HP-UX IPFilter v18.21 Administrator Guide HP-UX 11i v3 (761995-001, March 2014)

2 Installing HP-UX IPFilter
Overview of HP-UX IPFilter installation
The following section summarizes each step in the HP-UX IPFilter installation process.
Installation and configuration checklist
Complete the following steps to install HP-UX IPFilter.
1. Verify that your system meets the prerequisites. For detailed information, see Section (page 13).
2. Install HP-UX IPFilter using swinstall. For detailed information, see Section (page 13).
3. As described in Section (page 14), verify the installation with the ipf -V and kmadmin
commands.
4. Optional: Modify IPFilter kernel tunable parameters.
Step 1: Verifying HP-UX IPFilter installation prerequisites
1. Verify that your system uses one of the following operating systems:
• HP-UX 11i v3
• HP-UX 11i v2
Determine the OS version:
uname -a
2. Install any required patches.
IMPORTANT: Review the latest HP-UX IPFilter Release Notes for all other patch information.
Obtain information about a patch:
swlist -l patch patch_id
3. Verify that you have superuser or appropriate HP-UX capabilities.
Step 2: Installing HP-UX IPFilter
The HP-UX IPFilter installation requirements and procedures differ according to the HP-UX version
as follows:
• HP-UX 11i v3
HP-UX IPFilter is installed and disabled by default. You must manually enable IPFilter the first
time you install it, or enable it by configuring Bastille/ITS with the Sec20MngDMZ or Sec30DMZ
install-time security level.
• HP-UX 11i v2
HP-UX IPFilter is installed by default. When installed, HP-UX IPFilter is always enabled.
Use the following steps to load HP-UX IPFilter software by using the HP-UX swinstall program.
1. Verify that you have superuser or appropriate capabilities.
2. If the system is an HP-UX 11i v3 system and already has HP-UX IPFilter installed, disable the
existing version:
/opt/ipf/bin/ipfilter -d
CAUTION: HP recommends that you enable or disable IPFilter when interrupting network
connectivity is not disruptive. Additionally, HP recommends that you do not enable or disable
HP-UX IPFilter when critical network applications are running.
Overview of HP-UX IPFilter installation 13