Acquiring ArcGIS tokens

[JuneAcosta]

I have been spending too much time trying to create a token for my services with no success. Im hoping I can get the help I need from this forum since the ESRI Analyst that has helped me seemed just as confused.

Here's my scenario:

I have ArcGIS server 10.1 SP 1 running on Amazon EC2 within a VPC(virtual private cloud).

I have a customized version of the arcgis online simple map viewer (JSAPI)

The IP address is 10.0.244.20- this is what I use to RDP to the instance (JSAPI)

Staff accesses the map using http://gismaps/roadmap/index.html

Public accesses the map using http://gismaps.carlsbadca.gov/roadmap/index.html

Both gismaps and gismaps.carlsbadca.gov are pointers to 10.0.244.20

I tried using both the arcgis account and the AGS admin account for the token and had no luck

     webmap.itemData = {
          "operationalLayers": [
    {
      "url": "http://10.0.244.20/arcgis/rest/services/publicAGS/trafficStatus/MapServer/1",
      "id": "trafficStatusMobile_5116",
      "visibility": true,
      "opacity": 1,
      "title": "Carlsbad Boundary"
    },
 {
    "url": "http://10.0.244.20/arcgis/rest/services/publicAGS/trafficStatus/MapServer/0",
    //"id": "trafficStatusMobile_6847",
    "visibility": true,
    "opacity": 1,
    "mode": 1,
    "title": "Road Maintenance",

I need a 1 year token

How far into the rest services URL do I go to create the token? Do I create the token at the full path of http://10.0.244.20/arcgis/rest/services/publicAGS/trafficStatus/ or all the way down to the layer index?

Do I create the token from my desktop or from the Amazon instance?

Do I use HTTP Referer? IP Address? or IP address of this request's origin? If I use http Referer, what's the syntax for http referer:?