How to Display Current Parameter Values in the Configuration File

You can use the mipagentconfig get command to display current settings that are associated with parameter destinations.

1. Assume the Primary Administrator role, or become superuser, on the system where you are enabling Mobile IP.

   The Primary Administrator role includes the Primary Administrator profile. To create the role and assign the role to a user, see Chapter 2, "Working With the Solaris Management Console (Tasks)," in System Administration Guide: Basic Administration.

2. Type the following command for each parameter for which you want to display settings:

   # mipagentconfig get [<parameter> | <label>]

   
   

   For example, if you are displaying the advertisement settings for the hme0 device, use the following command:

   # mipagentconfig get adv hme0

   
   

   As a result, the following output might be displayed:

   [Advertisements hme0] HomeAgent = yes ForeignAgent = yes

   
   

Example 28-9   Using the mipagentconfig get Command to Display Parameter Values

The following example shows the results of using the mipagentconfig get command with other parameter destinations.

# mipagentconfig get MaxClockSkew
      [GlobalSecurityParameters]
         MaxClockSkew=300

# mipagentconfig get HA-FAauth
      [GlobalSecurityParameters]
         HA-FAauth=no

# mipagentconfig get MN-FAauth
      [GlobalSecurityParameters]
         MN-FAauth=no

# mipagentconfig get Challenge
      [GlobalSecurityParameters]
         Challenge=no

# mipagentconfig get Pool 10
      [Pool 10]
         BaseAddress=192.168.1.1
         Size=100

# mipagentconfig get SPI 257
      [SPI 257]
         Key=11111111111111111111111111111111
         ReplayMethod=none

# mipagentconfig get SPI 258
      [SPI 258]
         Key=15111111111111111111111111111111
         ReplayMethod=none

# mipagentconfig get addr 10.1.1.1
      [Address 10.1.1.1]
         SPI=258
         Type=agent

# mipagentconfig get addr 192.168.1.200
      [Address 192.168.1.200]
         SPI=257
         Type=node# mipagentconfig get addr 10.1.1.1
      [Address 10.1.1.1]
         Type=agent
         SPI=258
         IPsecRequest = apply {auth_algs md5 sa shared}
         IPsecReply = permit {auth_algs md5}
         IPsecTunnel = apply {encr_algs 3des sa shared}

Displaying Mobility Agent Status

You can use the mipagentstat command to display a foreign agent's visitors list and a home agent's binding table. Mobile IP Mobility Agent Status provides a conceptual description of the mipagentstat command. You can also review the mipagentstat(1M) man page.

How to Display Mobility Agent Status

1. Become superuser or assume an equivalent role on the system where you are enabling Mobile IP.

   Roles contain authorizations and privileged commands. For more information about roles, see "Configuring RBAC (Task Map)" in System Administration Guide: Security Services.

2. Display the mobility agent status.

   # mipagentstat options

   
   

   -f	Shows the list of active mobile nodes in the foreign agent's visitor list.
   -h	Shows the list of active mobile nodes in the home agent's binding table.
   -p	Shows the list of security associations with an agent's mobility agent peers.

Example 28-10   Displaying Mobility Agent Status

This example shows how to display the visitor list for all mobile nodes that are registered with a foreign agent.

# mipagentstat -f

As a result, output similar to the following is displayed:

Mobile Node     Home Agent     Time (s)     Time (s)  Flags
                               Granted      Remaining
--------------- -------------- ------------ --------- -----
foobar.xyz.com  ha1.xyz.com    600          125       .....T.
10.1.5.23       10.1.5.1       1000         10        .....T.

This example shows how to display foreign agent security associations.

# mipagentstat -p

As a result, output similar to the following is displayed:

Foreign                  ..... Security Association(s).....
Agent                    Requests Replies  FTunnel  RTunnel
----------------------   -------- -------- -------- --------
forn-agent.eng.sun.com   AH       AH       ESP      ESP

This example shows how to display home agent security associations.

# mipagentstat -fp

As a result, output similar to the following is displayed:

Home                     ..... Security Association(s) .....
Agent                    Requests Replies  FTunnel  RTunnel
----------------------   -------- -------- -------- --------
home-agent.eng.sun.com   AH       AH       ESP      ESP
ha1.xyz.com              AH,ESP   AH       AH,ESP   AH,ESP