HP-UX IPSec Version A.03.00 Administrator's Guide

If you configure an host policy that specifies the protocol value ALL or ICMPV6 and do not specify
an ICMPv6 type (you do not specify -src_icmpv6_type or -dst_icmpv6_type), only the
following ICMPv6 messages affected by the policy:
• Echo Request
• Echo Reply
• Mobile Prefix Advertisement
• Mobile Prefix Solicitation
Syntax
If you specify ICMPV6 for the protocol argument in a host policy, you can specify ICMPv6
message type values for the packet filter using the -dst_icmpv6_type and -src_icmpv6_type
arguments. The syntax for these arguments in an ipsec_config add host command is as
follows:
-dst_icmpv6_type type_number[,type_number]...|ALL
-src_icmpv6_type type_number[,type_number]...|ALL
Where type_number is the integer ICMPv6 message type (0 - 255).
Example
ipsec_config add host no_bogus -protocol ICMPV6 -src_icmp_type 100
-action DISCARD
186 Product Specifications