Configuring Microsoft Windows Vista and Windows Server 2008 to Operate with HP-UX IPSec

ManualsBrandsHP ManualsSoftwareHP-UX IPSec Software

Configuring Microsoft Windows

Vista and Windows Server

2008 to Operate with HP-UX IPSec

Introduction......................................................................................................................................... 2

Related Documentation ..................................................................................................................... 2

Protocol implementation differences.................................................................................................... 2

IKE version .................................................................................................................................. 2

IKE authentication method ............................................................................................................. 2

IKE default algorithms ................................................................................................................... 2

IKE aggressive mode .................................................................................................................... 3

IPsec default transform .................................................................................................................. 3

Configuration overview ........................................................................................................................ 3

Configuring Windows IKE algorithms..................................................................................................... 3

Configuring connection security rules ..................................................................................................... 4

Using the Windows Firewall MMC to configure connection security rules ............................................... 4

Using the netsh advfirewall consec command to configure connection security rules................................. 5

Configuring inbound and outbound firewall rules .................................................................................... 6

(Optional) Configuring IPsec transforms.................................................................................................. 6

Summary of content (8 pages)

PAGE 1
Configuring Microsoft Windows Vista and Windows Server 2008 to Operate with HP-UX IPSec Introduction......................................................................................................................................... 2 Related Documentation ..................................................................................................................... 2 Protocol implementation differences..............................................................................................
PAGE 2
Introduction This document contains tips for configuring IPsec on Microsoft Windows Vista and Windows Server 2008 systems to operate with HP-UX IPSec versions A.02.01 and later. For information on configuring IPsec on Microsoft Windows XP and Windows 2003 systems to operate with HP-UX IPSec, see in Configuring Microsoft Windows IP Security to Operate with HP-UX IPSec.
PAGE 3
The HP-UX IPSec default IKE algorithms are 3DES encryption and MD5 integrity. At least one Windows security method must match the HP-UX IKE parameters. To change or add IKE algorithms for Microsoft Windows, use the procedure described in “Configuring Windows IKE algorithms.” To change specify IKE algorithms for HP-UX IPSec, use the –encryption and –hash options in the ipsec_config add ike or ipsec_config add ikev1 command.
PAGE 4
This section describes how to configure Windows IKE algorithms using the Windows Firewall with Advanced Security MMC. You can also use the Windows netsh advfirewall set global mainmode command to configure IKE algorithms. For information on how to configure IKE algorithms on HP-UX systems, see “IKE default algorithms.” Use the following procedure to configure Windows IKE algorithms using the Windows Firewall with Advanced Security MMC: 1.
PAGE 5
3. Select New Rule in the right menu. 4. In the wizard Rule Type dialog box, select Custom. Click Next. 5. In the Endpoints dialog box, enter the IP addresses. Click Next. 6. In the Requirements dialog box, select Require inbound and outbound. Click Next. 7. In the Authentication Method dialog box, configure the IKE authentication method. To use certificates for IKE authentication, select Computer Certificate and enter the distinguished name for the CA in the CA Name field.
PAGE 6
Configuring inbound and outbound firewall rules In addition to the connection security rule, you must configure inbound and outbound firewall rules to allow packets to pass through the firewall and to specify that the packets will be secured using IPsec. Use the following procedure to add an inbound or outbound firewall rule with the Windows Firewall with Advanced Security MMC: 1.
PAGE 7
The MMC opens the Customize IPsec Setting dialog box. 4. In the Data Protection (Quick Mode) section, select Advanced and click the Customize button. The MMC opens a Customize Data Protection Settings dialog box. 5. In the Data integrity and encryption section and click Add to add additional transforms and algorithms. Specify the new transform. Click OK.
PAGE 8
© 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.