mipv6_sas.conf(5)

NAME
mipv6_sas.conf - MIPL Mobile IPv6 security associations

DESCRIPTION
mipv6_sas.conf is the security associations configuration file for MIPL. This file is normally used by mipdiag(8). It contains the security associations with which a node can authenticate Mobile IPv6 signaling. Security associations, or SAs, are unidirectional structures consisting of the information used for building and verifying the authentication header used in Mobile IPv6 signaling messages. To enable authentication of home registration you need to set up a outbound SA in the mobile node and an inbound SA in its home agent. You also need to set up an inbound SA in the mobile node and an outbound SA in the home agent for authentication of binding acknowledgements. You need to set up a separate pair of SAs for each mobile node using the home agent. To enable direct communication between a mobile node and a correspondent node you need to set up an outbound SA in the mobile node and an inbound SA in the correspondent node. The name of each field needs to be present in every SA. The value for the field should be separated from the name of the field with exactly one space. Empty lines or empty space at the beginning of lines are not allowed.

FIELDS

peer_address: address
    This field defines the peer used and needs to be defined.

spi: spi
    SPI or security parameter index is used to demultiplex incoming connections. Values below 256 are reserved. This field should be the same in the inbound SA of one end and outbound SA of the other end.

auth_alg:
    Defines the algorithm used for message authentication and also the key length. Possible values: ALG_AUTH_HMAC_MD5 :MD5 HMAC uses a key length of 128 bits. ALG_AUTH_HMAC_SHA1 SHA1 HMAC uses a key length of 160 bits.

key: authentication key
    Key used for authentication with this SA. The string has 22 characters if MD5 HMAC is used and 28 if SHA1 HMAC is used. Valid characters include :
     in one end and outbound in the other end.

lifetime: lifetime
    Lifetime for the SA in seconds. Set this field to 0 for an infinite lifetime.

soft_lifetime: soft_lifetime
    Soft lifetime for the SA in seconds. Set this field to 0 for an infinite soft lifetime.

direction: direction
    Direction of the SA. Either inbound or outbound.

EXAMPLE
/etc/mip6_sas.conf file in a home agent with SAs for a mobile node with the home address 3ffe:2620:6:1234:abcd::1.

 peer_address: 3ffe:2620:6:1234:abcd::1
 spi: 1033
 auth_alg: ALG_AUTH_HMAC_MD5
 key: abcdefghijkl1234567890
 lifetime:
 soft_lifetime:
 direction: inbound
 peer_address: 3ffe:2620:6:1234:abcd::1
 spi: 1034
 auth_alg: ALG_AUTH_HMAC_MD5
 key: 1234567890abcdefghijkl
 lifetime:
 soft_lifetime:
 direction: outbound Contents of the /etc/mipv6_sas.conf file in the mobile node. 3ffe:2620:6:1234:defg::2 is the address of the home agent.

 peer_address: 3ffe:2620:6:1234:defg::2
 spi: 1033
 auth_alg: ALG_AUTH_HMAC_MD5
 key: abcdefghijkl1234567890
 lifetime:
 soft_lifetime:
 direction: outbound
 peer_address: 3ffe:2620:6:1234:defg::2
 spi: 1034
 auth_alg: ALG_AUTH_HMAC_MD5
 key: 1234567890abcdefghijkl
 lifetime:
 soft_lifetime:
 direction: inbound

AUTHOR
Henrik Petander <lpetande@tml.hut.fi>

SEE ALSO
mipdiag(8), mipv6_sas.conf.example