Product Specifications

IPSec RFCsIPSec RFCs

The HP-UX IPSec product conforms to the Internet Engineering Task Force (IETF) RFCs listed below:

Table A-1Supported IPSec RFCs

 

 

 

 

RFC NumberRFC Title

 

 

 

 

RFC 2401

Security Architecture for the Internet Protocol

 

 

 

 

RFC 2402

IP Authentication Header

 

 

 

 

RFC 2403

The Use of HMAC-MD5-96 within ESP and AH

 

 

 

 

RFC 2404

The Use of HMAC-SHA-1-96 within ESP and AH

 

 

 

 

RFC 2405

The ESP DES-CBC Cipher Algorithm with Explicit

 

 

IV

 

 

 

 

RFC 2406

IP Encapsulating Security Payload (ESP)

 

 

 

 

RFC 2407

The Internet IP Security Domain of Interpretation

 

 

for ISAKMP

 

 

 

 

RFC 2408

Internet Security Association and Key Management

 

 

Protocol (ISAKMP)

 

 

 

 

RFC 2409

The Internet Key Exchange (IKE)

 

 

 

 

RFC 2410

The NULL Encryption Algorithm and Its Use with

 

 

IPsec

 

 

 

 

RFC 2411

IP Security Document Roadmap

 

 

 

 

RFC 2412

The OAKLEY Key Determination Protocol

 

 

 

 

RFC 3602

The AES-CBC Cipher Algorithm and Its Use with

 

 

IPsec

 

 

 

 

RFC 3775

Mobility Support in IPv6

 

 

 

 

RFC 3776

Using IPsec to Protect Mobile IPv6 Signaling

 

 

Between Mobile Nodes and Home Agents

 

 

 

RFC 3776 Mandatory Support

RFC 3776, Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents, section 4.1, Mandatory Support contains the following mandatory support specifications for securing Mobile IPv6 packets.

The following requirements apply to both home agents and mobile nodes:

Manual configuration of IPsec security associations MUST be supported. The configuration of the keys is expected to take place out-of-band, for instance at the time the mobile node is configured to use its home agent.

Appendix A

279