IPSec for dummies

[Olivier Masse]

Hi,

I'm trying to connect an HP-UX 11.11 server to a Solaris 8 box for a proof-of-concept.

Problem is, IPSec a world premiere here... neither me nor the Sun admin know what we are doing, and since the command-line interface is very different from one platform to another, it's hard to just blindly try to set up similar configurations to make it work.

Furthermore, the reporting tools on HP-UX's side don't give me much to start with, and tracing raw packets is just too hard-core for me.

I'm busy and don't have much time to rtfm completely both Sun's and HP's document. Is there a platform-independent primer somewhere that could explain how to configure IPSec at a high-level? This could help us at least determine what are our standards then try to connect to each other.

Thanks

[Steven E. Protter]

Maybe a gui like ethereal will work.

You can filter and look at ipsec stuff pretty easily.

http://hpux.connect.org.uk/hppd/hpux/Gtk/ethereal-0.9.15/

If its not working its may be incompatible versions or configuration of ipsec.

SEP

[Duncan Edmonstone]

Last time I used IPSEC/9000 on HP-UX there was a GUI that made it all pretty straightforward (although that was 4 years ago)

Think it was called ipsec_mgr


HTH

Duncan

[Olivier Masse]

From what I understand, there used to be a fair GUI with older versions but not anymore with 2.0. The GUI only lets you import certificates now and everything must be done at the CLI.