HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and MC/ServiceGuard
Step 2: Configuring HP-UX Host IPSec Policies for MC/ServiceGuard
Chapter 8248
Quorum Server IPSec Policies
If HP-UX IPSec is installed on the Quorum Server, configure host IPSec
policies for the packets listed below with actions (PASS or transform lists)
that match the policies on the cluster nodes.
Configuring Host IPSec Policies for Remote
Command Execution
If you want systems outside the cluster to be able to execute
MC/ServiceGuard commands (remote command clients, such as the
systems in the /etc/cmcluster/cmclnodelist file), configure HP-UX
IPSec so it does not discard the packets listed in the sections below.
Cluster Node IPSec Policies for Remote Command Execution
For each cluster node, configure host IPSec policies so HP-UX IPSec does
not discard (the transform list contains any transform except DISCARD)
the packets listed below. If HP-UX IPSec is not installed on the remote
command clients, configure PASS host IPSec policies for these packets.
Source IP
Address
Destination
IP Address
Protocol
Source
Port
Destination
Port
Quorum
Server
address (or
wildcard)
cluster node
address
TCP 1238 0
Source IP
Address
Destination
IP Address
Protocol
Source
Port
Destination
Port
cluster node
address (or
wildcard)
remote
command
client address
TCP 5302 0
cluster node
address (or
wildcard)
remote
command
client address
UDP 5302 0