Configuring HP-UX IPSec

Configuration Overview

The bypass list specifies the local IPv4 addresses that IPSec will bypass or ignore. The system will not attempt to find an IPSec policy for packets sent or received using an IP address in the bypass list, and will process these packets as if HP-UX IPSec was not enabled.

The bypass list improves transmission rates for addresses in the bypass list and is useful in topologies where most of the network traffic passes in clear text and only specific traffic must be secured by IPSec.

The bypass list does not support IPv6 addresses.

•Start-up options

The start-upoptions allow you to configure HP-UX IPSec to start automatically at system boot-up time and to specify general operating parameters.

HP-UX IPSec also supports gateway IPSec policies when used with HP-UX Mobile IPv6. See “HP-UX IPSec and HP-UX Mobile IPv6” on page 199 for more information on using gateway IPSec policies.

Although you can configure the above components in any order, HP recommends that you use the following procedure to configure IPSec:

Step 1. Configure host IPSec policies.

See “Step 1: Configuring Host IPSec Policies” on page 69 for a description of this step.

Step 2. Configure tunnel IPSec policies.

See “Step 2: Configuring Tunnel IPSec Policies” on page 81 for a description of this step. Skip this step if the local system is not a tunnel endpoint.

Step 3. Configure IKE policies.

See “Step 3: Configuring IKE Policies” on page 89 for a description of this step.Skip this step if the local system uses only manual keys for IPSec.

Step 4. Configure IKE preshared keys using authentication records.

See “Step 4: Configuring Preshared Keys Using Authentication Records” on page 95 for a description of this step. Skip this step if the local system uses only manual keys for IPSec.

Chapter 3

67

Page 70 Page 72
Page 71
Image 71
HP UX IPSec Software manual Start-up options
Page 70 Page 72

UX IPSec Software specifications

HP-UX IPSec Software is an integral component of the HP-UX operating system, providing robust and secure communication capabilities for enterprise environments. As organizations increasingly rely on secure networking solutions, HP-UX IPSec stands out with its comprehensive set of features and technologies designed to safeguard sensitive data.

One of the core characteristics of HP-UX IPSec Software is its implementation of the Internet Protocol Security (IPSec) framework. This technology secures Internet Protocol (IP) communications through authentication and encryption, ensuring the integrity and confidentiality of data transmissions. By leveraging IPSec, HP-UX provides a secure method for connecting remote users and secure sites over untrusted networks, such as the internet.

A notable feature of the HP-UX IPSec Software is its support for both transport and tunnel modes. The transport mode encrypts only the payload of the IP packet, whereas the tunnel mode encapsulates the entire IP packet within a new packet, allowing for secure communications between entire networks. This flexibility enables organizations to tailor their security strategies based on specific use cases and requirements.

HP-UX IPSec also emphasizes interoperability and compliance with industry standards. The software supports various encryption algorithms and authentication methods, including those defined by the Internet Engineering Task Force (IETF). This commitment to open standards ensures that HP-UX can seamlessly integrate with a diverse range of networking infrastructures and security solutions.

In addition to its security features, HP-UX IPSec Software offers administration tools that simplify the configuration and management of IPSec policies. The software includes a user-friendly command-line interface, allowing system administrators to specify security associations and policies efficiently. Moreover, comprehensive logging and monitoring capabilities help organizations keep track of their security posture and detect potential vulnerabilities.

Another essential characteristic of HP-UX IPSec Software is its scalability. Designed to accommodate the needs of both small and large enterprises, it can handle increased loads and adapt to changing security demands without compromising performance.

In conclusion, HP-UX IPSec Software stands as a vital solution for organizations seeking to protect their data transmissions over IP networks. With its core technologies, such as transport and tunnel modes, adherence to industry standards, user-friendly administration tools, and scalability, it provides a formidable layer of security in an increasingly interconnected world. This makes it a preferred choice for enterprises aiming to enhance their network security frameworks.
Top Page Image Contents