HP-UX IPSec version A.02.00 Administrator's Guide

HP-UX IPSec Overview
Authentication Header (AH)
Chapter 1 31
IPv6 In IPv6 AH transport mode, IPSec inserts the AH after the
following headers and extensions:
• the basic IPv6 header
• hop-by-hop options
• any destination options needed to interpret the AH header
• routing extensions
• fragment extensions
The items listed below follow the AH:
• any destination options needed only for the “final” destination and
not needed to interpret the AH header
• the IP data or payload (e.g., TCP or UDP packet)
The entire packet is used to calculate the authentication value. Mutable
and unpredictable fields and options, such as timestamp and traceroute
options, are assigned a zero value before calculating the authentication
value.
Figure 1-2 AH in Transport Mode