HP-UX IPSec Version A.03.00 Administrator's Guide

-ltype FQDN -lid mycluster.hp.com \
-rtype IPV4 -rid 15.5.5.5 \
-psk my_client2_key
add auth client1 -remote 15.4.4.4 -ltype IPV4 -lid 15.1.1.1
add auth client2 -remote 15.5.5.5 -ltype IPV4 -lid 15.1.1.1
If the cluster clients were multihomed, you would also add entries for the additional addresses
on the cluster clients, and specify local ID type and local ID value arguments.
Authentication Records on Client1
On client1, the ipsec_config batch file contains the following entries. The authentication
records use the default local ID type (IPV4) and default local ID value (the IP address of the
interface used to communicate with the remote system). If the cluster client was multihomed,
you would add entries for the additional addresses on the cluster client, and specify local ID
type and local ID value arguments.
add auth pkgA -remote 15.98.98.98 -kmp IKEV1 \
-rtype FQDN -rid mycluster.hp.com \
-psk my_client1_key
add auth pkgB -remote 15.99.99.99 -kmp IKEV1 \
-rtype FQDN -rid mycluster.hp.com \
-psk my_client1_key
Authentication Records on Client2
On client2, the ipsec_config batch file contains the following entries:
add auth pkgA -remote 15.98.98.98 -kmp IKEV1 \
-rtype FQDN -rid mycluster.hp.com \
-psk my_client2_key
add auth pkgB -remote 15.99.99.99 -kmp IKEV1 \
-rtype FQDN -rid mycluster.hp.com \
-psk my_client2_key
Preshared Keys Configuration on Cluster Nodes
Each cluster node has the following preshared keys configured:
KeyRemote IP Address
client1_key15.4.4.4 (Client1)
client2_key15.5.5.5 (Client2)
Preshared Keys Configuration on Client1
Client1 has the following preshared keys configured:
KeyRemote IP Address
client1_key16.98.98.98 (pkgA)
client1_key16.99.99.99 (pkgB)
Step 3: Configuring Authentication Records for Preshared Keys 237