Manual

Cisco Packet Data Serving Node (PDSN) Release 2.0
Configuration Tasks
60
12.3(11)T
Configuring Mobile IP Security Associations
To configure security associations for mobile hosts, FAs, and HAs, use one of the following commands
in global configuration mode:
Configuring PDSN Cluster Controller
To configure the PDSN Cluster Controller attributes locally, use the following commands in global
configuration mode.
Note These commands have no effect if the router supports PDSN member functionality from a prior
configuration.
Configuring PDSN Cluster Member
To configure the PDSN Cluster Member attributes locally, use the following commands in global
configuration mode:
Note These commands have no effect if the router supports PDSN member functionality from a prior
configuration.
Command Purpose
Router(config)# ip mobile secure {aaa-download | visitor |
home-agent
| proxy-host} {lower-address [upper-address] |
nai string}
{inbound-spi spi-in outbound-spi spi-out |
spi spi
} key {hex | ascii} string [replay timestamp
[number] algorithm md5 mode prefix-suffix]
Specifies the security associations for IP mobile
users.
Router(config)# ip mobile secure proxy-host nai string spi
spi key {ascii | hex} string
Specifies the security associations for proxy Mobile
IP users.
Command Purpose
Router(config)# cdma pdsn secure cluster default spi
spi number [key ascii | hex value ]
Configures one common security association for all PDSNs
in a cluster.
Router #cdma pdsn cluster controller interface
interface name
Enables the controller functionality for PDSN
Controller/Member clustering, specifies which interface to
send messages to and from
Router# cdma pdsn cluster controller standby
cluster-name
Configures the PDSN to operate as a cluster controller in
standby.