HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and HP-UX Mobile IPv6
Mobile IPv6 Configuration Example
Chapter 7 227
Mobile IPv6 Configuration Example
This section contains ipsec_config batch file entries for a Mobile IPv6
Home Agent.
• The local system’s (Home Agent) IP address is
3ffe::83ff:fef7:1111.
• The Mobile Node’s IP address is 3ffe::83ff:fef7:2222.
Binding Messages
The following batch file entry configures a host IPSec policy to secure
Binding Update and Binding Acknowledgement messages (protocol MH)
between the local node (Home Agent) and the Mobile Node.
add host mn_2222_binding \
-source 3ffe::83ff:fef7:1111 \(Home Agent)
-destination 3ffe::83ff:fef7:2222 \(Mobile Node’s Home Address)
-proto MH -pri 200 -action ESP_AES128_HMAC_SHA1 \
-flags MIPV6\
-in ESP/2500007/0x1234567890123456789012345678901234567890\
/0x12345678901234567890123456789012/0x1234567890123456 \
-out ESP/2500008/0x0123456789012345678901234567890123456789\
/0x01234567890123456789012345678901/0x0123456789012345
Return Routability Messages
Configure HP-UX IPSec to secure Home Test Init and Home Test Return
Routability Messages routed through the local node (Home Agent).
Return Routability Gateway IPSec Policies
You must configure two gateway IPSec polices on the local node (Home
Agent) for this topology:
• One for the data path segments between the Home Agent and the
Correspondent Node.
• One for the data path segments between the Home Agent and the
Mobile Node.