Cisco Cisco Packet Data Interworking Function (PDIF) Prospecto
FA Service Configuration Mode Commands
fa-ha-spi ▀
Cisco ASR 5x00 Command Line Interface Reference ▄
4787
fa-ha-spi
Configures the security parameter index (SPI) between the FA service and the HA.
Product
PDSN
ASN-GW
GGSN
PDIF
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > Context Configuration > FA Service Configuration
configure > context context_name > fa-service service_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-fa-service)#
Syntax
fa-ha-spi remote-address { ha_ip_address | ip_addr_mask_combo } spi-number number {
encrypted secret enc_secret | secret } [ description string | hash-algorithm { hmac-md5 |
md5 | rfc2002-md5 } | monitor-ha | replay-protection { timestamp | nonce } | timestamp-
tolerance tolerance ]
encrypted secret enc_secret | secret } [ description string | hash-algorithm { hmac-md5 |
md5 | rfc2002-md5 } | monitor-ha | replay-protection { timestamp | nonce } | timestamp-
tolerance tolerance ]
no fa-ha-spi remote-address { ha_ip_address | ip_addr_mask_combo } spi-number number
remote-address { ha_ip_address
|
ip_addr_mask_combo }
ha_ip_address
: Specifies the IP address of the HA in IPv4 dotted-decimal notation.
ip_addr_mask_combo
: Specifies the IP address of the HA including network mask bits.
ip_addr_mask_combo
must be specified IPv4 dotted-decimal notation with CIDR subnet mask bits
(x.x.x.x/xx).
spi-number
number
Specifies the Security Parameter Index (SPI) which indicates a security context between the FA and the HA
in accordance with RFC 2002.
number can be configured to an integer from 256 through 4294967295.
in accordance with RFC 2002.
number can be configured to an integer from 256 through 4294967295.
encrypted secret
enc_secret
|
secret
secret
Configures the shared-secret between the FA service and the HA. The secret can be either encrypted or non-
encrypted.
encrypted.
encrypted secret enc_secret
: Specifies the encrypted shared key (enc_secret) between the FA
service and the HA.
enc_secret
must be an alphanumeric string of 1 through 254 characters that is
case sensitive.