HP-UX Containers (SRP) A.03.01 Administrator's Guide

116
18.4.2 Removing or disabling IPFilter
If you are using IPFilter with HP-UX Containers, you can see if IPFilter rules are blocking access to the
container applications. You can do this by removing the ipfilter service from the container, as
follows:
srp -d container_name [-t template] -s ipfilter
If you do not specify the -t argument, the srp command removes the IPFilter configuration for the
template ( base
for the workload container and system for the system container).
To add the ipfilter service back to the container after you have completed your testing, enter:
srp -d container_name [-t template] -s ipfilter
Another method to test if IPFilter rules are blocking access to the container applications is by disabling
the IPFilter module,as follows:
/opt/ipf/bin/ipfilter -d
To enable IPFilter after you have completed testing, enter:
/opt/ipf/bin/ipfilter -e
18.4.3 Removing or disabling IPSec
If you are using IPSec with HP-UX Containers, you can see if IPSec policies are blocking access to the
container applications. One method to determine if IPSec policies are blocking packets is by
removing the ipsec service from the container, as follows:
srp -d container_name -s ipsec
To add the ipsec service back to the container after you have completed testing, enter:
srp -d container_name -s ipsec
Another method to test if IPSec policies are blocking access to the container applications is by
stopping the IPSec product, as follows:
/usr/sbin/ipsec_admin -stop
To restart IPSec after you have completed testing, enter:
/usr/sbin/ipsec_admin -start
18.5 Reporting Problems
If you are unable to solve a problem with HP-UX Containers, complete the following steps:
1. Read the published release notes for HP-UX Containers to see if the problem is known. If it is
a known issue, use the prescribed solution.
2. Determine whether the product is still under warranty or whether your company purchased
support services for the product. Your operations manager can supply you with the necessary
information.
3. Access
http://www.itrc.hp.com/ and search the technical knowledge databases to determine if
the problem you are experiencing has already been reported. The type of documentation and
resources you have access to depend on your level of entitlement.
NOTE: The ITRC resource forums at
http://www.itrc.hp.com/ offer peer-to-peer support to
solve problems and are free to users after registration.
If this is a new problem or if you need additional help, log your problem with the HP
Response Center, either on line through the support case manager at
http://www.itrc.hp.com/,
or by calling HP Support. If your warranty has expired or if you do not have a valid support