HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and MC/ServiceGuard
Chapter 8236
HP-UX IPSec can secure HP-UX MC/ServiceGuard network traffic. This
chapter describes how to configure HP-UX IPSec as an MC/ServiceGuard
package service so a package will fail or fail over if HP-UX IPSec
terminates. This chapter contains the following sections:
• “Introduction” on page 237
• “Configuration Overview” on page 240
• “Step 1: Configuring a Common HP-UX IPSec Password” on
page 243
• “Step 2: Configuring HP-UX Host IPSec Policies for
MC/ServiceGuard” on page 244
• “Step 3: Configuring HP-UX IPSec IKE policies” on page 257
• “Step 4: Configuring Authentication Records for Preshared Keys” on
page 258
• “Step 5: Configuring Authentication Records for Certificates” on
page 261
• “Step 6: Verifying and Testing the HP-UX IPSec Configuration” on
page 265
• “Step 7: Configuring HP-UX IPSec Start-up Options” on page 266
• “Step 8: Distributing HP-UX IPSec Configuration Files” on page 267
• “Step 9: Configuring MC/ServiceGuard” on page 269
• “Step 10: Starting HP-UX IPSec and MC/ServiceGuard” on page 271
NOTE You cannot use HP-UX IPSec as a resource for MC/ServiceGuard system
multi-node packages. HP-UX IPSec can be a package service only.