HP-UX IPSec version A.02.01 Administrator's Guide

HP-UX IPSec and Serviceguard
Step 2: Configuring HP-UX Host IPsec Policies for Serviceguard
Appendix G 337
subnet. For example, you could replace the policies for the first three
address pairs in the above table with one host IPsec policy that has the
following filter:
Configuring Host IPsec Policies for Serviceguard
Quorum Server
If you are using a Quorum Server for the Serviceguard cluster, configure
HP-UX IPSec so it does not discard packets listed in the sections below.
Cluster Node IPsec Policies for Quorum Server
For each cluster node, configure host IPsec policies so HP-UX IPSec does
not discard (the transform list contains any transform except DISCARD)
the packets listed below. If HP-UX IPSec is not installed on the Quorum
Server, configure PASS host IPsec policies for these packets.
Source IP
Address/
Prefix
Destination
IP Address/
Prefix
Protocol
Source
Port
Destination
Port
10.0.0.0/8 10.0.0.0/8 ALL 0 0
Source IP
Address
Destination
IP Address
Protocol
Source
Port
Destination
Port
cluster node
address (or
wildcard)
Quorum
Server
address
TCP 0 1238