HP-UX IPSec version A.02.01 Administrator's Guide

HP-UX IPSec and Serviceguard
Appendix G326
HP-UX IPSec can secure HP-UX Serviceguard network traffic. This
appendix describes how to configure HP-UX IPSec as an Serviceguard
package service so a package will fail or fail over if HP-UX IPSec
terminates. This appendix contains the following sections:
• “Introduction” on page 327
• “Configuration Overview” on page 330
• “Step 1: Configuring a Common HP-UX IPSec Password” on
page 333
• “Step 2: Configuring HP-UX Host IPsec Policies for Serviceguard” on
page 334
• “Step 3: Configuring HP-UX IPSec IKE policies” on page 346
• “Step 4: Configuring Authentication Records for Preshared Keys” on
page 347
• “Step 5: Configuring Authentication Records for Certificates” on
page 350
• “Step 6: Verifying and Testing the HP-UX IPSec Configuration” on
page 354
• “Step 7: Configuring HP-UX IPSec Start-up Options” on page 355
• “Step 8: Distributing HP-UX IPSec Configuration Files” on page 356
• “Step 9: Configuring Serviceguard” on page 357
• “Step 10: Starting HP-UX IPSec and Serviceguard” on page 359
NOTE You cannot use HP-UX IPSec as a resource for Serviceguard system
multi-node packages. HP-UX IPSec can be a package service only.