Cisco Systems 78-11741-02 manual Configuring Radius in the Mobile IP Environment, Verifying Setup

Configuring Mobile IP

Mobile IP Configuration Task List

	Command	Purpose
Step 1
	Router(config)# aaa new-model	Enables the AAA access control model.
Step 2
	Router(config)# aaa authorization ipmobile	Authorizes Mobile IP to retrieve security associations
	{tacacs+ radius}	from the AAA server using TACACS+ or RADIUS.

Configuring RADIUS in the Mobile IP Environment

Remote Authentication Dial-in User Service (RADIUS) is a method for defining the exchange of AAA information in the network. In the Cisco implementation, RADIUS clients run on Cisco routers and send authentication requests to a RADIUS server that contains all user authentication and network server access information. For detailed information about RADIUS configuration options, refer to the “Configuring RADIUS” chapter in the Cisco IOS Security Configuration Guide.

To configure RADIUS in the Mobile IP environment, use the following commands in global configuration mode:

	Command	Purpose
Step 1
	Router(config)# radius-server host	Specifies a RADIUS server host.
Step 2
	Router(config)# radius-server key	Sets the authentication and encryption key for all
		RADIUS communications between the router and the
		RADIUS daemon.

Configuring TACACS+ in the Mobile IP Environment

Terminal Access Controller Access Control System Plus (TACACS+) is an authentication protocol that provides remote access authentication and related services, such as event logging. For detailed information about TACACS+ configuration options, refer to the “Configuring TACACS+” chapter in the Cisco IOS Security Configuration Guide.

To configure TACACS+ in the Mobile IP environment, use the following commands in global configuration mode:

	Command	Purpose
Step 1
	Router(config)# tacacs-server host	Specifies a TACACS+ server host.
Step 2
	Router(config)# tacacs-server key	Sets the authentication encryption key used for all
		TACACS+ communications between the access server
		and the TACACS+ daemon.

Verifying Setup

To make sure Mobile IP is set up correctly, use the following commands in EXEC mode as needed:

Cisco IOS IP Configuration Guide

IPC-169