- replay-method (none | timestamp seconds);
- [edit services mobile-ip peer ip-address address spi hexadecimal-value],
- [edit services mobile-ip peer nai user@domain spi hexadecimal-value]
Statement introduced in JUNOS Release 9.3.
Configure the replay protection method. The Identification field enables the home agent to verify that a registration message has been recently generated by the mobile node, rather than replayed by an attacker from a previous registration. You can specify a timestamp tolerance for the mobile node, which causes the request to be rejected if the tolerance is exceeded, or you can specify that the tolerance be taken from the value configured on the home agent.
If you do not configure the replay protection method, then the timestamp tolerance is taken from the home agent by default.
none—Timestamp tolerance is obtained from the setting configured for the home agent
timestamp seconds—Tolerance time in which a registration request timestamp and the local time of the home agent can differ.
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.