HP-UX IPSec version A.02.00 manpages

ipsec_config(1M) ipsec_config(1M)
ipsec_config add tunnel my_mipv6_tunnel \
-tsource 3ffe::83ff:fef7:1111 -tdestination 3ffe::83ff:fef7:2222 \
-source 0::0 -destination 3ffe::83ff:fef7:2222 \
-protocol MH \
-action ESP_AES128_HMAC_SHA1 \
-in ESP/2500010/0x1234567890123456789012345678901234567890\
/0x12345678901234567890123456789012/0x1234567890123456 \
-out ESP/2500011/0x0123456789012345678901234567890123456789\
/0x01234567890123456789012345678901/0x0123456789012345
IPSEC_CONFIG COMMAND
Name
batch - allows for processing of IPSec config operations in a single batch file
Synopsis
ipsec_config batch
batch_file_name [
-nocommit
|
nc
][
-pro
[
file] profile_file]
Description
The
ipsec_config batch
command allows you to specify multiple
ipsec_config add
and
ipsec_config delete
operations in a single batch file for processing. HP-UX IPSec processes the
operations in a batch file as a group. This mode is useful if you are adding or deleting configuration
records that may affect other records.
If one operation is invalid, all operations in the batch file fail. The
ipsec_config
utility first verifies
each operation in the batch file for syntax errors and collisions (object names and priority values) with
existing entries in the configuration database. If all operations in the batch file are valid, the HP-UX
IPSec infrastructure updates the configuration database with all operations at the same time. If HP-UX
IPSec is active and running, the HP-UX IPSec infrastructure also updates the runtime policy database.
Options and Operands
The batch operation recognizes the following options and operands:
batch_file_name
The name of the batch file containing
ipsec_config add and
ipsec_config delete
operations.
Lines starting with a pound sign (
#
) are interpreted as comments. Comment lines within an
operation are not allowed.
A batch file cannot contain
ipsec_config batch
commands (ipsec_config
does not
allow recursive batch files) or
ipsec_config show
commands.
Maximum length: 1023 characters.
Default: None.
-nocommit|nc
The ipsec_config utility verifies the
ipsec_config add and ipsec_config
delete
operations, but does not add or delete entries in the configuration database. This
option applies to all operations in the batch file. Individual operations in the batch file cannot
specify the -nocommit
option.
-pro[
file] profile_name
Specifies the name of the profile file containing default argument values for this policy. The
argument values are evaluated once, when the policy is added to the configuration database.
Values used from the profile file become part of the configuration record for the policy.
This argument applies to all operations in the batch file. Individual operations in the batch
file cannot specify the profile argument.
Maximum length: 1023 characters.
Default:
/var/adm/ipsec/.ipsec_profile.
Examples
ipsec_config -batch /var/adm/ipsec/mybatch
The file /var/adm/ipsec/mybatch contains the following entries:
HP-UX IPSec A.02.00 − 27 − Hewlett-Packard Company 31