HP-UX IPSec version A.02.01 Administrator's Guide

HP-UX IPSec and HP-UX Mobile IPv6
Mobile IPv6 Dynamic Key Configuration Example
Appendix F 319
Mobile IPv6 Dynamic Key Configuration
Example
This section contains ipsec_config batch file entries for a Mobile IPv6
Home Agent using dynamic keys. The topology is similar to the manual
key configuration example, except that there are two Mobile Nodes, and
the configuration uses subnet addresses. This enables the local system
(the Mobile IPv6 Home Agent) to use the same host, gateway, tunnel and
IKE policies for both Mobile Nodes.
• The local system’s (Home Agent) IP address is
2001:db8:11:11::fefe:1111.
• The Mobile Nodes’ IP addresses are
2001:db8:11:11::fefe:2222 and
2001:db8:11:11::fefe:3333
Figure F-7 Mobile IPv6 Dynamic Key Topology
The significant differences between the dynamic key configuration and
the manual key configuration are as follows:
• Instead of specifying individual Mobile Node home addresses in the
host, tunnel, gateway, and IKE policies, this example uses the
following subnet address and prefix to include the home addresses
for both Mobile Nodes: