HP-UX Mobile IPv4 A.03.01 Administrator's Guide

8GTKH[KPICPF6TQWDNGUJQQVKPI
%QOOQP2TQDNGOU
Chapter 8
100
Mobile Nodes with Incorrect IP Address or SPI (authentication failed due to
unknown MN)
On the Home Agent, syslog entries similar to the one below may indicate that you have
configured an incorrect IP address or SPI for non-AAA Mobile Nodes:
Dec 30 15:12:21 ERROR: HA: authentication failed due to unknown MN
(11.11.11.4)
Solution Compare the configuration for the Mobile Node on the Home Agent with the
configuration on the Mobile Node. Check that the IP address and SPI match.
You may also see the above error for AAA Mobile Node registrations in the following
scenario: The AAA Mobile Node passes the AAAH authentication check, but the Home
Agent does not accept the Registration Request for other reasons. The Home Agent
sends a Diameter AA-Mobile Agent MIP Answer (HAA), with a non-success result code.
The HAA contains Mobile Node - Home Agent security information (SPI, security key),
but the Home Agent discards this information. If the Mobile Node tries to use the SPI to
re-register directly with the Home Agent (bypassing the AAA servers), the Home Agent
will log the above error message.