Mobile IP, Mobile Router with multiple roaming interfaces

[ngtransge]

Hello,

I have question regarding Mobile IP technology.

I working on implementing Mobile IP technology in specific environment.

In my deployment I have collocated Mobile Router and Foreign Agent, that have 4 different  roaming interfaces, all providing WAN access by different ISPs to Home Agent.

In my deployment I try to achieve following:

 1. IP SLA monitors 4 different WAN links

 2. Based on IP SLA reports, router establish Mobile IP tunnel over perspective roaming interface (ISP)

I achieved following by EEM scripts, but in my design, routers enters roaming interface configuration under interface if IP SLA results are sufficient.

Routers deletes and enters Mobile IP configuration under interface every time, there is link quality change, and Mobile Router registers from scratch.

I am interesting if there is any way, to register with all 4 roaming interfaces, but activate data path only on proffered roaming interface ?

Thanks in advance,

[luzunigam · Accepted solution]

Hi,

I've configured MN+FA functionality in ISR routers so I'm not sure it applies to your case.

By configuring the roaming interfaces, and the HA with:

ip mobile router
address 1.1.1.
collocated single-tunnel
home-agent 12.2.2.2
reverse-tunnel

1 tunnel is created in each roaming interface, but to actually choose the preferred interface, you can vary the interface bandwidth, the highest bandwidth interface will be the preferred one.

This is quite basic but I hope it helps.

LZ

[ngtransge]

Hello luzunigam,

I have following configuration, but still only one registration is happening and only one tunnel is up.

Can you plea show, what configuration you have implemented under roaming interface ?

!
!
interface GigabitEthernet0
description WAN
ip address dhcp
ip mobile router-service roam
ip mobile router-service collocated registration nat traversal
ip mobile router-service collocated ccoa-only
ip virtual-reassembly in
duplex auto
speed auto
no routing dynamic
!
!
interface GigabitEthernet1
description WAN
ip address dhcp
ip mobile router-service roam
ip mobile router-service collocated registration nat traversal
ip mobile router-service collocated ccoa-only
ip virtual-reassembly in
duplex auto
speed auto
no routing dynamic
!
!
interface Tunnel121
no ip address
keepalive 5 5
!
!
interface Loopback1
description Mobile Router
ip address 192.0.0.10 255.255.255.0
!
!
ip mobile secure home-agent 3.3.3.3 spi decimal 123 key ascii 1111111111 algorithm md5 mode prefix-suffix
ip mobile registration-lifetime 1800
ip mobile router
address 192.0.0.10 255.255.255.0
collocated single-tunnel
home-agent 3.3.3.3
mobile-network l10
template Tunnel121
register retransmit initial 5000 maximum 10000 retry 5
reverse-tunnel
tunnel mode gre
!

Thank you,

[ngtransge]

I am reeving lots of time synchronization errors:

%IPMOBILE-6-SECURE: Security violation on HA from MN 2.2.2.2 - errcode registration id mismatch (133), reason Bad identifier (3)

is there any way to disable Time Synchronization ?

Thanks in advance,

Giorgi