mobip6ctrl Command

Purpose

Configures and manages the mobile IPv6 home agent and correspondent node functionality.

Syntax

mobip6ctrl [ -c ] [ -R ] [ -b ] [ -S { 0 | 1 } ] [ -n { 0 | 1 } ] [ -l LifeTime ] [ -a | -d HomeAddress CareOfAddress MyAddress ]

Description

The mobip6ctrl command is used to configure and manage the mobile IPv6 home agent and correspondent node. It can enable and disable NDP proxy and IP security checking, and it can be used to display or modify the mobile IPv6 binding cache.

NDP proxy must be enabled if the system is configured as a home agent. This allows the home agent to intercept packets addressed to mobile nodes that are not currently on their home network.

IP security checking enables checking to ensure that IP security is used for the Binding Update and Binding Acknowledgement messages sent for mobile IPv6. Because these two types of messages have the ability to affect the routing of packets addressed to a mobile node, they would represent a significant security vulnerability if not protected by IP security. If checking is enabled, the mobile IPv6 home agent or correspondent node will discard any Binding Update or Binding Acknowledgement packets that are not protected by IP security.

The mobile IPv6 binding cache on a home agent or correspondent node maps home addresses to the current care-of addresses for each mobile node. This allows the home agent to tunnel traffic to the mobile node at its current location, and allows a correspondent node to send packets directly to a mobile node at its current location. The mobip6ctrl command can be used to view the binding cache or manually edit it for debugging purposes.

Normally, this command is used from the /etc/rc.mobip6 script when mobile IPv6 has been configured using system management.

Flags

Item Description
-a HomeAddress CareOfAddress MyAddress Adds this entry to the binding cache.
-b Displays all binding cache entries.
-c Compatibility option which enables the support of the mobiles implementing the draft #13 of the Mobility support in IPv6 specification. Using this option, the home agent or correspondent node will accept the binding update messages sent using a Destination Option and using an Authentication Header (AH) to protect these packets with IPsec.
-dHomeAddress CareOfAddress MyAddress Delete this entry from the binding cache.
-l LifeTime Specifies the default life time value for binding cache entries in seconds.
-n 0 | 1 Activates or deactivates NDP proxy capabilities. A value of 1 activates the NDP proxy capabilities, and a value of 0 disables NDP proxy capabilities. The default value is 0.
-R Resets all the binding cache entries.
-S 0 | 1 Enables or disables checking to ensure that IP security is used for all Binding Update and Binding Acknowledgement packets. A value of 1 enables checking, and a value of 0 disables checking. The default value is 0.

Exit Status

0
The command completed successfully.
>0
An error occurred.

Security

You must be the root user or a member of the system group to execute this command.

Examples

  1. The following example enables NDP proxy and IP security checking for mobile IPv6: 
    mobipctrl -S 1 -n 1
  2. The following example displays all entries in the binding cache: 
    mobip6ctrl -b
    The output from this command looks similar to the following: 
                    BINDING CACHE LIST (1 elem)

Home Address.........: 3ffe:300:20:1102::217
Care-Of Address......: 3ffe:300:20:1101::217
My Address...........: 3ffe:300:20:1102::223
Life time............: 518
Time since last usage: 50
Rate limit time......: 0
Retransmit count.....: 0
Sequence number......: 14
Registered by me.....: 1
Prefix length........: 64