HP-UX IPSec and HP-UX Mobile IPv6

Batch File Template

-source

<mn_home_addr>

\

-destination

<cn_addr>

\

-protocol MH

-priority

<priority_number> \

-action

FORWARD -flags

MIPV6

#####################################################################

#Gateway policy for Home Test/Home Test Init HA <-> MN data path.

#Configure one for each Mobile Node.

#####################################################################

add gateway gwy_policy_name \ -source <cn_addr> \ -destination <mn_home_addr> \

-protocol MH -priority <priority_number> -tunnel mipv6_tunnel_name \ -flags MIPV6

#####################################################################

#Tunnel policy for Home Test/Home Test Init HA <-> MN tunnel.

#Configure one for each Mobile Node.

#####################################################################

add tunnel tunnel_policy_name \ -tsource <home_agent_addr> \ -tdestination <mn_home_addr> \ -source <cn_addr> \ -destination <mn_home_addr> \ -protocol MH \

-action <transform_name> \

-in <manual_key_sa_specification> \ -out <manual_key_sa_specification>

###############################################################################

#Policies for Prefix Discovery Packets between the Home Agent and Mobile Node.

#These packets SHOULD be protected.

#You can skip these if the Mobile Node does not support prefix discovery.

#Configure one for each Mobile Node.

###############################################################################

add host host_policy_name \ -source <home_agent_addr> \ -destination <mn_home_addr> \ -protocol ICMPV6 \

[-priority <priority_number>] -action <transform_name> -flags MIPV6 \ -in <manual_key_sa_specification> \

-out <manual_key_sa_specification>

###############################################################################

#Policies for payload packets between the Correspondent Node and Mobile Node

#forwarded through the Home Agent.

#These packets MAY be secured. If the Home Agent supports stateful address

#autoconfiguration (such as DHCPv6) for the Mobile Nodes, or supports

232

Chapter 7