HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and HP-UX Mobile IPv6
Batch File Template
Chapter 7 231
Batch File Template
You can use the following template to create an ipsec_config batch file
for configuring HP-UX IPSec for Mobile IPv6.
######################################################################
# Sample ipsec_config batch file for securing HP-UX Mobile IPv6 with
# HP-UX IPSec.
# Replace the parameters in angle brackets (<>) with the appropriate
# values for your configuration.
# Refer to the ipsec_config manpage and the HP-UX IPSec Administrator’s
# Guide for more information.
#
# Copyright 2004, Hewlett-Packard Development Company L.P.
######################################################################
#
###############################################################################
# Policies for Home Agent - Mobile Node Binding Updates & Acknowledgements
# These packets MUST be secured.
# Configure one host IPSec policy for each Mobile Node.
###############################################################################
#
add host host_policy_name \
-source <home_agent_addr> \
-destination <mn_home_addr> \
-protocol MH -priority <priority_number> \
-action <transform_name> -flags MIPV6 \
-in <manual_key_sa_specification> \
-out <manual_key_sa_specification>
###############################################################################
# Policies for Home Test & Home Test Init Packets Between the Mobile Node
# and Correspondent Node, forwarded through the Home Agent.
# These packets SHOULD be secured.
#
# Configure two gateway IPSec policies for each Mobile Node.
# Configure one tunnel IPSec policy for each Mobile Node.
###############################################################################
#
#####################################################################
# Gateway policy for Home Test/Home Test Init HA <-> CN data path.
# Configure one for each Mobile Node.
#####################################################################
#
add gateway gwy_policy_name \