HP-UX IPSec version A.02.01 Administrator's Guide

HP-UX IPSec Overview
HP-UX IPSec Topologies
Chapter 154
HP-UX IPSec Topologies
You can use IPsec between hosts (end nodes), between gateways, and
between a host and a gateway in an IP network. You can install HP-UX
IPSec only on end nodes and on HP-UX Mobile IPv6 Home Agents. An
HP-UX IPSec system can have the following roles:
• A host in a host-to-host IPsec topology
• A host in a host-to-gateway IPsec topology
• A host in a host-to-host IPsec tunnel topology, frequently referred to
as an end-to-end tunnel. End-to-end tunnels are commonly used in
an iSCSI topology)
• An HP-UX Mobile IPv6 Home Agent
Uses for HP-UX IPSec include:
• Providing host-to-host security within an intranet. You can use
HP-UX IPSec to secure intranet packets that carry sensitive data,
such as personnel and payroll information.
• Creating VPNs to allow external partners to access selected internal
systems through the public Internet.
• Protecting backend servers in topologies that external clients access
through application gateway servers in an area outside corporate
firewalls (demilitarized zone, or DMZ).