644 lines
26 KiB
Mathematica
644 lines
26 KiB
Mathematica
/* 00comp_ipnet_mobility.cdf - IPNet Mobility configuration file */
|
|
|
|
/*
|
|
* Copyright (c) 2006-2007 Wind River Systems, Inc.
|
|
*
|
|
* The right to copy, distribute or otherwise make use of this software
|
|
* may be licensed only pursuant to the terms of an applicable Wind River
|
|
* license agreement. No license to Wind River intellectual property rights
|
|
* is granted herein. All rights not licensed by Wind River are reserved
|
|
* by Wind River.
|
|
*/
|
|
|
|
/*
|
|
modification history
|
|
--------------------
|
|
01i,03oct07,jho RADIUS and DIAMETER CDF mappings
|
|
01h,19sep07,rme Added missing backslash (line: 191, 211)
|
|
01g,12sep07,jho Indentation, diameter addition, NAI AAAH update and naming
|
|
conventions, NAI HA.
|
|
01f,27feb07,kch Added MIPMN_IPSEC_PROTECTED configuration parameter for
|
|
mobile node. Also renamed MIPMN_IFNAME_LIST to MIPMN_IFNAME
|
|
since only one interface can be configured at any time in
|
|
the mobile node (WIND00089286).
|
|
01e,23jan06,tlu Fix MIP CDF defects (85299, 85297, 85290)
|
|
01d,25nov06,kch Added MIPHA_IF_NAT_T_KEEPALIVE_LIST configuration parameter.
|
|
01c,23sep06,kch Fixed IPCOM shell commands description.
|
|
01b,26aug06,kch Added support for configuration parameters.
|
|
01a,22may06,kch created.
|
|
*/
|
|
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPMIPHA
|
|
|
|
Component INCLUDE_IPMIPHA {
|
|
NAME IPv4 Home Agent
|
|
SYNOPSIS IPv4 Home Agent
|
|
MODULES ipmipha.o
|
|
REQUIRES INCLUDE_IPCOM INCLUDE_IPNET INCLUDE_IPMIP4
|
|
CONFIGLETTES ipmipha_config.c
|
|
_CHILDREN FOLDER_MOBILITY_HA
|
|
CFG_PARAMS MIPHA_IFNAME_LIST \
|
|
MIPHA_REG_LIFETIME \
|
|
MIPHA_HA_NAI \
|
|
MIPHA_REPLAY_PROTECTION \
|
|
MIPHA_SPI_LIST \
|
|
MIPHA_IF_HOME_ADDRESS_LIST \
|
|
MIPHA_IF_HOME_MASK_LIST \
|
|
MIPHA_IF_FA_AUTH_LIST \
|
|
MIPHA_IF_ADV_INTERVAL_LIST \
|
|
MIPHA_IF_ADV_ADDRESS_LIST \
|
|
MIPHA_IF_ADV_LIFETIME_LIST \
|
|
MIPHA_IF_NAT_T_ENABLED_LIST \
|
|
MIPHA_IF_NAT_T_KEEPALIVE_LIST \
|
|
MIPHA_IF_IPIP_TUNNEL_ENABLED_LIST \
|
|
MIPHA_IF_GRE_TUNNEL_ENABLED_LIST \
|
|
MIPHA_IF_MINENC_TUNNEL_ENABLED_LIST \
|
|
MIPHA_FA_SA_ADDRESS_LIST \
|
|
MIPHA_FA_SA_LOOKUP_REQUIRE \
|
|
MIPHA_MN_SA_ADDRESS_LIST \
|
|
MIPHA_MN_SA_NAI_LIST \
|
|
MIPHA_MN_SA_LOOKUP_REQUIRE \
|
|
MIPHA_MN_SA_LOOKUP_ORDER \
|
|
MIPHA_MN_DYNAMIC_HOA_REQUIRED \
|
|
MIPHA_MN_NAI_REQUIRED \
|
|
MIPHA_MN_NAI_HOA_ADDRESS_LIST \
|
|
MIPHA_IF_TUNNEL_REVERSE_LIST \
|
|
MIPHA_IF_TUNNEL_REORDERING_LIST \
|
|
MIPHA_IF_SIMBIND_ENABLED_LIST \
|
|
MIPHA_IF_SIMBIND_MAX_LIST \
|
|
MIPHA_IF_REVOCATION_ENABLED_LIST
|
|
}
|
|
|
|
Component INCLUDE_IPMIPHA_AAA_RADIUS {
|
|
NAME IPv4 Home Agent AAA Radius Support
|
|
SYNOPSIS IPv4 Home Agent AAA Radius Support
|
|
REQUIRES INCLUDE_IPMIPHA INCLUDE_IPRADIUS
|
|
_CHILDREN FOLDER_MOBILITY_HA
|
|
CFG_PARAMS MIPHA_AAA_RADIUS_ACCOUNTING \
|
|
MIPHA_AAA_RADIUS_ACCOUNTING_ADDRESS \
|
|
MIPHA_AAA_RADIUS_ACCOUNTING_PORT \
|
|
MIPHA_AAA_RADIUS_ACCOUNTING_SECRET \
|
|
MIPHA_AAA_RADIUS_ACCESS \
|
|
MIPHA_AAA_RADIUS_ACCESS_ADDRESS \
|
|
MIPHA_AAA_RADIUS_ACCESS_PORT \
|
|
MIPHA_AAA_RADIUS_ACCESS_SECRET \
|
|
MIPHA_AAA_RADIUS_ACCESS_REQUIRE \
|
|
MIPHA_AAA_RADIUS_ACCESS_TIME_INTERVAL \
|
|
MIPHA_AAA_RADIUS_LOCAL_ADDRESS \
|
|
MIPHA_AAA_RADIUS_NAI
|
|
}
|
|
|
|
Component INCLUDE_IPMIPHA_AAA_DIAMETER {
|
|
NAME IPv4 Home Agent AAA Diameter Support
|
|
SYNOPSIS IPv4 Home Agent AAA Diameter Support
|
|
REQUIRES INCLUDE_IPMIPHA INCLUDE_IPDIAMETERC
|
|
_CHILDREN FOLDER_MOBILITY_HA
|
|
CFG_PARAMS MIPHA_AAA_DIAMETER_ACCESS \
|
|
MIPHA_AAA_DIAMETER_ACCESS_ADDRESS \
|
|
MIPHA_AAA_DIAMETER_ACCESS_PORT \
|
|
MIPHA_AAA_DIAMETER_ACCESS_REQUIRE \
|
|
MIPHA_AAA_DIAMETER_ACCESS_TIME_INTERVAL \
|
|
MIPHA_AAA_DIAMETER_ACCESS_REALM \
|
|
MIPHA_AAA_DIAMETER_ACCESS_HOSTNAME
|
|
}
|
|
|
|
Component INCLUDE_IPMIPHA_FEATURE_EXTENSION {
|
|
NAME IPv4 Home Agent Feature Extension Registration Hook
|
|
SYNOPSIS IPv4 Home Agent Feature Extension allows you provide \
|
|
an additional registration hook for registration of \
|
|
external functions.
|
|
REQUIRES INCLUDE_IPMIPHA
|
|
_CHILDREN FOLDER_MOBILITY_HA
|
|
CFG_PARAMS MIPHA_FEATURE_INITIALIZATION_HOOK
|
|
}
|
|
|
|
Component INCLUDE_IPMIPHA_CMD {
|
|
NAME IPv4 Home Agent IPCOM commands.
|
|
SYNOPSIS Mobile IPv4 Home Agent IPCOM commands
|
|
MODULES ipmipha_cmd_ha.o
|
|
_CHILDREN FOLDER_MOBILITY_HA
|
|
REQUIRES INCLUDE_IPCOM_SHELL_CMD INCLUDE_IPMIPHA
|
|
}
|
|
|
|
|
|
/******************** Configuration Parameters *****************************/
|
|
|
|
Parameter MIPHA_FEATURE_INITIALIZATION_HOOK {
|
|
NAME Home Agent Feature Initialization Hook
|
|
SYNOPSIS This is the function hook that you may define in order to \
|
|
register extra functional extensions to the Home Agent
|
|
TYPE FUNCPTR
|
|
DEFAULT your_function_here
|
|
}
|
|
|
|
/* INCLUDE_IPMIPHA configuration parameters */
|
|
Parameter MIPHA_IFNAME_LIST {
|
|
NAME Home agent Interface list
|
|
SYNOPSIS Space-separated list of network interface which should be \
|
|
managed by the mobile IP home agent implementation. \
|
|
E.g., "eth0 eth1"
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_REG_LIFETIME {
|
|
NAME Registration lifetime
|
|
SYNOPSIS Specifies how long a mobile node binding is kept active \
|
|
before it is deleted, unless the mobile node have \
|
|
reregistered before the time is up. Value given in seconds.
|
|
TYPE char *
|
|
DEFAULT "30"
|
|
}
|
|
|
|
Parameter MIPHA_REPLAY_PROTECTION {
|
|
NAME Replay protection
|
|
SYNOPSIS The maximum time difference, in seconds, allowed between \
|
|
the home agent current time and the timestamp in the \
|
|
registration requests. If "0", means no check is done.
|
|
TYPE char *
|
|
DEFAULT "7"
|
|
}
|
|
|
|
Parameter MIPHA_HA_NAI {
|
|
NAME HA Network access identifier
|
|
SYNOPSIS Specify a certain HA to connect to according to RFC3846. If \
|
|
unspecified, the HA chosen will respond with its NAI, which \
|
|
will be used by the MN in all subsequent communication.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_SPI_LIST {
|
|
NAME Security Parameter Index (SPI) list
|
|
SYNOPSIS Security Parameter Index (SPI) list. Each SPI have exactly one \
|
|
secret. The secret length may be up to 16 bytes and need not \
|
|
be printable. The SPI is specifed in the form of \
|
|
"<SPI>=<value>", each separated from the other by a semicolon. \
|
|
E.g. "1000=test0", "1000=test0;1001=test1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_FA_SA_ADDRESS_LIST {
|
|
NAME Foreign - Home security association list
|
|
SYNOPSIS Security associations to use between FA and HA. This parameter \
|
|
is specified for each FA in the form of \
|
|
"<FA address>[/<prefix>]=<SPI>", each separated from the other \
|
|
by a semicolon. Set "<FA address>" to "any" to enable \
|
|
foreign-home authentication to all foreign agents. If the FA IP \
|
|
address is not found and no "any" entry exists, no foreign-home \
|
|
authentication will be used. For example, setting \
|
|
"10.1.2.42=1002" enables foreign-home authentication using \
|
|
SPI 1002 between this FA and HA using IP Address 10.1.2.42. \
|
|
Setting "any=1002" enables foreign-home authentication to \
|
|
all foreign agents using SPI 1002. Setting "10.1.2.0/24=1004" \
|
|
indicates that all foreign agents in the 10.1.2.0/24 network \
|
|
should be using SPI 1004.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_FA_SA_LOOKUP_REQUIRE {
|
|
NAME Foreign - Home security association reverse lookup
|
|
SYNOPSIS Reverse lookup any foreign-home security association used \
|
|
in communication with the foreign agent and verify that the SPI \
|
|
is indeed the SPI that should have been used, and not just that \
|
|
the calculated hash is correct.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
|
|
Parameter MIPHA_MN_SA_ADDRESS_LIST {
|
|
NAME Mobile - Home security association home address list
|
|
SYNOPSIS Security associations to use between MN and HA. This parameter \
|
|
is specified for each MN in the form of \
|
|
"<MN address>[/<prefix>]=<SPI>", each separated from the other \
|
|
by a semicolon. Set "<MN address>" to "any" to enable \
|
|
mobile-home authentication to all mobile nodes. If the MN IP \
|
|
address is not found and no "any" entry exists, no communication\
|
|
will be valid if the lookup require primitive is specified and \
|
|
no AAA key generation mechanisms have been used. For example, \
|
|
setting "10.1.2.42=1002" enables mobile-home authentication using \
|
|
SPI 1002 between this MN and HA using Home Address 10.1.2.42. \
|
|
Setting "any=1002" enables mobile-home authentication to \
|
|
all mobile nodes using SPI 1002. Setting "10.1.2.0/24=1004" \
|
|
indicates that all mobile nodes in the 10.1.2.0/24 network \
|
|
should be using SPI 1004.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_MN_SA_NAI_LIST {
|
|
NAME Mobile - Home security association NAI list
|
|
SYNOPSIS Security associations to use between MN and HA. This parameter \
|
|
is specified for each MN in the form of \
|
|
"user@domain=<SPI>" or "@domain=<SPI>" each separated from the \
|
|
other by a semicolon.For example,setting "@windriver.com=1002" \
|
|
enables mobile-home authentication using SPI 1002 between \
|
|
a mobile node using a NAI in the windriver.com domain.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
|
|
Parameter MIPHA_MN_SA_LOOKUP_REQUIRE {
|
|
NAME Mobile - Home security association reverse lookup
|
|
SYNOPSIS Reverse lookup any mobile-home security association used \
|
|
in communication with the mobile node and verify that the SPI \
|
|
is indeed the SPI that should have been used, and not just that \
|
|
the calculated hash is correct.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter MIPHA_MN_SA_LOOKUP_ORDER {
|
|
NAME Mobile - Home security association lookup order
|
|
SYNOPSIS Determines in which order security associations should be \
|
|
resolved. The value of this parameter is a list of search keys\
|
|
separated by semicolon. Currently valid values are hoa and nai.\
|
|
For example, a valid value is "hoa;nai", which is also the \
|
|
default lookup order which will be used if this parameter is \
|
|
not specified.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_MN_DYNAMIC_HOA_REQUIRED {
|
|
NAME Dynamic Home Address Assignment is required
|
|
SYNOPSIS If this particular configuration parameter is enabled(1), the\
|
|
home agent requires that the mobile node requests dynamic \
|
|
home address assignment.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter MIPHA_MN_NAI_REQUIRED {
|
|
NAME Mobile NAI is required
|
|
SYNOPSIS If this particular configuration parameter is enabled(1), the\
|
|
home agent requires that the mobile node provides a mobile \
|
|
NAI in the registration request.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter MIPHA_MN_NAI_HOA_ADDRESS_LIST {
|
|
NAME Mobile NAI to Home Address mapping
|
|
SYNOPSIS This parameter may be used to specify what HoA a Mobile Node \
|
|
should be given based on the provided Mobile NAI. The syntax \
|
|
is "<nai>=<address>", and they are specified as a semicolon \
|
|
separated list. E.g. "mipuser@windriver.com=10.1.1.1" is a \
|
|
valid entry.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
|
|
Parameter MIPHA_IF_HOME_ADDRESS_LIST {
|
|
NAME Home agent interface address
|
|
SYNOPSIS The IPv4 addresses of the home agent in the form of \
|
|
"<ifname>=<address>", each separated from the other by a \
|
|
semicolon. This address must be reachable from all foreign \
|
|
nets the mobile node wishes to visit. If this value is set \
|
|
"0.0.0.0" for an interface, the interface will not act home \
|
|
agent on the subnet it is configurable for, but only sniff \
|
|
incoming packets for possible forwarding to proxied mobile \
|
|
nodes. This is typically useful if the home agent is being \
|
|
run on a router. E.g., "eth0=0.0.0.0".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_HOME_MASK_LIST {
|
|
NAME Home agent netmask
|
|
SYNOPSIS The home agent IPv4 netmask(s) in the form of \
|
|
"<ifname>=<mask>", each separated from the other by a \
|
|
semicolon. E.g. "eth0=255.255.0.0".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_FA_AUTH_LIST {
|
|
NAME Foreign agent security requirements
|
|
SYNOPSIS Specifies if Foreign Agent to Home Agent security \
|
|
association is required or not. Enabled(1), Disabled(0). \
|
|
This parameter is configurable on a per-interface basis \
|
|
in the form of "<ifname>=<value>", each separated from the \
|
|
other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_ADV_INTERVAL_LIST {
|
|
NAME Advertisement interval
|
|
SYNOPSIS The interval at which the home agent will send ICMP router \
|
|
advertisements on this interface specified in the form of \
|
|
"<ifname>=<value>", each separated from the other by a \
|
|
semicolon. If set to 0, the home agent will not send any \
|
|
router advertisements, also, none of the other adv_ sysvars \
|
|
need to be set. The default value of 3 is good for testing \
|
|
purposes, whereas the RFC suggests about a value of a third \
|
|
of the ICMP router advertisement lifetime. This value can \
|
|
be set high if mobile nodes are configured to use \
|
|
solicitations upon entering new subnets. E.g. "eth0=10".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_ADV_ADDRESS_LIST {
|
|
NAME Router advertisement address
|
|
SYNOPSIS The destination address of outgoing router advertisement \
|
|
messages from the home agent. This parameter is configurable \
|
|
on a per-interface basis in the form of "<ifname>=<value>", \
|
|
each separated from the other by a semicolon. \
|
|
E.g. "eth0=224.0.0.11".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_ADV_LIFETIME_LIST {
|
|
NAME Router advertisement lifetime
|
|
SYNOPSIS The lifetime of advertisement messages from the home agent, \
|
|
in seconds. This parameter is configurable on a per-interface \
|
|
basis in the form of "<ifname>=<value>", each separated from \
|
|
the other by a semicolon. E.g. "eth0=300".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_NAT_T_ENABLED_LIST {
|
|
NAME Enable NAT-T
|
|
SYNOPSIS Enables or disables NAT Traversal according to RFC3519. \
|
|
This parameter is configurable on a per-interface basis \
|
|
in the form of "<ifname>=<value>", each separated from the \
|
|
other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_NAT_T_KEEPALIVE_LIST {
|
|
NAME NAT-T keepalive
|
|
SYNOPSIS Decides the keepalive timeout (in seconds) to use for \
|
|
NAT Traversal ICMP keepalive messages in order to maintain \
|
|
a NAT device UDP port mapping. This parameter is \
|
|
configured on a per-interface basis in the form of \
|
|
"<ifname>=<timeout>", each separated from the other by a \
|
|
semicolon. E.g. "eth0=120"
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_IPIP_TUNNEL_ENABLED_LIST {
|
|
NAME Interface IPIP tunneling
|
|
SYNOPSIS Enable(1)/Disable(0) usage of IPIP tunneling for an interface. \
|
|
This parameter is configurable on a per-interface basis \
|
|
in the form of "<ifname>=<value>", each separated from the \
|
|
other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT "1"
|
|
}
|
|
|
|
Parameter MIPHA_IF_GRE_TUNNEL_ENABLED_LIST {
|
|
NAME Interface GRE tunneling
|
|
SYNOPSIS Enable(1)/Disable(0) usage of GRE tunneling for an interface. \
|
|
This parameter is configurable on a per-interface basis \
|
|
in the form of "<ifname>=<value>", each separated from the \
|
|
other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_MINENC_TUNNEL_ENABLED_LIST {
|
|
NAME Interface MIN Encap tunneling
|
|
SYNOPSIS Enable(1)/Disable(0) usage of Minimal encapsulation \
|
|
tunneling for an interface. This parameter is configurable \
|
|
on a per-interface basis in the form of "<ifname>=<value>", \
|
|
each separated from the other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_TUNNEL_REVERSE_LIST {
|
|
NAME Interface Reverse Tunneling
|
|
SYNOPSIS Disabled(0)/Optional(1)/Required(2) usage of reverse \
|
|
tunneling for an interface. If it is disabled, any node \
|
|
trying to request reverse tunneling will be disallowed. If \
|
|
optional, the node itself will be allowed to decide. If \
|
|
required the reverse tunneling bit must be set. This \
|
|
parameter can be configured on a per-interface basis in \
|
|
the form of "<ifname>=<value>", each separated from the \
|
|
other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_IF_TUNNEL_REORDERING_LIST {
|
|
NAME Interface Tunnel Reordering
|
|
SYNOPSIS Disabled(0)/Enabled(1) tunnel reordering. When enabled, any \
|
|
tunneltype such as GRE that supports it will guarantee in-order\
|
|
packet delivery. Syntax is "<ifname>=<value>", and it can \
|
|
be configured on an interface basis, each separated by a \
|
|
semicolon. E.g. "eth0=disabled;eth1=enabled"
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
|
|
Parameter MIPHA_IF_SIMBIND_ENABLED_LIST {
|
|
NAME Simultaneous bindings support
|
|
SYNOPSIS Disabled(0)/Enabled(1) simultaneous bindings. If enabled \
|
|
the home agent may maintain multiple bindings for a single \
|
|
mobile node over different CoAs. If disabled, the Home Agent \
|
|
will accept simultaneus binding registrations, but only \
|
|
maintain the last registered, and the registration response \
|
|
will be "accepted but no simultaneous bindings". Syntax is\
|
|
"<ifname>=<value>", and multiple entries may be specified \
|
|
separated by semicolon. E.g. "eth0=disabled;eth1=enabled"
|
|
TYPE char *
|
|
DEFAULT "enabled"
|
|
}
|
|
|
|
Parameter MIPHA_IF_SIMBIND_MAX_LIST {
|
|
NAME Max number of simultaneous bindings
|
|
SYNOPSIS Max number of allowed simultaneous bindings. Syntax is\
|
|
"<ifname>=<value>", and multiple entries may be specified \
|
|
separated by semicolon. E.g. "eth0=3;eth1=4"
|
|
TYPE char *
|
|
DEFAULT "3"
|
|
}
|
|
|
|
Parameter MIPHA_IF_REVOCATION_ENABLED_LIST {
|
|
NAME Revocation Support
|
|
SYNOPSIS Enable(1)/Disable(0) usage of registration revocation \
|
|
for an interface. This parameter is configurable \
|
|
on a per-interface basis in the form of "<ifname>=<value>", \
|
|
each separated from the other by a semicolon. E.g. "eth0=1".
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS {
|
|
NAME DIAMETER Access Support
|
|
SYNOPSIS If specified, the home agent will use DIAMETER access-request \
|
|
support. Values are enabled(1) and disabled(0)
|
|
TYPE char *
|
|
DEFAULT "disabled"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS_ADDRESS {
|
|
NAME DIAMETER Access server address
|
|
SYNOPSIS DIAMETER access server address. The address of the DIAMETER server\
|
|
the home agent should send its access-requests to.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS_PORT {
|
|
NAME DIAMETER Access server port
|
|
SYNOPSIS DIAMETER access server port The port used on the DIAMETER access\
|
|
server
|
|
TYPE char *
|
|
DEFAULT "1812"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS_REQUIRE {
|
|
NAME DIAMETER Access Required
|
|
SYNOPSIS This key specifies whether or not MN-AAA is required to be \
|
|
present in the registration request.
|
|
TYPE char *
|
|
DEFAULT "false"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS_TIME_INTERVAL {
|
|
NAME DIAMETER Access Time Interval
|
|
SYNOPSIS If specified, specifies that timeout in seconds that may elapse \
|
|
before attempting a new AAA authentication, given that the \
|
|
mobile node provides other authentication credentials \
|
|
(such as MN-HA authentication extension). If not specified, or \
|
|
set to "0", the home agent will always do AAA \
|
|
authentication when a AAA extension is present.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS_REALM {
|
|
NAME DIAMETER Destination Realm
|
|
SYNOPSIS Specifies the destination realm used when sending access-requsts \
|
|
to the DIAMETER servers. I.e. "windriver.com"
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_DIAMETER_ACCESS_HOSTNAME {
|
|
NAME DIAMETER Destination Hostname
|
|
SYNOPSIS This configuration item specifies the optional destination \
|
|
hostname parameter which may be attached to all outgoing \
|
|
access-requests to the DIAMETER servers. I.e. \
|
|
"diameter.windriver.com"
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCESS {
|
|
NAME RADIUS Access Support
|
|
SYNOPSIS If specified, the home agent will use RADIUS access-request \
|
|
support. Values are enabled(1) and disabled(0)
|
|
TYPE char *
|
|
DEFAULT "disabled"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCESS_ADDRESS {
|
|
NAME RADIUS Access server address
|
|
SYNOPSIS Radius access server address. The address of the RADIUS server\
|
|
the home agent should send its access-requests to.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCESS_PORT {
|
|
NAME RADIUS Access server port
|
|
SYNOPSIS Radius access server port The port used on the RADIUS access\
|
|
server
|
|
TYPE char *
|
|
DEFAULT "1812"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCESS_SECRET {
|
|
NAME RADIUS Access server secret
|
|
SYNOPSIS Radius access server secret This is the secret required to\
|
|
be used to gain access to the RADIUS server.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCESS_REQUIRE {
|
|
NAME RADIUS Access Required
|
|
SYNOPSIS This key specifies whether or not MN-AAA is required to be \
|
|
present in the registration request.
|
|
TYPE char *
|
|
DEFAULT "false"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCESS_TIME_INTERVAL {
|
|
NAME RADIUS Access Time Interval
|
|
SYNOPSIS If specified, specifies that timeout in seconds that may elapse \
|
|
before attempting a new AAA authentication, given that the \
|
|
mobile node provides other authentication credentials \
|
|
(such as MN-HA authentication extension). If not specified, or \
|
|
set to "0", the home agent will always do AAA \
|
|
authentication when a AAA extension is present.
|
|
TYPE char *
|
|
DEFAULT "0"
|
|
}
|
|
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCOUNTING {
|
|
NAME RADIUS Accounting Support
|
|
SYNOPSIS If specified, the home agent will use accounting support.\
|
|
Values are enabled(1) and disabled(0)
|
|
TYPE char *
|
|
DEFAULT "disabled"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCOUNTING_ADDRESS {
|
|
NAME RADIUS Accounting server address
|
|
SYNOPSIS Radius accounting server address. The address of the RADIUS \
|
|
server the home agent should send its accounting to.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCOUNTING_PORT {
|
|
NAME RADIUS Accounting server port
|
|
SYNOPSIS Radius accounting server port The port used on the RADIUS \
|
|
accounting server
|
|
TYPE char *
|
|
DEFAULT "1813"
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_ACCOUNTING_SECRET {
|
|
NAME RADIUS Accounting server secret
|
|
SYNOPSIS Radius accounting server secret This is the secret required to\
|
|
be used to gain access to the RADIUS server.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_LOCAL_ADDRESS {
|
|
NAME RADIUS local address
|
|
SYNOPSIS Radius local address. The address we will bind locally to \
|
|
prior to communicating with any RADIUS server.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
Parameter MIPHA_AAA_RADIUS_NAI {
|
|
NAME RADIUS AAAH NAI
|
|
SYNOPSIS The AAAH NAI to attach to the session when this RADIUS \
|
|
configuraiton is being used.
|
|
TYPE char *
|
|
DEFAULT ""
|
|
}
|
|
|
|
#endif
|