HP-UX IPSec version A.02.01 Administrator's Guide

370
keying, dynamic
, 47
L
lifetime kilobytes
configuring in host IPsec policies
, 110
configuring in tunnel IPsec policies, 121
lifetime seconds
configuring in host IPsec policies
, 110
configuring in IKE policies, 127, 309
configuring in tunnel IPsec policies, 121
lifetimes, 221, 238
link errors, 217
Linux
AES (Advanced Encryption Standard), 237
encryption options, 237
lKE policies
configuring
, 124
loading software, 65
lSAKMP parameters
See IKE policies
M
MAC
, 363
Main Mode (MM), 47
configuring in authentication records, 135
defined, 361, 363
Main Mode SA
See also IKE SA
, 363
manual keys, 52
configuration example, 271
configuring, 286
defined, 37
definition, 363
syntax for Mobile IPv6, 291, 298, 300, 306
troubleshooting, 221
MD5 (Message Digest-5), 43
configuring in host IPsec policies, 109
configuring in IKE policies, 127
configuring in tunnel IPsec policies, 120
key length, 236
RFC, 231
MM processing failed message, 217
MM SA
See also IKE SA, 363
Mobile IPv6
configuring HP-UX IPSec for
, 288
configuring MIPV6 flag in host IPsec
policies
, 112
Mobile Node (Mobile IPv6)
defined
, 279
N
ndd
, 212
nested transform
defined, 46
netstat, 211
O
Oakley
, 47
group
configuring in IKE policies
, 126, 308
modes, 47
protocol, 364
RFC, 231
P
PASS
configuring in host IPsec policies
, 108
password
re-establishing if forgotten
, 67, 186
patch dependencies, 64
Perfect Forward Secrecy (PFS)
configuring in IKE policies
, 128, 309
defined, 51, 364
restrictions, 233
PFS
See Perfect Forward Secrecy
Phase 1 AM processing failed message
, 217
Phase 1 negotiation timed out message, 218
Phase 1 SA
See also IKE SA
, 47
Phase 2 SA
See also IPsec SA, 363
PKI (Public Key Infrastructure)
vendor requirements
, 156
policy
definition, 364
manager daemon, 193
port number
configuring in host IPsec policies
, 104
Prefix Discovery (Mobile IPv6)
defined
, 284
preshared keys, 50
configuring, 130, 133
configuring as an authentication method in
IKE policies
, 126, 308
definition, 364
using with IPsec, 34
primary authentication
configuring in IKE policies, 126, 308