \ MIPHA_REG_LIFETIME \ MIPHA_HA_NAI \ MIPHA_REPLAY_PROTECTION \ MIPHA_SPI_LIST \ MIPHA_IF_HOME_ADDRESS_LIST \ MIPHA_IF_HOME_MASK_LIST \ MIPHA_IF_FA_AUTH_LIST \ MIPHA_IF_ADV_INTERVAL_LIST \ MIPHA_IF_ADV_ADDRESS_LIST \ MIPHA_IF_ADV_LIFETIME_LIST \ MIPHA_IF_NAT_T_ENABLED_LIST \ MIPHA_IF_NAT_T_KEEPALIVE_LIST \ MIPHA_IF_IPIP_TUNNEL_ENABLED_LIST \ MIPHA_IF_GRE_TUNNEL_ENABLED_LIST \ MIPHA_IF_MINENC_TUNNEL_ENABLED_LIST \ MIPHA_FA_SA_ADDRESS_LIST \ MIPHA_FA_SA_LOOKUP_REQUIRE \ MIPHA_MN_SA_ADDRESS_LIST \ MIPHA_MN_SA_NAI_LIST \ MIPHA_MN_SA_LOOKUP_REQUIRE \ MIPHA_MN_SA_LOOKUP_ORDER \ MIPHA_MN_DYNAMIC_HOA_REQUIRED \ MIPHA_MN_NAI_REQUIRED \ MIPHA_MN_NAI_HOA_ADDRESS_LIST \ MIPHA_IF_TUNNEL_REVERSE_LIST \ MIPHA_IF_TUNNEL_REORDERING_LIST \ MIPHA_IF_SIMBIND_ENABLED_LIST \ MIPHA_IF_SIMBIND_MAX_LIST \ MIPHA_IF_REVOCATION_ENABLED_LIST } Component INCLUDE_IPMIPHA_AAA_RADIUS { NAME IPv4 Home Agent AAA Radius Support SYNOPSIS IPv4 Home Agent AAA Radius Support REQUIRES INCLUDE_IPMIPHA INCLUDE_IPRADIUS _CHILDREN FOLDER_MOBILITY_HA CFG_PARAMS MIPHA_AAA_RADIUS_ACCOUNTING \ MIPHA_AAA_RADIUS_ACCOUNTING_ADDRESS \ MIPHA_AAA_RADIUS_ACCOUNTING_PORT \ MIPHA_AAA_RADIUS_ACCOUNTING_SECRET \ MIPHA_AAA_RADIUS_ACCESS \ MIPHA_AAA_RADIUS_ACCESS_ADDRESS \ MIPHA_AAA_RADIUS_ACCESS_PORT \ MIPHA_AAA_RADIUS_ACCESS_SECRET \ MIPHA_AAA_RADIUS_ACCESS_REQUIRE \ MIPHA_AAA_RADIUS_ACCESS_TIME_INTERVAL \ MIPHA_AAA_RADIUS_LOCAL_ADDRESS \ MIPHA_AAA_RADIUS_NAI } Component INCLUDE_IPMIPHA_AAA_DIAMETER { NAME IPv4 Home Agent AAA Diameter Support SYNOPSIS IPv4 Home Agent AAA Diameter Support REQUIRES INCLUDE_IPMIPHA INCLUDE_IPDIAMETERC _CHILDREN FOLDER_MOBILITY_HA CFG_PARAMS MIPHA_AAA_DIAMETER_ACCESS \ MIPHA_AAA_DIAMETER_ACCESS_ADDRESS \ MIPHA_AAA_DIAMETER_ACCESS_PORT \ MIPHA_AAA_DIAMETER_ACCESS_REQUIRE \ MIPHA_AAA_DIAMETER_ACCESS_TIME_INTERVAL \ MIPHA_AAA_DIAMETER_ACCESS_REALM \ MIPHA_AAA_DIAMETER_ACCESS_HOSTNAME } Component INCLUDE_IPMIPHA_FEATURE_EXTENSION { NAME IPv4 Home Agent Feature Extension Registration Hook SYNOPSIS IPv4 Home Agent Feature Extension allows you provide \ an additional registration hook for registration of \ external functions. REQUIRES INCLUDE_IPMIPHA _CHILDREN FOLDER_MOBILITY_HA CFG_PARAMS MIPHA_FEATURE_INITIALIZATION_HOOK } Component INCLUDE_IPMIPHA_CMD { NAME IPv4 Home Agent IPCOM commands. SYNOPSIS Mobile IPv4 Home Agent IPCOM commands MODULES ipmipha_cmd_ha.o _CHILDREN FOLDER_MOBILITY_HA REQUIRES INCLUDE_IPCOM_SHELL_CMD INCLUDE_IPMIPHA } /******************** Configuration Parameters *****************************/ Parameter MIPHA_FEATURE_INITIALIZATION_HOOK { NAME Home Agent Feature Initialization Hook SYNOPSIS This is the function hook that you may define in order to \ register extra functional extensions to the Home Agent TYPE FUNCPTR DEFAULT your_function_here } /* INCLUDE_IPMIPHA configuration parameters */ Parameter MIPHA_IFNAME_LIST { NAME Home agent Interface list SYNOPSIS Space-separated list of network interface which should be \ managed by the mobile IP home agent implementation. \ E.g., "eth0 eth1" TYPE char * DEFAULT "" } Parameter MIPHA_REG_LIFETIME { NAME Registration lifetime SYNOPSIS Specifies how long a mobile node binding is kept active \ before it is deleted, unless the mobile node have \ reregistered before the time is up. Value given in seconds. TYPE char * DEFAULT "30" } Parameter MIPHA_REPLAY_PROTECTION { NAME Replay protection SYNOPSIS The maximum time difference, in seconds, allowed between \ the home agent current time and the timestamp in the \ registration requests. If "0", means no check is done. TYPE char * DEFAULT "7" } Parameter MIPHA_HA_NAI { NAME HA Network access identifier SYNOPSIS Specify a certain HA to connect to according to RFC3846. If \ unspecified, the HA chosen will respond with its NAI, which \ will be used by the MN in all subsequent communication. TYPE char * DEFAULT "" } Parameter MIPHA_SPI_LIST { NAME Security Parameter Index (SPI) list SYNOPSIS Security Parameter Index (SPI) list. Each SPI have exactly one \ secret. The secret length may be up to 16 bytes and need not \ be printable. The SPI is specifed in the form of \ "=", each separated from the other by a semicolon. \ E.g. "1000=test0", "1000=test0;1001=test1". TYPE char * DEFAULT "" } Parameter MIPHA_FA_SA_ADDRESS_LIST { NAME Foreign - Home security association list SYNOPSIS Security associations to use between FA and HA. This parameter \ is specified for each FA in the form of \ "[/]=", each separated from the other \ by a semicolon. Set "" to "any" to enable \ foreign-home authentication to all foreign agents. If the FA IP \ address is not found and no "any" entry exists, no foreign-home \ authentication will be used. For example, setting \ "10.1.2.42=1002" enables foreign-home authentication using \ SPI 1002 between this FA and HA using IP Address 10.1.2.42. \ Setting "any=1002" enables foreign-home authentication to \ all foreign agents using SPI 1002. Setting "10.1.2.0/24=1004" \ indicates that all foreign agents in the 10.1.2.0/24 network \ should be using SPI 1004. TYPE char * DEFAULT "" } Parameter MIPHA_FA_SA_LOOKUP_REQUIRE { NAME Foreign - Home security association reverse lookup SYNOPSIS Reverse lookup any foreign-home security association used \ in communication with the foreign agent and verify that the SPI \ is indeed the SPI that should have been used, and not just that \ the calculated hash is correct. TYPE char * DEFAULT "0" } Parameter MIPHA_MN_SA_ADDRESS_LIST { NAME Mobile - Home security association home address list SYNOPSIS Security associations to use between MN and HA. This parameter \ is specified for each MN in the form of \ "[/]=", each separated from the other \ by a semicolon. Set "" to "any" to enable \ mobile-home authentication to all mobile nodes. If the MN IP \ address is not found and no "any" entry exists, no communication\ will be valid if the lookup require primitive is specified and \ no AAA key generation mechanisms have been used. For example, \ setting "10.1.2.42=1002" enables mobile-home authentication using \ SPI 1002 between this MN and HA using Home Address 10.1.2.42. \ Setting "any=1002" enables mobile-home authentication to \ all mobile nodes using SPI 1002. Setting "10.1.2.0/24=1004" \ indicates that all mobile nodes in the 10.1.2.0/24 network \ should be using SPI 1004. TYPE char * DEFAULT "" } Parameter MIPHA_MN_SA_NAI_LIST { NAME Mobile - Home security association NAI list SYNOPSIS Security associations to use between MN and HA. This parameter \ is specified for each MN in the form of \ "user@domain=" or "@domain=" each separated from the \ other by a semicolon.For example,setting "@windriver.com=1002" \ enables mobile-home authentication using SPI 1002 between \ a mobile node using a NAI in the windriver.com domain. TYPE char * DEFAULT "" } Parameter MIPHA_MN_SA_LOOKUP_REQUIRE { NAME Mobile - Home security association reverse lookup SYNOPSIS Reverse lookup any mobile-home security association used \ in communication with the mobile node and verify that the SPI \ is indeed the SPI that should have been used, and not just that \ the calculated hash is correct. TYPE char * DEFAULT "0" } Parameter MIPHA_MN_SA_LOOKUP_ORDER { NAME Mobile - Home security association lookup order SYNOPSIS Determines in which order security associations should be \ resolved. The value of this parameter is a list of search keys\ separated by semicolon. Currently valid values are hoa and nai.\ For example, a valid value is "hoa;nai", which is also the \ default lookup order which will be used if this parameter is \ not specified. TYPE char * DEFAULT "" } Parameter MIPHA_MN_DYNAMIC_HOA_REQUIRED { NAME Dynamic Home Address Assignment is required SYNOPSIS If this particular configuration parameter is enabled(1), the\ home agent requires that the mobile node requests dynamic \ home address assignment. TYPE char * DEFAULT "0" } Parameter MIPHA_MN_NAI_REQUIRED { NAME Mobile NAI is required SYNOPSIS If this particular configuration parameter is enabled(1), the\ home agent requires that the mobile node provides a mobile \ NAI in the registration request. TYPE char * DEFAULT "0" } Parameter MIPHA_MN_NAI_HOA_ADDRESS_LIST { NAME Mobile NAI to Home Address mapping SYNOPSIS This parameter may be used to specify what HoA a Mobile Node \ should be given based on the provided Mobile NAI. The syntax \ is "=
", and they are specified as a semicolon \ separated list. E.g. "mipuser@windriver.com=10.1.1.1" is a \ valid entry. TYPE char * DEFAULT "" } Parameter MIPHA_IF_HOME_ADDRESS_LIST { NAME Home agent interface address SYNOPSIS The IPv4 addresses of the home agent in the form of \ "=
", each separated from the other by a \ semicolon. This address must be reachable from all foreign \ nets the mobile node wishes to visit. If this value is set \ "0.0.0.0" for an interface, the interface will not act home \ agent on the subnet it is configurable for, but only sniff \ incoming packets for possible forwarding to proxied mobile \ nodes. This is typically useful if the home agent is being \ run on a router. E.g., "eth0=0.0.0.0". TYPE char * DEFAULT "" } Parameter MIPHA_IF_HOME_MASK_LIST { NAME Home agent netmask SYNOPSIS The home agent IPv4 netmask(s) in the form of \ "=", each separated from the other by a \ semicolon. E.g. "eth0=255.255.0.0". TYPE char * DEFAULT "" } Parameter MIPHA_IF_FA_AUTH_LIST { NAME Foreign agent security requirements SYNOPSIS Specifies if Foreign Agent to Home Agent security \ association is required or not. Enabled(1), Disabled(0). \ This parameter is configurable on a per-interface basis \ in the form of "=", each separated from the \ other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "" } Parameter MIPHA_IF_ADV_INTERVAL_LIST { NAME Advertisement interval SYNOPSIS The interval at which the home agent will send ICMP router \ advertisements on this interface specified in the form of \ "=", each separated from the other by a \ semicolon. If set to 0, the home agent will not send any \ router advertisements, also, none of the other adv_ sysvars \ need to be set. The default value of 3 is good for testing \ purposes, whereas the RFC suggests about a value of a third \ of the ICMP router advertisement lifetime. This value can \ be set high if mobile nodes are configured to use \ solicitations upon entering new subnets. E.g. "eth0=10". TYPE char * DEFAULT "" } Parameter MIPHA_IF_ADV_ADDRESS_LIST { NAME Router advertisement address SYNOPSIS The destination address of outgoing router advertisement \ messages from the home agent. This parameter is configurable \ on a per-interface basis in the form of "=", \ each separated from the other by a semicolon. \ E.g. "eth0=224.0.0.11". TYPE char * DEFAULT "" } Parameter MIPHA_IF_ADV_LIFETIME_LIST { NAME Router advertisement lifetime SYNOPSIS The lifetime of advertisement messages from the home agent, \ in seconds. This parameter is configurable on a per-interface \ basis in the form of "=", each separated from \ the other by a semicolon. E.g. "eth0=300". TYPE char * DEFAULT "" } Parameter MIPHA_IF_NAT_T_ENABLED_LIST { NAME Enable NAT-T SYNOPSIS Enables or disables NAT Traversal according to RFC3519. \ This parameter is configurable on a per-interface basis \ in the form of "=", each separated from the \ other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "" } Parameter MIPHA_IF_NAT_T_KEEPALIVE_LIST { NAME NAT-T keepalive SYNOPSIS Decides the keepalive timeout (in seconds) to use for \ NAT Traversal ICMP keepalive messages in order to maintain \ a NAT device UDP port mapping. This parameter is \ configured on a per-interface basis in the form of \ "=", each separated from the other by a \ semicolon. E.g. "eth0=120" TYPE char * DEFAULT "" } Parameter MIPHA_IF_IPIP_TUNNEL_ENABLED_LIST { NAME Interface IPIP tunneling SYNOPSIS Enable(1)/Disable(0) usage of IPIP tunneling for an interface. \ This parameter is configurable on a per-interface basis \ in the form of "=", each separated from the \ other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "1" } Parameter MIPHA_IF_GRE_TUNNEL_ENABLED_LIST { NAME Interface GRE tunneling SYNOPSIS Enable(1)/Disable(0) usage of GRE tunneling for an interface. \ This parameter is configurable on a per-interface basis \ in the form of "=", each separated from the \ other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "" } Parameter MIPHA_IF_MINENC_TUNNEL_ENABLED_LIST { NAME Interface MIN Encap tunneling SYNOPSIS Enable(1)/Disable(0) usage of Minimal encapsulation \ tunneling for an interface. This parameter is configurable \ on a per-interface basis in the form of "=", \ each separated from the other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "" } Parameter MIPHA_IF_TUNNEL_REVERSE_LIST { NAME Interface Reverse Tunneling SYNOPSIS Disabled(0)/Optional(1)/Required(2) usage of reverse \ tunneling for an interface. If it is disabled, any node \ trying to request reverse tunneling will be disallowed. If \ optional, the node itself will be allowed to decide. If \ required the reverse tunneling bit must be set. This \ parameter can be configured on a per-interface basis in \ the form of "=", each separated from the \ other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "" } Parameter MIPHA_IF_TUNNEL_REORDERING_LIST { NAME Interface Tunnel Reordering SYNOPSIS Disabled(0)/Enabled(1) tunnel reordering. When enabled, any \ tunneltype such as GRE that supports it will guarantee in-order\ packet delivery. Syntax is "=", and it can \ be configured on an interface basis, each separated by a \ semicolon. E.g. "eth0=disabled;eth1=enabled" TYPE char * DEFAULT "" } Parameter MIPHA_IF_SIMBIND_ENABLED_LIST { NAME Simultaneous bindings support SYNOPSIS Disabled(0)/Enabled(1) simultaneous bindings. If enabled \ the home agent may maintain multiple bindings for a single \ mobile node over different CoAs. If disabled, the Home Agent \ will accept simultaneus binding registrations, but only \ maintain the last registered, and the registration response \ will be "accepted but no simultaneous bindings". Syntax is\ "=", and multiple entries may be specified \ separated by semicolon. E.g. "eth0=disabled;eth1=enabled" TYPE char * DEFAULT "enabled" } Parameter MIPHA_IF_SIMBIND_MAX_LIST { NAME Max number of simultaneous bindings SYNOPSIS Max number of allowed simultaneous bindings. Syntax is\ "=", and multiple entries may be specified \ separated by semicolon. E.g. "eth0=3;eth1=4" TYPE char * DEFAULT "3" } Parameter MIPHA_IF_REVOCATION_ENABLED_LIST { NAME Revocation Support SYNOPSIS Enable(1)/Disable(0) usage of registration revocation \ for an interface. This parameter is configurable \ on a per-interface basis in the form of "=", \ each separated from the other by a semicolon. E.g. "eth0=1". TYPE char * DEFAULT "" } Parameter MIPHA_AAA_DIAMETER_ACCESS { NAME DIAMETER Access Support SYNOPSIS If specified, the home agent will use DIAMETER access-request \ support. Values are enabled(1) and disabled(0) TYPE char * DEFAULT "disabled" } Parameter MIPHA_AAA_DIAMETER_ACCESS_ADDRESS { NAME DIAMETER Access server address SYNOPSIS DIAMETER access server address. The address of the DIAMETER server\ the home agent should send its access-requests to. TYPE char * DEFAULT "" } Parameter MIPHA_AAA_DIAMETER_ACCESS_PORT { NAME DIAMETER Access server port SYNOPSIS DIAMETER access server port The port used on the DIAMETER access\ server TYPE char * DEFAULT "1812" } Parameter MIPHA_AAA_DIAMETER_ACCESS_REQUIRE { NAME DIAMETER Access Required SYNOPSIS This key specifies whether or not MN-AAA is required to be \ present in the registration request. TYPE char * DEFAULT "false" } Parameter MIPHA_AAA_DIAMETER_ACCESS_TIME_INTERVAL { NAME DIAMETER Access Time Interval SYNOPSIS If specified, specifies that timeout in seconds that may elapse \ before attempting a new AAA authentication, given that the \ mobile node provides other authentication credentials \ (such as MN-HA authentication extension). If not specified, or \ set to "0", the home agent will always do AAA \ authentication when a AAA extension is present. TYPE char * DEFAULT "0" } Parameter MIPHA_AAA_DIAMETER_ACCESS_REALM { NAME DIAMETER Destination Realm SYNOPSIS Specifies the destination realm used when sending access-requsts \ to the DIAMETER servers. I.e. "windriver.com" TYPE char * DEFAULT "" } Parameter MIPHA_AAA_DIAMETER_ACCESS_HOSTNAME { NAME DIAMETER Destination Hostname SYNOPSIS This configuration item specifies the optional destination \ hostname parameter which may be attached to all outgoing \ access-requests to the DIAMETER servers. I.e. \ "diameter.windriver.com" TYPE char * DEFAULT "" } Parameter MIPHA_AAA_RADIUS_ACCESS { NAME RADIUS Access Support SYNOPSIS If specified, the home agent will use RADIUS access-request \ support. Values are enabled(1) and disabled(0) TYPE char * DEFAULT "disabled" } Parameter MIPHA_AAA_RADIUS_ACCESS_ADDRESS { NAME RADIUS Access server address SYNOPSIS Radius access server address. The address of the RADIUS server\ the home agent should send its access-requests to. TYPE char * DEFAULT "" } Parameter MIPHA_AAA_RADIUS_ACCESS_PORT { NAME RADIUS Access server port SYNOPSIS Radius access server port The port used on the RADIUS access\ server TYPE char * DEFAULT "1812" } Parameter MIPHA_AAA_RADIUS_ACCESS_SECRET { NAME RADIUS Access server secret SYNOPSIS Radius access server secret This is the secret required to\ be used to gain access to the RADIUS server. TYPE char * DEFAULT "" } Parameter MIPHA_AAA_RADIUS_ACCESS_REQUIRE { NAME RADIUS Access Required SYNOPSIS This key specifies whether or not MN-AAA is required to be \ present in the registration request. TYPE char * DEFAULT "false" } Parameter MIPHA_AAA_RADIUS_ACCESS_TIME_INTERVAL { NAME RADIUS Access Time Interval SYNOPSIS If specified, specifies that timeout in seconds that may elapse \ before attempting a new AAA authentication, given that the \ mobile node provides other authentication credentials \ (such as MN-HA authentication extension). If not specified, or \ set to "0", the home agent will always do AAA \ authentication when a AAA extension is present. TYPE char * DEFAULT "0" } Parameter MIPHA_AAA_RADIUS_ACCOUNTING { NAME RADIUS Accounting Support SYNOPSIS If specified, the home agent will use accounting support.\ Values are enabled(1) and disabled(0) TYPE char * DEFAULT "disabled" } Parameter MIPHA_AAA_RADIUS_ACCOUNTING_ADDRESS { NAME RADIUS Accounting server address SYNOPSIS Radius accounting server address. The address of the RADIUS \ server the home agent should send its accounting to. TYPE char * DEFAULT "" } Parameter MIPHA_AAA_RADIUS_ACCOUNTING_PORT { NAME RADIUS Accounting server port SYNOPSIS Radius accounting server port The port used on the RADIUS \ accounting server TYPE char * DEFAULT "1813" } Parameter MIPHA_AAA_RADIUS_ACCOUNTING_SECRET { NAME RADIUS Accounting server secret SYNOPSIS Radius accounting server secret This is the secret required to\ be used to gain access to the RADIUS server. TYPE char * DEFAULT "" } Parameter MIPHA_AAA_RADIUS_LOCAL_ADDRESS { NAME RADIUS local address SYNOPSIS Radius local address. The address we will bind locally to \ prior to communicating with any RADIUS server. TYPE char * DEFAULT "" } Parameter MIPHA_AAA_RADIUS_NAI { NAME RADIUS AAAH NAI SYNOPSIS The AAAH NAI to attach to the session when this RADIUS \ configuraiton is being used. TYPE char * DEFAULT "" } #endif