HP-UX IPSec version A.02.01 Administrator's Guide

HP-UX IPSec and Serviceguard
Configuration Overview
Appendix G332
The authentication records contain IKE ID information to verify the
ID information in the security certificates.
• “Step 6: Verifying and Testing the HP-UX IPSec Configuration” on
page 354
Verify and test the HP-UX IPSec configuration on the node on which
you configured IPsec before distributing the IPsec configuration files.
• “Step 7: Configuring HP-UX IPSec Start-up Options” on page 355
HP-UX IPSec must be running on all cluster nodes before you start
the cluster. You may want to configure startup options so HP-UX
IPSec starts automatically at system boot-up time.
• “Step 8: Distributing HP-UX IPSec Configuration Files” on page 356
After you have tested the HP-UX IPSec configuration, distribute the
IPsec configuration files to the other nodes in the cluster.
NOTE You must maintain the same HP-UX IPSec configuration
information on each cluster node. If you make HP-UX configuration
changes after you have started the cluster, you must make the same
changes on all cluster nodes.
• “Step 9: Configuring Serviceguard” on page 357
Configure Serviceguard according to the product documentation. For
each Serviceguard using HP-UX IPSec, configure IPsec as a package
service so the package will failover if HP-UX IPSec is unavailable.
• “Step 10: Starting HP-UX IPSec and Serviceguard” on page 359
HP-UX IPSec must be running on all cluster nodes before you start
Serviceguard.