HP UX IPSec Software Appendix B, ipsec_config add, Configuration File, ipsec_admin -start, ipsec_config delete, ipsec_config show all, ipsec_config add startup -autobooton

Migrating from Previous Versions of HP-UX IPSec

Post-Installation Migration Instructions

		Post-Installation Migration Instructions
		Configuration File
		HP-UX IPSec version A.02.00 stores configuration data in a configuration database
		instead of a policy file. To migrate a policy configuration file from an earlier version of
		HP-UX IPSec to an A.02.00 configuration database, use the following procedure.
Step	1.	Run the ipsec_migrate utility after you have installed HP-UX IPSec A.02.00. For
		example:
		/usr/sbin/ipsec_migrate -s config_file -d new_config_file
		Where:
		config_file is the name of the input policy file to migrate, such as
		/var/adm/policies.txt.
		new_config_file is the name of the name of the output configuration database file.
		The ipsec_migrate utility converts policy configuration files (such as
		/var/adm/ipsec/policies.txt) created using versions prior to A.02.00 to
		configuration database entries. For more information, refer to the ipsec_migrate (1M)
		man page.
Step	2.	After you have migrated the policy configuration file, copy it to the following location:
		/var/adm/ipsec/config.db
Step	3.	Examine the contents of the configuration database using the following command:
		ipsec_config show all
Step	4.	Modify the configuration database, if necessary, using the ipsec_config delete and
		ipsec_config add commands. Refer to the ipsec_config (1M) man page for more
		information.
Step	5.	The ipsec_migrate utility does not configure the autoboot option. If you want HP-UX
		IPSec to automatically start at system start-up time, use the following command to
		enable the autoboot option:
		ipsec_config add startup -autoboot on
Step	6.	Start HP-UX IPSec:

ipsec_admin -start

Appendix B 291