HP-UX IPSec version A.02.01 Administrator's Guide

HP-UX IPSec and HP-UX Mobile IPv6
Step 3: (Recommended) Securing Prefix Discovery Messages Between the Home Agent and Mobile Node
Appendix F300
-source
home_agent_addr
The
home_agent_addr
is the Home Agent’s IP address. If you are using
manual keys, this cannot be a wildcard or subnet address.
-destination
mn_home_addr
[/
prefix
]
The
mn_home_addr
is the Mobile Node’s home address. If you are using
manual keys, this cannot be a wildcard or subnet address. If you are
using IKE, you can specify a subnet address and prefix.
-protocol ICMPV6
The protocol must be ICMPV6.
-priority
priority_number
The
priority_number
is the priority value HP-UX IPSec uses when
selecting a host IPsec policy (a lower priority value has a higher priority).
The priority must be unique for each host IPsec policy. The range is 1 -
2147483647.
-action
transform_name
The
transform_name
must be an authenticated ESP transform with a
non-null authentication method, according to the Mobile IPv6 protocol
specification. For example, ESP_AES128_HMAC_SHA1. The transform
cannot be a nested transform
-flags MIPV6
The flags must include MIPV6.
-in and -out
manual_key_sa_specification
If you are using manual keys, you must specify the inbound and
outbound manual key information. If you are using IKE, omit these
parameters.
The format for
manual_key_sa_specification
is defined in “Manual
Key SA Format” on page 286.