05-16-2009
IPsec from one AIX server to many windows clients
I work for a fairly large organization who recently tasked me with securing our telnet services with IPsec. We have a large mixed environment where most of our servers are running unsecured telnet. ssh was my first suggestion but because of the cost of purchasing an enterprise license for a fips compliant product, we have been steered in the ipsec direction.
I have sequestered myself in our test lab for the last month getting a reliable connection between ipsec in windows xp and AIX 5.3. The problem i'm having is that i can't seem to make a rule on AIX that allows a large range of systems to connect securely with one rule. In some of our locations many hundred xp clients will need to connect to the AIX server in some places it could be as few as three. Can anyone point me to some good screen shots or configuration examples that would do this? I've read IBM's documentation Using IKE with DHCP, it does mention that you can't use pre-shared keys to accomplish this task but it does not show you anything just tells you. I'd like something more tangible. Also there doesn't seem to be great documentation on exactly how to use X.509 or FQDN to specify a range, or even something such as a subnet or ip range. I'm fairly lost on making the connection run one-to many. Currently i can set up individual IKE tunnels for each XP client (pre-shared key authentication)and it works beautifully. If anyone can point me in the right direction or show me a redbook with screenshots, or just has any experience using aix ipsec in a mixed environment I would be eternally grateful.
9 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
I have got a unix server ( AIX ) and 20 clients ( windows 2000 ) . I have to transfer a file through FTP from the server to each of 20 clients daily to check the network speed.
But each time I do ftp, I have to enter username and password and then transfer the file using "put <filename>". I... (2 Replies)
Discussion started by: sharuvman
2 Replies
2. UNIX for Dummies Questions & Answers
hi all ;;
I have a Tru64 UNIX machine , first i want my employees ( windows clients) to see specific directory on unix , and how can i put a unix command in a visual basic code to copy the contents of that directory to drive c in the client side who request that by clicking a push button.
... (3 Replies)
Discussion started by: kafaween
3 Replies
3. Shell Programming and Scripting
Dear Sir
How to write a small script which would permit to aix server to exchange information with windows pc after a define interval of time.
My aix server is connected to a network and after preparing messages (mosthly txt message) with my windows pc station the script should be able to go... (0 Replies)
Discussion started by: sobnc
0 Replies
4. AIX
Good morning to all,
can someone advise me how to setup aix ntp server with aix & wintel clients?
Secondly, I also require to enable the service to autostart on reboot, how do I configure this?
Thirdly, how do I configure daily autosync between clients and server?
Please advice, thanks.... (0 Replies)
Discussion started by: chongkls77
0 Replies
5. AIX
Hi folks,
Before I start explaning my problem let me tell you I am new to Unix environment. I am working on a application. It was developed in java (on Windows machine). But application for production will be deployed on AIX machine.
One of my requirement is I need to invoke QTP scripts and... (3 Replies)
Discussion started by: sachinrt
3 Replies
6. AIX
Hello,
I have configured IPSEC between two AIX Server v5.2 using IKE transport. When I try to transfer a files from one server to another, it is very very slow and the file transfer has been terminated after 25% completes. How to overcome this problem? Please advsie. Thanks (0 Replies)
Discussion started by: srllee
0 Replies
7. Filesystems, Disks and Memory
Hi guys.
What would you recommend me a software running on Windows, and it is capable for backing up Windows and Linux (unix is optional) machines?
The application should have following features:
- Encryption.
- Authentication
- Open source if possible :)
...
I found Amanda, but it... (1 Reply)
Discussion started by: bsddaemon
1 Replies
8. AIX
Hi Friends,
I have this script for ftping files from AIX server to local windows xp.
#!/bin/sh
HOST='localsystem.net'
USER='myid_onlocal'
PASSWD='mypwd_onlocal'
FILE='file.txt' ##This is a file on server(AIX)
ftp -n $HOST <<END_SCRIPT
quote USER $USER
quote PASS $PASSWD
put $FILE... (1 Reply)
Discussion started by: rajsharma
1 Replies
9. Solaris
Hi all,
I'm running solaris x86_64 as a home server and am quite happy with it. Currently I'm working with Solaris 10 and 11 express. Typically I tunnel traffic to it via ssh with port forwards, but I'm interested in using the built in IPSEC features that Solaris has. I've setup a solaris... (1 Reply)
Discussion started by: vectox
1 Replies
LEARN ABOUT SUSE
ipsec_strerror
IPSEC_STRERROR(3) BSD Library Functions Manual IPSEC_STRERROR(3)
NAME
ipsec_strerror -- error messages for the IPsec policy manipulation library
LIBRARY
IPsec Policy Control Library (libipsec, -lipsec)
SYNOPSIS
#include <netinet6/ipsec.h>
const char *
ipsec_strerror(void);
DESCRIPTION
netinet6/ipsec.h declares
extern int ipsec_errcode;
which is used to pass an error code from the IPsec policy manipulation library to a program. ipsec_strerror() can be used to obtain the
error message string for the error code.
The array pointed to is not to be modified by the calling program. Since ipsec_strerror() uses strerror(3) as underlying function, calling
strerror(3) after ipsec_strerror() will make the return value from ipsec_strerror() invalid or overwritten.
RETURN VALUES
ipsec_strerror() always returns a pointer to a C string. The C string must not be overwritten by the calling program.
SEE ALSO
ipsec_set_policy(3)
HISTORY
ipsec_strerror() first appeared in the WIDE/KAME IPv6 protocol stack kit.
BUGS
ipsec_strerror() will return its result which may be overwritten by subsequent calls.
ipsec_errcode is not thread safe.
BSD
May 6, 1998 BSD