HP MSR Router Series
NEMO
Configuration Guide(V7)
Part number: 5998-7361b
Software version: CMW710-R0304
Document version: 6PW104-20150914
Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
i
Contents
Configuring NEMO ····················································································································································· 1 Overview············································································································································································ 1 Basic concepts ·························································································································································· 1 NEMO application scenarios ································································································································· 1 Registration message format ··································································································································· 3 Protocols and standards ·········································································································································· 6 NEMO configuration task list ·········································································································································· 6 Configuring NEMO ·························································································································································· 6 Configuring mobile IP ·············································································································································· 6 Configuring the mobile router feature ···················································································································· 7 Configuring a roaming interface ···························································································································· 8 Configuring a mobility SA ······································································································································· 8 Displaying and maintaining NEMO ······························································································································· 8 NEMO configuration example ········································································································································ 9 Support and other resources ····································································································································· 12 Contacting HP ································································································································································ 12 Subscription service ·············································································································································· 12 Related information ························································································································································ 12 Documents ······························································································································································ 12 Websites································································································································································· 12 Conventions ···································································································································································· 13 Index ··········································································································································································· 15 i
Configuring NEMO
Overview
Network mobility (NEMO) enables a node to retain the same IP address and maintain application
connectivity when the node travels across networks. It allows location-independent routing of IP
datagrams on the Internet.
Basic concepts
The NEMO feature includes the following concepts.
Home address
A home address is an IP address that is allocated to a mobile node. The mobile node uses this IP address
for all communications.
Home network
A home network is the network where the home address of a mobile node resides. The network is
attached to a home agent. Packets destined for the home address of the mobile node are forwarded to
the home network.
Mobile node (MN)
A mobile node is a mobile host or a router capable of reporting its current visiting network to the home
agent.
Home agent (HA)
A home agent is a host or a router acting as the home network for a mobile node. It saves the current
location of the mobile node and forwards traffic to the mobile node.
Care-of address (CoA)
A care-of address identifies the location of a mobile node when the node is away from its home network.
This CoA address is the local endpoint of the tunnel to the home agent.
Collocated care-of address (CCoA)
A collocated care-of address is a care-of address that a mobile node obtains through manual
configuration or DHCP.
Mobile router (MR)
A mobile router is a router that operates as a mobile node.
NEMO application scenarios
NEMO provides the following applications for connecting the mobile network to the home network:
•
3G or 4G wireless access.
•
Wired access with the 3G or 4G wireless link as the backup link.
1
Connecting the mobile network to the home network through the 3G or 4G wireless link
As shown in Figure 1, a tunnel is established between the 3G or 4G wireless modem interfaces of the
mobile router and the home agent. The mobile router and nodes on the mobile network can use the
tunnel to access the home network.
When the mobile router moves from its home network, only the IP address of the 3G or 4G wireless
modem interface of the mobile router changes.
The mobile router sends a registration request to the home agent and reestablishes a tunnel with the
home agent. Hosts attaching to the mobile router are unaware of the IP address change. Services are not
interrupted.
Figure 1 Connecting the mobile network and the home network through the wireless link
Data Center/Internet
HA
Device
Device
MR
Wireless
Terminal
PC
PC
Connecting the mobile network to the home network through the wired link
As shown in Figure 2, the 3G or 4G wireless link is the backup link for the wired link between the mobile
network and the home network.
When the mobile router moves from its home network, the wired link is disconnected. The mobile network
is connected to the home network through the 3G or 4G wireless link. After the move is completed, the
wired link is recovered, and the wireless link becomes the backup link.
2
Figure 2 Connecting the mobile network and the home network through the wired link
Registration message format
A registration message contains the fixed portion and extensions. The authentication extension must be
added. The mobile network extension and NVSE extension can be added as required.
Registration request
Figure 3 Registration request message format
3
A registration request contains the following fields:
•
Type—Type of the message. The value 1 represents a registration request, and the value 3
represents a registration reply.
•
S—Simultaneous bindings.
•
B—Broadcast datagrams.
•
D—Decapsulation by mobile node.
•
M—Minimal encapsulation.
•
G—GRE encapsulation.
•
r—Sent as zero. It is ignored on reception.
•
T—Reverse tunneling requested.
•
x—Sent as zero. It is ignored on reception.
•
Lifetime—Lifetime of the registration. The value 0 represents a request for deregistration. The value
0xFFFF (65535) indicates infinity.
•
Home Address—Home address of the mobile node.
•
Home Agent—IP address of the mobile node's home agent.
•
Care-of Address—IP address for the end of the tunnel.
•
Identification—It is used to match registration requests and registration replies. The value is
formatted as specified by the NTP.
•
Extensions—Authentication extension. The mobile network extension and NVSE extension can be
added as required.
Registration reply
Figure 4 Registration reply message format
A registration reply contains the following different fields than a registration request:
•
Code—A value indicating the result of the registration request. The values 0 through 8 indicate that
the registration request is accepted. For more information, see RFC 5944.
•
Identification—It is used to match registration requests and registration replies. If the registration
request is accepted, this field copies the value of the Identification field in the registration request.
4
Authentication extension
Figure 5 Authentication extension format
An authentication extension contains the following fields:
•
Type—Type of the extension. The value is 32.
•
Length—Length of the extension. The value is the total number of bytes in the SPI and Authenticator
fields.
•
SPI—Security parameter index.
•
Authenticator—Authentication data in cipher text.
Mobile network extension
Figure 6 Mobile network extension format
A mobile network extension contains the following fields:
•
Type—Type of the extension. The value is 148.
•
Length—Length of the extension, excluding the Type filed. The value is 6.
•
Sub-Type—Sub-type of the extension. The value is 0.
•
Prefix Length—Prefix length of the mobile network.
•
Prefix—Prefix of the mobile network.
Normal Vendor/Organization Specific Extension (NVSE)
Figure 7 NVSE format
An NVSE extension contains the following fields:
•
Type—Type of the extension. The value is 134.
•
Length—Length of the extension, excluding the Type field.
•
Reserved—Reserved for future use.
•
Vendor/Org-ID—Vendor ID. The value 9 represents Cisco.
•
Vendor-NVSE-Type—Type of the vendor NVSE extension. The value 9 represents the explicit mode,
and the value 13 represents the implicit mode.
•
Vendor-NVSE-Value—Value of the vendor NVSE extension.
5
NVSE prefix extension
Figure 8 NVSE prefix extension format
An NVSE prefix extension contains the following fields:
•
Sub-Type—Sub-type of the extension. The value 1 represents a registration request, and the value 2
represents a registration reply.
•
Length—Length of the extension. The value is 6.
•
Prefix Length—Prefix length of the mobile network.
•
Code—A value indicating the result of the registration request. The value 0 indicates that the
registration request is accepted.
•
Prefix—Prefix of the mobile network.
Protocols and standards
•
RFC 5177, Network Mobility (NEMO) Extensions for Mobile IPv4
•
RFC 5944, IP Mobility Support for IPv4, Revised
NEMO configuration task list
Tasks at a glance
(Required.) Configuring mobile IP
(Required.) Configuring the mobile router feature
(Required.) Configuring a roaming interface
(Required.) Configuring a mobility SA
Configuring NEMO
Enable mobile IP before you perform other tasks for NEMO configuration.
Configuring mobile IP
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable mobile IP and enter its
view.
router mobile
By default, mobile IP is disabled.
3.
(Optional.) Set a preference for
mobile IP routes.
preference preference-value
By default, the preference for mobile
IP routers is 65.
6
Step
4.
Command
(Optional.) Set the interface
number range for the
automatically created tunnel
between the mobile router and
the home agent.
Remarks
By default:
tunnel-number min min-number
max max-number
• The minimum interface number is
0.
• The maximum interface number
varies by device model.
Configuring the mobile router feature
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable the mobile router
feature and enter mobile router
view.
ip mobile router
By default, this feature is disabled.
3.
Assign a home address to the
mobile router.
address ip-address
By default, the mobile router does
not have any home addresses.
4.
Specify the IP address of the
home agent for the mobile
router.
home-agent ip-address
By default, no home agent is
specified for the mobile router.
5.
(Optional.) Specify the mobile
router interface that is
connected to the mobile
network.
mobile-network { interface-type
interface-number |
interface-number.subnumber }
By default, no mobile router
interface is specified.
The primary IP address of the
interface is contained in the
registration request to inform the
home agent of the mobile network.
By default:
6.
7.
• The mobile router sends a
(Optional.) Configure
registration extending
parameters for the mobile
router to be kept alive.
register extend expire seconds
retry number interval seconds
(Optional.) Set the registration
lifetime requested by the mobile
router.
register lifetime seconds
registration request 60 seconds
before the registration expires.
• The mobile router makes 3 retries
at an interval of 10 seconds if no
reply is received.
The default registration lifetime is
65534 seconds.
By default:
8.
(Optional.) Set retransmission
parameters for the mobile
router's registration with the
home agent.
• The initial waiting time is 1000
register retransmit initial
milliseconds maximum
milliseconds retry number
milliseconds.
• The maximum waiting time is
5000 milliseconds.
• The maximum number of retries
is 3.
9.
(Optional.) Enable the
interoperability mode.
10. (Optional.) Set the MTU for the
tunnel interface connecting to
the home agent.
interop
By default, the interoperability mode
is disabled.
tunnel mtu value
By default, the MTU for the tunnel
interface is 64000 bytes.
7
Step
Command
Remarks
11. (Optional.) Set the DF bit to 0
for outgoing tunneled packets.
ip df-bit zero
By default, the DF bit of outgoing
tunneled packets is not set.
12. (Optional.) Set the TCP MSS for
the tunnel interface connecting
to the home agent.
tcp mss value
By default, no TCP MSS is set.
Configuring a roaming interface
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter Layer 3 interface view.
interface interface-type
interface-number
N/A
3.
Configure the interface as a
roaming interface.
ip mobile router-service roam
By default, the roaming function is
disabled on an interface.
4.
(Optional.) Specify the
gateway address for the
roaming interface.
ip mobile router-service collocated
gateway ip-address
By default, no gateway address is
specified for the roaming interface.
5.
(Optional.) Set the
registration retry interval.
ip mobile router-service collocated
registration retry seconds
By default, the interval is 60
seconds.
Configuring a mobility SA
For successful authentication, configure the same SA on the mobile router and the home agent.
To configure an SA for authentication:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure an SA for
authentication.
ip mobile secure home-agent
ip-address spi hex-value key ascii
{ cipher | simple } string
By default, no SA is specified on the
router for authentication.
Displaying and maintaining NEMO
Execute display commands in any view.
Task
Command
Display registration information for the mobile router.
display ip mobile router registration
8
NEMO configuration example
Network requirements
As shown in Figure 9, the HA is a Cisco device. The MR uses a USB 3G modem to access the 3G network
through Dial-on-Demand Routing (DDR) and register with the HA.
Configure NEMO on the MR to meet the following requirements when the mobile network moves:
•
The hosts on the mobile network use their home addresses for communication.
•
Application connectivity is maintained on the hosts.
Figure 9 Network diagram
Data Center/Internet
HA
Loop0
1.1.1.2/32
Device
Device
MR
GE2/0/1
20.1.1.1/24
Wireless
Terminal
PC
PC
Configuration procedure
1.
Configure the MR:
# Assign the IP address 20.1.1.1 to GigabitEthernet 2/0/1.
<MR> system-view
[MR] interface gigabitethernet 2/0/1
[MR-GigabitEthernet2/0/1] ip address 20.1.1.1 255.255.255.0
[MR-GigabitEthernet2/0/1] quit
# Enable mobile IP.
[MR] router mobile
[MR-MIP] quit
9
# Enable the mobile router feature.
[MR] ip mobile router
# Assign a home address to the MR.
[MR-mobile-router] address 1.1.1.3
# Specify the IP address of the home agent 1.1.1.2 (IP address of interface Loopback 0 on HA) on
the MR.
[MR-mobile-router] home-agent 1.1.1.2
# Specify GigabitEthernet 2/0/1 as the mobile router interface.
[MR-mobile-router] mobile-network gigabitethernet 2/0/1
[MR-mobile-router] quit
# Channelize Cellular 2/4/0 into a synchronous/asynchronous serial interface.
[MR] controller cellular 2/4/0
[MR-Cellular2/4/0] serial-set 0
[MR-Cellular2/4/0] quit
# Configure Serial 2/4/0:0 as the roaming interface. (The IP address of the roaming interface is
assigned by the service provider. For more information, see Layer 2—WAN Access Configuration
Guide.)
[MR] interface serial 2/4/0:0
[MR-Serial2/4/0:0] ip mobile router-service roam
[MR-Serial2/4/0:0] quit
# Configure an SA that contains the home agent address 1.1.1.2, SPI 100, and the plaintext key
abc. (For successful authentication, configure the same SA on the HA.)
[MR] ip mobile secure home-agent 1.1.1.2 spi 100 key ascii simple abc
2.
Configure the HA. (Details not shown. For more information, see the HA user documentation.)
Verifying the configuration
# Display the registration information for the MR.
[MR] display ip mobile router registration
Registration accepted on 12/04/13 at 10:43:52, On Serial2/4/0:0
Care-of addr: 208.122.148.233, HA addr: 1.1.1.2, Home addr: 1.1.1.3
Lifetime requested: 65534, Granted: 36000
Remaining: 9 hours 58 minutes 36 seconds
Flags sbDmG-TIdentification d64985e8.bd34f00e
Next registration: 9 hours 56 minutes 36 seconds
Extensions:
Mobile Network 20.1.1.0/24
Authentication SPI: 100
# Display the registration information for the MR after it moves to another network.
[MR] display ip mobile router registration
Registration accepted on 12/04/13 at 11:35:45, On Serial2/4/0:0
Care-of addr: 212.48.124.187, HA addr: 1.1.1.2, Home addr: 1.1.1.3
Lifetime requested: 65534, Granted: 36000
Remaining: 9 hours 58 minutes 36 seconds
Flags sbDmG-TIdentification d6499211.bc35e11d
Next registration: 9 hours 56 minutes 36 seconds
10
Extensions:
Mobile Network 20.1.1.0/24
Authentication SPI: 100
The output shows that the MR retains the home address and maintains the application connectivity when
it moves.
11
Support and other resources
Contacting HP
For worldwide technical support information, see the HP support website:
http://www.hp.com/support
Before contacting HP, collect the following information:
•
Product model names and numbers
•
Technical support registration number (if applicable)
•
Product serial numbers
•
Error messages
•
Operating system type and revision level
•
Detailed questions
Subscription service
HP recommends that you register your product at the Subscriber's Choice for Business website:
http://www.hp.com/go/wwalerts
After registering, you will receive email notification of product enhancements, new driver versions,
firmware updates, and other product resources.
Related information
Documents
To find related documents, browse to the Manuals page of the HP Business Support Center website:
http://www.hp.com/support/manuals
•
For related documentation, navigate to the Networking section, and select a networking category.
•
For a complete list of acronyms and their definitions, see HP FlexNetwork Technology Acronyms.
Websites
•
HP.com http://www.hp.com
•
HP Networking http://www.hp.com/go/networking
•
HP manuals http://www.hp.com/support/manuals
•
HP download drivers and software http://www.hp.com/support/downloads
•
HP software depot http://www.software.hp.com
•
HP Education http://www.hp.com/learn
12
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention
Description
Boldface
Bold text represents commands and keywords that you enter literally as shown.
Italic
Italic text represents arguments that you replace with actual values.
[]
Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, from
which you select one or none.
{ x | y | ... } *
Asterisk-marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk-marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n>
The argument or keyword and argument combination before the ampersand (&) sign can
be entered 1 to n times.
#
A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface
Window names, button names, field names, and menu items are in bold text. For
example, the New User window appears; click OK.
>
Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Convention
Description
Symbols
WARNING
An alert that calls attention to important information that if not understood or followed can
result in personal injury.
CAUTION
An alert that calls attention to important information that if not understood or followed can
result in data loss, data corruption, or damage to hardware or software.
IMPORTANT
An alert that calls attention to essential information.
NOTE
TIP
An alert that contains additional or supplementary information.
An alert that provides helpful information.
13
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports
Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the switching engine
on a unified wired-WLAN switch.
Represents an access point.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security gateway, or
load-balancing device.
Represents a security card, such as a firewall, load-balancing, NetStream, SSL VPN, IPS,
or ACG card.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
14
Index
A
mobile router configuration, 7
application
protocols and standards, 6
roaming interface configuration, 8
NEMO, 1
C
configuring
SA configuration, 8
network
mobile IP configuration, 6
mobile IP, 6
mobile router configuration, 7
mobile router feature, 7
NEMO configuration, 6
NEMO, 1, 6, 6, 9
registration message format, 3
roaming interface, 8
roaming interface, 8
SA, 8
SA configuration, 8
network management
D
NEMO basic concepts, 1
displaying
NEMO configuration, 1, 6, 9
NEMO, 8
F
P
format
port
registration message format, 3
forwarding
roaming interface, 8
procedure
configuring mobile IP, 6
NEMO configuration, 6
configuring mobile router feature, 7
I
configuring NEMO, 6, 6, 9
IP addressing
configuring roaming interface, 8
NEMO configuration, 1
configuring SA, 8
displaying NEMO, 8
M
maintaining
NEMO, 8
maintaining NEMO, 8
protocols and standards
NEMO, 6
message
NEMO configuration, 1
R
registration message format, 3
registration
mobile IP
message format, 3
NEMO configuration, 1, 6, 6, 9
mobile router configuration, 7
NEMO configuration, 1, 9
N
NEMO
roaming
roaming interface, 8
application, 1
basic concepts, 1
S
configuration, 1, 6, 6, 9
security
display, 8
maintain, 8
mobile IP configuration, 6
SA configuration, 8
T
15
tunnel
mobile IP configuration, 6
16