HP UX IPSec Software -in, -out, -source, -action, -tsource, -destination, -tdestination, ipsec_config add tunnel payload_tunnel_name

HP-UX IPSec and HP-UX Mobile IPv6

Step 4: (Optional) Securing Payload Packets Routed Through the Home Agent

Syntax

ipsec_config add tunnel payload_tunnel_name

-tsourcehome_agent_addr -tdestinationmn_home_addr -sourcecn_addr -destinationmn_home_addr -protocol ALL -actiontransform_name

-inmanual_key_sa_specification -outmanual_key_sa_specification

payload_tunnel_name The payload_tunnel_name is the user-defined name for the payload tunnel IPSec policy. This name must be unique for each tunnel IPSec policy and is case-sensitive. The name must be 1 - 63 characters. Each character must be an ASCII alphanumeric character, hyphen (-), or underscore (_).

-tsourcehome_agent_addr The home_agent_addr is the Home Agent’s IP address. This cannot be a wildcard or subnet address.

-tdestinationmn_home_addr The mn_home_addr is the Mobile Node’s home address. This cannot be a wildcard or subnet address.

-sourcecn_addr The cn_addr is the Correspondent Node’s address. In many cases, there will be a large number of possible Correspondent Nodes and you may want to use the IPv6 wildcard address instead (0::0).

-destinationmn_home_addr The mn_home_addr is the Mobile Node’s home address.

-actiontransform_name The transform_name must be an authenticated ESP transform with a non-null authentication method, according to the Mobile IPv6 protocol specification. For example, ESP_AES128_HMAC_SHA1.

-inand -outmanual_key_sa_specification For Mobile IPv6, the format for manual_key_sa_specification is defined in “-in and -out manual_key_sa_specification” on page 212.

226 Chapter 7