HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and HP-UX Mobile IPv6
Batch File Template
Chapter 7232
-source <mn_home_addr> \
-destination <cn_addr> \
-protocol MH -priority <priority_number> \
-action FORWARD -flags MIPV6
#####################################################################
# Gateway policy for Home Test/Home Test Init HA <-> MN data path.
# Configure one for each Mobile Node.
#####################################################################
#
add gateway gwy_policy_name \
-source <cn_addr> \
-destination <mn_home_addr> \
-protocol MH -priority <priority_number> -tunnel mipv6_tunnel_name \
-flags MIPV6
#####################################################################
# Tunnel policy for Home Test/Home Test Init HA <-> MN tunnel.
# Configure one for each Mobile Node.
#####################################################################
#
add tunnel tunnel_policy_name \
-tsource <home_agent_addr> \
-tdestination <mn_home_addr> \
-source <cn_addr> \
-destination <mn_home_addr> \
-protocol MH \
-action <transform_name> \
-in <manual_key_sa_specification> \
-out <manual_key_sa_specification>
###############################################################################
# Policies for Prefix Discovery Packets between the Home Agent and Mobile Node.
# These packets SHOULD be protected.
# You can skip these if the Mobile Node does not support prefix discovery.
# Configure one for each Mobile Node.
###############################################################################
add host host_policy_name \
-source <home_agent_addr> \
-destination <mn_home_addr> \
-protocol ICMPV6 \
[-priority <priority_number>] -action <transform_name> -flags MIPV6 \
-in <manual_key_sa_specification> \
-out <manual_key_sa_specification>
###############################################################################
# Policies for payload packets between the Correspondent Node and Mobile Node
# forwarded through the Home Agent.
# These packets MAY be secured. If the Home Agent supports stateful address
# autoconfiguration (such as DHCPv6) for the Mobile Nodes, or supports