Cisco Cisco IOS Software Release 12.4(15)XM Références techniques

To authorize Mobile IP to retrieve security associations from the AAA server using TACACS+ or 
RADIUS, use the aaa authorization ipmobile global configuration command. Use the no form of this 
command to remove authorization.

aaa authorization ipmobile {tacacs+ | radius}

no aaa authorization ipmobile {tacacs+ | radius}

AAA is not used to retrieve security associations for authentication.

Global configuration

Mobile IP requires security associations for registration authentication. The security associations are 
configured on the router or on an AAA server. This command is not need for the former; but in the latter 
case, this command authorizes Mobile IP to retrieve the security associations from the AAA server.

The AAA server does not authenticate the user. It stores the security association which is retrieved by 
the router to authenticate registration.

The following example uses TACACS+ to retrieve security associations from the AAA server:

aaa new-model

aaa authorization ipmobile tacacs+

tacacs-server host 1.2.3.4

tacacs-server key mykey

ip mobile host 10.0.0.1 10.0.0.5 virtual-network 10.0.0.0 255.0.0.0 aaa

Use TACACS+.

Use RADIUS.

12.0(1)T

This command was introduced.

Displays the mobility host information.