HP-UX IPSec and HP-UX Mobile IPv6

Step 4: (Optional) Securing Payload Packets Routed Through the Home Agent

 

• The protocol argument value is ALL.

 

• The priority_number must be greater (lower priority) than the

 

policy configured in “Step 2A: Return Routability Messages:

 

Configuring the Gateway IPSec Policy for Home Agent -

 

Correspondent Node Segments” on page 215.

 

 

NOTE

You can omit this policy if you are using the default gateway IPSec

 

policy shipped with HP-UX IPSec, which forwards all gateway packets in

 

clear text.

 

Syntax

 

 

ipsec_config add gateway gwy_policy_name

 

-source mn_home_addr -destination cn_addr

 

-protocol ALL [-priority priority_number]

 

-action FORWARD -flags MIPV6

 

gwy_policy_name The gwy_policy_name is the user-defined name for

 

the gateway IPSec policy. This name must be unique for each gateway

 

IPSec policy and is case-sensitive. The name must be 1 - 63 characters.

 

Each character must be an ASCII alphanumeric character, hyphen (-), or

 

underscore (_).

 

-sourcemn_home_addr The mn_home_addr is the Mobile Node’s home

 

address.

 

-destinationcn_addr The cn_addr is the Correspondent Node’s

 

address. In many cases, there will be a large number of possible

 

Correspondent Nodes and you may want to use the IPv6 wildcard

 

address instead (0::0).

 

-prioritypriority_number The priority_number is the priority

 

value HP-UX IPSec uses when selecting a gateway IPSec policy (a lower

 

priority value has a higher priority). The priority must be unique for

 

each gateway IPSec policy. The range is 1 - 2147483647.

 

The priority must be lower than the priority for the policy configured for

 

the Mobile Node in “Step 2A: Return Routability Messages: Configuring

 

the Gateway IPSec Policy for Home Agent - Correspondent Node

 

Segments” on page 215.

Chapter 7

223