HP-UX IPSec version A.02.01 manpages

i
ipsec_config_batch(1M) ipsec_config_batch(1M)
(HP-UX IPSec Software Required)
NAME
ipsec_config_batch - allow for processing of IPsec config operations in a single batch file
SYNOPSIS
ipsec_config batch
batch_file_name [
-nocommit
|nc
][
-pro
[
file] profile_file]
DESCRIPTION
The
ipsec_config batch
command allows you to specify multiple
ipsec_config add
and
ipsec_config delete
operations in a single batch file for processing. HP-UX IPSec processes the
operations in a batch file as a group. This mode is useful if you are adding or deleting configuration
records that may affect other records.
If one operation is invalid, all operations in the batch file fail. The
ipsec_config
utility first verifies
each operation in the batch file for syntax errors and collisions (object names and priority values) with
existing entries in the configuration database. If all operations in the batch file are valid, the HP-UX
IPSec infrastructure updates the configuration database with all operations at the same time. If HP-UX
IPSec is active and running, the HP-UX IPSec infrastructure also updates the runtime policy database.
Options and Operands
The batch operation recognizes the following options and operands:
batch_file_name
The name of the batch file containing
ipsec_config add and
ipsec_config delete
operations.
A batch file cannot contain operations that operate on the following objects:
cert
csr
crl
For example, the
add cert operation is illegal in a batch file.
In addition, a batch file cannot contain the following commands:
•
ipsec_config batch (
ipsec_config does not allow recursive batch files) or
ipsec_config show commands.
•
ipsec_config export
• ipsec_config show
Lines starting with a pound sign (
#) are interpreted as comments. Comment lines within an
operation are not allowed.
Maximum length: 1023 characters.
Default: None.
-nocommit
|nc
The ipsec_config utility verifies the
ipsec_config add
and ipsec_config
delete
operations, but does not add or delete entries in the configuration database. This
option applies to all operations in the batch file. Individual operations in the batch file cannot
specify the
-nocommit option.
-pro
[file] profile_name
Specifies the name of the profile file containing default argument values for this policy. The
argument values are evaluated once, when the policy is added to the configuration database.
Values used from the profile file become part of the configuration record for the policy.
This argument applies to all operations in the batch file. Individual operations in the batch
file cannot specify the profile argument.
Maximum length: 1023 characters.
Default:
/var/adm/ipsec/.ipsec_profile.
EXAMPLES
ipsec_config -batch /var/adm/ipsec/mybatch
The file /var/adm/ipsec/mybatch contains the following entries:
HP-UX IPSec A.02.01 − 1 − Hewlett-Packard Company 41