HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and MC/ServiceGuard
Configuration Overview
Chapter 8242
• “Step 5: Configuring Authentication Records for Certificates” on
page 261
The authentication records contain IKE ID information to verify the
ID information in the security certificates.
• “Step 6: Verifying and Testing the HP-UX IPSec Configuration” on
page 265
Verify and test the HP-UX IPSec configuration on the node on which
you configured IPSec before distributing the IPSec configuration
files.
• “Step 7: Configuring HP-UX IPSec Start-up Options” on page 266
HP-UX IPSec must be running on all cluster nodes before you start
the cluster. You may want to configure startup options so HP-UX
IPSec starts automatically at system boot-up time.
• “Step 8: Distributing HP-UX IPSec Configuration Files” on page 267
After you have tested the HP-UX IPSec configuration, distribute the
IPSec configuration files to the other nodes in the cluster.
NOTE You must maintain the same HP-UX IPSec configuration
information on each cluster node. If you make HP-UX configuration
changes after you have started the cluster, you must make the same
changes on all cluster nodes.
• “Step 9: Configuring MC/ServiceGuard” on page 269
Configure MC/ServiceGuard according to the product
documentation. For each MC/ServiceGuard using HP-UX IPSec,
configure IPSec as a package service so the package will failover if
HP-UX IPSec is unavailable.
• “Step 10: Starting HP-UX IPSec and MC/ServiceGuard” on page 271
HP-UX IPSec must be running on all cluster nodes before you start
MC/ServiceGuard.