IPSec Ver. 1 and 2

[Rainer von Bongartz]

I need IPSec communication between a HP-UX 11.0 host (only IPSec 1.0x available) and a HP-UX 11.11 host (only IPSec 2.0x available) .

Did anybody try to set up this connectivity of different IPSec versions and can share some hints on creating this config ?

Vers. 1 uses a GUI for the setup while Vers. 2 uses a command line interface and I did not succesfully create a configuration to make IPSec work.

Regards
Rainer

[Tinghua Xu_1]

Hi Rainer,

If you are still considering using IPSec, I'd like to work with you on the configurations.
IPSec should work between version 1 and version 2.

Basically you need to configure
an IPSec rule, an isakmp rule and a preshared
key in GUI of version 1.

and in the 11.11 system with IPsec version 2 you need to configure an host rule, an IKE rule and an auth record which contains the same preshared key as the one in version 1 using the ipsec_config in IPSec version 2 or up. The policies between version 1 and version 2 should match.

I can also find the same version of IPSec software for your 11.00 and 11.11 systems if it's needed.

Regards
Tinghua

[Slawomir Gora]

Hi,
in my configuration it works fine.
I have two systems:
a) hp 11i ipsec 1.5
b) hp 11i ipsec 2.0

I use comunication between severs only in transport mode for dedicated tcp ports with preshared key authentication.