Cisco Cisco IOS Software Release 12.4(22)YD Références techniques

To configure multiple AAA groups, or to authorize Mobile IP to retrieve security associations from the 
AAA server using TACACS+ or RADIUS, use the aaa authorization ipmobile global configuration 
command. Use the no form of this command to remove authorization.

aaa authorization ipmobile {tacacs+ | radius}

no aaa authorization ipmobile {tacacs+ | radius}

AAA is not used to retrieve security associations for authentication.

Global configuration

Mobile IP requires security associations for registration authentication. The security associations are 
configured on the router or on an AAA server. This command is not need for the former; but in the latter 
case, this command authorizes Mobile IP to retrieve the security associations from the AAA server.

The AAA server does not authenticate the user. It stores the security association which is retrieved by 
the router to authenticate registration.

Use this command to configure multiple AAA groups, which is the key to sending different realms to 
different AAA server-groups.

The following example uses TACACS+ to retrieve security associations from the AAA server:

aaa new-model

aaa authorization ipmobile tacacs+

tacacs-server host 1.2.3.4

tacacs-server key mykey

ip mobile host 10.0.0.1 10.0.0.5 virtual-network 10.0.0.0 255.0.0.0 aaa

Use TACACS+.

Use RADIUS.

12.0(1)T

This command was introduced.

Displays the mobility host information.