HP-UX IPSec version A.02.00 Administrator's Guide

Product Specifications
Product Restrictions
Appendix A
283
The transmission of ICMP Source Quench messages is controlled by the IP kernel
parameter ip_send_source_quench. By default, this feature is enabled on all
HP-UX systems. Refer to the ndd (1M) manpage for information on checking or
changing this parameter value.
IPv6 ICMP Messages
To ensure proper operation of IPv6 networks, HP-UX IPSec always allows the following
ICMPv6 messages to pass in clear text:
• Router Solicitation
• Router Advertisement
• Neighbor Solicitation
• Neighbor Advertisement
• Redirect
• Destination Unreachable
• Packet Too Big
• Time Exceeded
• Parameter Problem
• Router Renumbering
You can configure HP-UX IPSec policies to authenticate, encrypt, pass, or discard the
following ICMPv6 messages:
• Echo Request
•Echo Reply
• Mobile Prefix Advertisement
• Mobile Prefix Solicitation