HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec Configuration Examples
Example 3: Host to Gateway
Appendix C302
Example 3: Host to Gateway
On system Blue (15.5.5.5), you configure HP-UX IPSec to communicate
back to Home1 (17.7.7.7) using a secure IPSec tunnel to a gateway (a
router), accessed using its 16.6.6.6 address. The end-to-end packets pass
in clear text.
Blue must use the router as the gateway to Home1. You may need to
configure an explicit IP route to Home1 that specifies 16.6.6.6 as the
gateway address.
The gateway (router) cannot be an HP-UX system. (HP-UX IPSec does
not support gateway functionality unless it is used for Mobile IPv6.)
Configure the gateway according to the manufacturer’s specifications.
There is no HP-UX IPSec configuration information on Home1. However,
Home1 must use the router as the gateway to Blue. You may need to
configure an explicit IP route to Blue that specifies one of the router’s
addresses as the gateway address
Figure C-4 Host to Gateway Configuration Example
Blue Configuration
Host IPSec Policy
The ipsec_config batch file on Blue contains the following entry:
add host toHome1 \
-src 15.5.5.5 \
-dst 17.7.7.7/32 \
-priority 100 -action PASS -tunnel torouter