Configuring HP-UX IPSec

Using ipsec_config

Using ipsec_config

The ipsec_config utility adds, deletes and displays HP-UX IPSec configuration objects stored in the configuration database, /var/adm/ipsec/config.db. If HP-UX IPSec is active and running, ipsec_config also adds and deletes configuration information in the runtime policy database. The ipsec_config utility supports the following commands:

ipsec_config add

ipsec_config batch

ipsec_config delete

ipsec_config show

General Syntax Information

Argument Delimiters

Separate arguments using white spaces (blanks, tabs or new lines).

Line Continuation Character (\)

Use a backslash (\) line continuation character to continue command input on multiple lines.

ipsec_config add

The ipsec_config add command adds objects to the configuration database. For example, the following command adds a host IPSec policy to the configuration database.

ipsec_config add host my_host_policy -source 10.1.1.1 \ -destination 10.0.0.0/8/TELNET -pri 100 \

-action ESP_AES128_HMAC_SHA1

Chapter 3

61