Step 9: Configuring HP-UX IPSec to Start Automatically

After you have verified your HP-UX IPSec configuration is properly operating, you can configure HP-UX IPSec so that it starts automatically at system startup time.




	TIP: HP recommends that you configure HP-UX IPSec to start automatically at system startup time once you have a known, good HP-UX IPSec configuration. This allows HP-UX IPSec to secure your system at all times.

ipsec_config add startup Syntax

Use the following ipsec_config add startup syntax to configure HP-UX IPSec to start automatically at system startup time:

ipsec_config add startup -autoboot ON

To specify an add startup operation for an ipsec_config batch file, use the above syntax without the ipsec_config command name:

add startup -autoboot ON

The full ipsec_config add startup syntax specification also allows you to specify the following arguments:

nocommit (verify the syntax but do not commit the information to the database)
profile (alternate profile file)
auditlvl (audit level)
auditdir (audit directory)
maxsize (maximum audit file size)
spi_min (lower bound for inbound, dynamic Security Parameters Index)
spi_max (upper bound for inbound, dynamic key Security Parameters Index)
spd_soft (the “soft” limit for the size of the Security Policy Database)
spd_hard (the “hard” limit for the size of the Security Policy Database)

Refer to the ipsec_config(1M) manpage for full syntax information.




	CAUTION: If this is a first time installation or a new installation of a patch or a product release, you use the `ipsec_admin -newpasswd` command to set the IPSec password before you reboot the system. See Chapter 2 “Installing HP-UX IPSec ”, “Step 3: Setting the HP-UX IPSec Password” for more information.

Step 9: Configuring HP-UX IPSec to Start Automatically

Technical documentation

» Table of Contents

» Glossary

» Index

ipsec_config add startup Syntax