HP-UX IPSec A.03.01.01 Release Notes (HP-UX 11i Version 3)

5 Compatibility and installation requirements
This section describes the compatibility information and installation requirements for this release.
For specific installation instructions, refer to HP-UX IPSec version A.03.00 Administrator's Guide
(J4256–90043).
Operating system and version compatibility
HP-UX IPSec A.03.00 is supported on HP-UX 11i v2 Update 2 (v2UD2) and HP-UX 11i v3.
Software requirements
HP-UX IPSec requires the following software:
• OpenSSL software version A.00.09.08q or later. There are two ways to meet this requirement:
◦ On HP-UX 11i v3 systems, the software bundle SysMgmtMin includes OpenSSL software
that meets this requirement.
◦ OpenSSL software for HP-UX is available at no charge from the HP Software Depot
website, at the following web address:
software.hp.com
Search for the product OpenSSL.
You must also install a patch to use the features for processing ICMPv4 and ICMPv6 messages:
• RFC 4301 ICMP error processing (if a network session is secured by an IPsec security
association, any ICMPv4 or ICMPv6 error messages generated by that session are secured
using the same IPsec security association).
• Packet filters in host rules for specific ICMPv4 or ICMPv6 message types (the
-src_icmp_type, -dst_icmp_type, -src_icmpv6_type, and -dst_icmpv6_type
arguments).
To use these ICMPv4 and ICMPv6 message processing features, you must install one of the following
patches:
• On HP-UX 11i v2 systems, install PHNE_39387
• On HP-UX 11i v3 systems, install PHNE_39709
Disk requirements
The total size of the disk space required for the HP-UX IPSec product is 50 Mbytes. Requirements
for variable-length user files are listed below:
• Configuration database file (/var/adm/ipsec/config.db): minimum of 50 kbytes per
policy file. Most configuration database files will be approximately 1 Mbyte or less. An
extremely large configuration database (thousands of entries) can be as large as 5 Mbytes.
• Audit file: This file can grow very fast if Informative auditing is enabled. HP recommends 1
Mbyte for the Alerts and Errors level of logging, 5 Mbytes for the Warnings level, and 200
or more Mbytes for the Informative message level. Informative auditing could generate 3-5
Mbytes per hour. Audit files should be kept in a separate directory or file system. The default
directory is /var/adm/ipsec.
Hardware requirements
This version of HP-UX IPSec runs on HP 9000 and HP Integrity servers.
Operating system and version compatibility 17