HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec and Linux
Configuration Example
Chapter 9276
Configuration Example
The following is an example of a Linux FreeSwan configuration in
/etc/ipsec.conf. The file is properly configured to interoperate with
HP-UX IPSec using preshared key authentication:
conn_hp_sample
type=transport
left=192.12.12.23
leftnexthop=192.12.12.1
right=192.12.13.7
rightnexthop=192.12.13.1
auto=add
compress=no
auth=esp
authby=secret
pfs=no
esp=3des-sha1-96
NOTE compress and pfs must both be set to no in the Linux FreeSwan
configuration. HP-UX IPSec does not support IP compression or PFS.