HP-UX IPSec Version A.03.02.02 Administrator's Guide HP-UX 11i version 2 and HP-UX 11i version 3 (762800-001, April 2014)

• auditlvl (audit level)
• auditdir (audit directory)
• maxsize (maximum audit file size)
• spi_min (lower bound for inbound, dynamic Security Parameters Index)
• spi_max (upper bound for inbound, dynamic key Security Parameters Index)
• spd_soft (the “soft” limit for the size of the Security Policy Database)
• spd_hard (the “hard” limit for the size of the Security Policy Database)
• icmp_error_process (enable or disable RFC 4301 secure processing for ICMP and
ICMPv6 error messages)
see the ipsec_config_add(1M) manpage for complete syntax information.
Step 10: Creating Backup Copies of the Configuration Files
Create backup copies of the following files, as applicable:
• The configuration database file, /var/adm/ipsec/config.db
• Your batch file. If you do not have a batch file, use the ipsec_config export command
to create one from the configuration database. See “Exporting the Configuration Database
to a Batch File” (page 117) for more information.
• The configuration profile file. The default profile file is/var/adm/ipsec/.ipsec_profile
Backup the files on removable media and store them in a secure place.
Certificate Storage Directory
Back up the contents of the /var/adm/ipsec/certstore directory if you are using RSA
signatures for IKE authentication.
Step 10: Creating Backup Copies of the Configuration Files 99