HP-UX IPSec version A.02.01 Administrator's Guide

367
Numerics
3DES (Triple Data Encryption Standard)
, 43,
361
configuring in host IPsec policies, 109
configuring in IKE policies, 127
configuring in tunnel IPsec policies, 120
key length, 236
A
advanced troubleshooting
, 193
AES (Advanced Encryption Standard), 43,
361
configuring in host IPsec policies, 109
configuring in tunnel IPsec policies, 120
key length, 236
Linux interoperability, 237
recommendation, 43
Aggressive Mode (AM), 47
configuring in authentication records, 135
SA
See also IKE SA
, 363
AH (Authentication Header), 33
algorithms, 44, 236
configuring in host IPsec policies, 108
configuring in tunnel IPsec policies, 120
definition, 361
description, 44
negotiation, 191
processing, 195
RFC, 231
AM processing failed message, 217
asymmetric key, 153
audit file, 221
determining the name of current, 202
audit level
changing, 198
default, 207
auditing, 198, 207
authentication, 361
algorithm
configuring in IKE policies
, 127
algorithms, 43, 44, 236
IKE primary, 50
methods, 50
authentication algorithm
configuring in IKE policies
, 308
Authentication Header
See AH
authentication records
configuring
, 130, 133
AUTOCONF
configuring the AUTOCONF flag in host
IPsec policies
, 111
autoconfiguration clients
configuration example
, 268
configuring in host IPsec policies, 111
B
Basic Operation (Mobile IPv6)
defined
, 280
bootup options
configuring
, 84, 148, 180
bypass interfaces
configuring, 141
C
CA (Certificate Authority)
creating a Certificate Signing Request for
,
158
defined, 361
requirements, 156
Care-of Address (Mobile IPv6)
defined, 279
Certificate Revocation List
See CRL
Certificate Signing Request
See CSR
certificates
, 153
configuring IKE ID information, 163
definition, 153, 361
how they work, 153
ID types accepted, 233
IPv6 with, 233
requirements for, 156
troubleshooting, 219
clear text
configuring in host IPsec policies, 108
processing, 195
configuration
examples
autoconfiguration clients
, 268
host IPsec policy order, 263
host-to-gateway, 266
manual keys, 271
Mobile IPv6, 315, 319
preshared keys, 259
telnet, 259
configuring
auditing
, 207