Troubleshooting HP-UX IPSec

Troubleshooting Scenarios

Autoboot is Not Working Properly

 

 

Problem

 

 

Autoboot fails.

 

 

Symptoms

 

 

HP-UX IPSec does not start automatically at system boot-up time.

 

 

Solution

 

 

Use the following procedure:

Step

1.

Set the HP-UX IPSec password using the ipsec_admin -newpasswd

 

 

command if it is not already set.

Step

2. Use ipsec_config to configure HP-UX to start automatically at system

 

 

boot-up time:

 

 

ipsec_config add startup -autoboot ON

Step

3.

Check that your configuration file is valid.

Step

4.

Reboot the system.

 

 

If you still have problems after following the troubleshooting procedure,

 

 

contact your HP representative.

 

 

If HP-UX IPSec is not using the IPSec policy you expected, check for

 

 

errors in the configuration file, such is incorrect IP addresses. Check the

 

 

order of the IPSec policies—HP-UX IPSec sequentially searches the

 

 

IPSec policies and selects the first policy with filter parameters that

 

 

match the packet.

Administrator Cannot Get a Local VeriSignCertificate

Problem

The administrator cannot get a local VeriSign certificate.

Chapter 5

185