IPSEC 2.01 hp-ux 11.x

[Slawomir Gora]

Hi,
I have working with configuration where Solaris 9 box is communicating with hp-ux 11.0 (ipsec 1.4).
In above config communication works fine.

Now I am trying upgrade to IPSEC 2.01 (tested on PA-RISC and HP-UX platform) and there is problem to estabilish communication between Solaris 9 and hp-ux. System timeouts on phase 1 negotiation.
On hp-ux box syslog there is info:
secauditd[3403]: IPSEC : Level : 2 Event : Invalid SPI size: 8 for ISAKMP protocol

I tested communication between hp-ux box with different version of IPSEC and it works OK.

My tests:
HP IPSEC 1.04.01 -> HP IPSEC 2.01 (works OK)
Solaris 9 -> HP IPSEC 1.04.01 (works OK)
Solaris 9 -> HP IPSEC 2.01 (Problem)

[Steven E. Protter]

Shalom Slawomir,

Sounds like a bug report. Perhaps the tests missed something. I recommend calling a response center and reporting a bug.

The installation notes may have something about this but i don't see it.

SEP

[Wenxiao He]

HP IPsec A.02.01.01 release has fix for this one.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=J4256AA