IPsec from one AIX server to many windows clients Post: 302316760

Sponsored Content

Operating Systems AIX IPsec from one AIX server to many windows clients Post 302316760 by dgaixsysadm on Saturday 16th of May 2009 10:35:22 AM

05-16-2009

Registered User

IPsec from one AIX server to many windows clients

I work for a fairly large organization who recently tasked me with securing our telnet services with IPsec. We have a large mixed environment where most of our servers are running unsecured telnet. ssh was my first suggestion but because of the cost of purchasing an enterprise license for a fips compliant product, we have been steered in the ipsec direction.

I have sequestered myself in our test lab for the last month getting a reliable connection between ipsec in windows xp and AIX 5.3. The problem i'm having is that i can't seem to make a rule on AIX that allows a large range of systems to connect securely with one rule. In some of our locations many hundred xp clients will need to connect to the AIX server in some places it could be as few as three. Can anyone point me to some good screen shots or configuration examples that would do this? I've read IBM's documentation Using IKE with DHCP, it does mention that you can't use pre-shared keys to accomplish this task but it does not show you anything just tells you. I'd like something more tangible. Also there doesn't seem to be great documentation on exactly how to use X.509 or FQDN to specify a range, or even something such as a subnet or ip range. I'm fairly lost on making the connection run one-to many. Currently i can set up individual IKE tunnels for each XP client (pre-shared key authentication)and it works beautifully. If anyone can point me in the right direction or show me a redbook with screenshots, or just has any experience using aix ipsec in a mixed environment I would be eternally grateful.

dgaixsysadm

View Public Profile for dgaixsysadm

Find all posts by dgaixsysadm

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

FTP from AIX to 20 Windows clients

I have got a unix server ( AIX ) and 20 clients ( windows 2000 ) . I have to transfer a file through FTP from the server to each of 20 clients daily to check the network speed. But each time I do ftp, I have to enter username and password and then transfer the file using "put <filename>". I...

2. UNIX for Dummies Questions & Answers

Map Drive from UNIX Server to Windows Clients

hi all ;; I have a Tru64 UNIX machine , first i want my employees ( windows clients) to see specific directory on unix , and how can i put a unix command in a visual basic code to copy the contents of that directory to drive c in the client side who request that by clicking a push button. ...

3. Shell Programming and Scripting

Aix server to windows Pc

Dear Sir How to write a small script which would permit to aix server to exchange information with windows pc after a define interval of time. My aix server is connected to a network and after preparing messages (mosthly txt message) with my windows pc station the script should be able to go...

4. AIX

NTP server with aix & wintel clients

Good morning to all, can someone advise me how to setup aix ntp server with aix & wintel clients? Secondly, I also require to enable the service to autostart on reboot, how do I configure this? Thirdly, how do I configure daily autosync between clients and server? Please advice, thanks....

5. AIX

How can invoke applications on Windows machine from AIX server

Hi folks, Before I start explaning my problem let me tell you I am new to Unix environment. I am working on a application. It was developed in java (on Windows machine). But application for production will be deployed on AIX machine. One of my requirement is I need to invoke QTP scripts and...

6. AIX

File Transfer thru AIX IPSEC

Hello, I have configured IPSEC between two AIX Server v5.2 using IKE transport. When I try to transfer a files from one server to another, it is very very slow and the file transfer has been terminated after 25% completes. How to overcome this problem? Please advsie. Thanks

7. Filesystems, Disks and Memory

Backup apps for Windows server, linux clients?

Hi guys. What would you recommend me a software running on Windows, and it is capable for backing up Windows and Linux (unix is optional) machines? The application should have following features: - Encryption. - Authentication - Open source if possible :) ... I found Amanda, but it...

8. AIX

Do I need to configure my local windows to FTP files from local windows to a UNIX AIX server?

Hi Friends, I have this script for ftping files from AIX server to local windows xp. #!/bin/sh HOST='localsystem.net' USER='myid_onlocal' PASSWD='mypwd_onlocal' FILE='file.txt' ##This is a file on server(AIX) ftp -n $HOST <<END_SCRIPT quote USER $USER quote PASS $PASSWD put $FILE...

9. Solaris

Clients for Solaris IPSEC tunnel

Hi all, I'm running solaris x86_64 as a home server and am quite happy with it. Currently I'm working with Solaris 10 and 11 express. Typically I tunnel traffic to it via ssh with port forwards, but I'm interested in using the built in IPSEC features that Solaris has. I've setup a solaris...

LEARN ABOUT CENTOS

ipsec

IPSEC(8)							Executable programs							  IPSEC(8)

NAME

       ipsec - invoke IPsec utilities

SYNOPSIS

       ipsec command [argument...] ipsec --help
	     ipsec --version
	     ipsec --versioncode
	     ipsec --copyright
	     ipsec --directory
	     ipsec --confdir

DESCRIPTION

       Ipsec invokes any of several utilities involved in controlling the IPsec encryption/authentication system, running the specified command
       with the specified arguments as if it had been invoked directly. This largely eliminates possible name collisions with other software, and
       also permits some centralized services.

       ipsec --help lists the available commands. Most have their own manual pages, e.g.  ipsec_auto(8) for auto.

       ipsec --version outputs version information about Linux FreeS/WAN. A version code of the form ``Uxxx/Kyyy'' indicates that the user-level
       utilities are version xxx but the kernel portion appears to be version yyy (this form is used only if the two disagree).

       ipsec --versioncode outputs just the version code, with none of --version's supporting information, for use by scripts.

       ipsec --copyright supplies boring copyright details.

       ipsec --directory reports where ipsec thinks the IPsec utilities are stored.

       ipsec --confdir reports where ipsec thinks the IPsec configuration files are stored.

FILES

       /usr/local/lib/ipsec usual utilities directory

SEE ALSO

       ipsec.conf(5), ipsec.secrets(5), ipsec_auto(8), ipsec_barf(8), ipsec_setup(8), ipsec_showhostkey(8)

       HTML documentation shipped with the release, starting with doc/index.html.  <http://www.freeswan.org/doc.html> may also be of use.

HISTORY

       Written for Linux FreeS/WAN <http://www.freeswan.org> by Henry Spencer.

BUGS

       The provision of centralized services, while convenient, does compromise the original concept of making the utilities invocable directly as
       well as via ipsec.

AUTHOR

       Paul Wouters
	   placeholder to suppress warning

libreswan							    12/29/2012								  IPSEC(8)