HP-UX IPSec version A.02.00 Administrator's Guide

311
RFC
, 279
installing
loading software, 53
prerequisites, 52
verifying, 105
Internet Control Message Protocol messages.
See ICMP messages
Internet Key Exchange See IKE
Internet Security Association and Key
Management Protocol
See ISAKMP
interoperability
IPFilter
, 191
IP
protocol 50 and 51 for IPSec
, 196
IP address
configuring in host IPSec policies
, 71
configuring in IKE policies, 91
IPFilter
allowing IPSec traffic through the firewall
,
195
bidirectional configuration for IPSec, 194
blocked traffic, 195
configuration for IPSec IKE negotiation,
193
debugging blocked IPSec traffic, 195
IPSec gateway, 198
use with IPSec, 191
IPSec
daemons
, 160
operation, 147
overview, 27
RFCs, 279
SA, 147
Security Association, 150
IPSec Manager
launching
, 121, 129
IPSec password, 55
IPSec policy
configuring
overview
, 66
default, 69
definition, 306, 307
selection process, 69, 89
ipsec_admin, 55, 105, 155, 164
-auditlvl option, 158
-status option, 156
to change audit directory, 158
to change audit level, 158
to get HP-UX IPSec status, 156
ipsec_config add auth
examples, 98, 140
syntax, 96, 136
ipsec_config add bypass
example
, 103
syntax, 102
ipsec_config add gateway
syntax for Mobile IPv6
, 215
ipsec_config add host
examples
, 79
syntax, 70
ipsec_config add ike
examples
, 94
syntax, 90
ipsec_config add startup
syntax, 109
ipsec_config add tunnel
examples
, 87
ipsec_config tunnel
syntax, 81
ipsec_mgr, 118
launching, 121, 129
ipsec_policy, 155, 163
to test which IPSec policy matches packet,
156
ipsec_report, 106, 155, 160, 174
IPv6
certificates, 126
documentation, 276
ICMPv6 messages, 283
overview, 275
ISAKMP, 38
ID payload, 96, 135, 282
limitations, 281
protocol, 307
RFC, 279
SA, 147
establishing, 150
negotiation failure, 174
reporting, 161
ISAKMP SA
definition
, 66
ISAKMP/Main Mode Security Association
(ISAKMP/MM SA)
definition
, 307
K
kernel
policy engine
, 149
SA database, 151