HP-UX IPSec version A.02.00 Administrator's Guide

Configuring HP-UX IPSec
Step 9: Configuring HP-UX IPSec to Start Automatically
Chapter 3 109
Step 9: Configuring HP-UX IPSec to Start
Automatically
After you have verified your HP-UX IPSec configuration is properly
operating, you can configure HP-UX IPSec so that it starts automatically
at system startup time.
TIP HP recommends that you configure HP-UX IPSec to start automatically
at system startup time once you have a known, good HP-UX IPSec
configuration. This allows HP-UX IPSec to secure your system at all
times.
ipsec_config add startup Syntax
Use the following ipsec_config add startup syntax to configure
HP-UX IPSec to start automatically at system startup time:
ipsec_config add startup -autoboot ON
To specify an add startup operation for an ipsec_config batch file, use
the above syntax without the ipsec_config command name:
add startup -autoboot ON
The full ipsec_config add startup syntax specification also allows
you to specify the following arguments:
• nocommit (verify the syntax but do not commit the information to the
database)
• profile (alternate profile file)
• auditlvl (audit level)
• auditdir (audit directory)
• maxsize (maximum audit file size)
• spi_min (lower bound for inbound, dynamic Security Parameters
Index)