Internet Protocol security

IP Security enables secure communications over the Internet and within company networks by securing data traffic at the IP layer.

IP security overview
IP security allows individual users or organizations to secure traffic for all applications, without having to make any modifications to the applications. Therefore, the transmission of any data, such as e-mail or application-specific company data, can be made secure.
Installing the IP security feature
The IP Security feature in AIX® is separately installable and loadable.
Planning IP security configuration
To configure IP Security, plan to configure the tunnels and filters first.
Configuring Internet key exchange tunnels
You can configure Internet Key Exchange (IKE) tunnels using the System Management Interface Tool (SMIT) or the command line.
Digital certificates and the key manager concepts
Digital certificates bind an identity to a public key, through which you can verify the sender or the recipient of an encrypted transfer.
Network address translation
IP Security can use devices whose addresses undergo network address translation (NAT).
Configuring manual tunnels
You can configure IP Security manual tunnels if the devices do not support an automatic keying method.
IP security filter configuration
Filtering can be set up to be simple, using mostly autogenerated filter rules, or can be customized by defining very specific filter functions based on the properties of the IP packets.
Logging facilities
As hosts communicate with each other, the transferred packets may be logged to the system log daemon, syslogd. Other important messages about IP Security also display.
Internet Protocol security problem diagnosis
The following are some hints and tips that might assist you when you encounter a problem.
IP security reference
There are commands and methods for IP security. You can also migrate IKE tunnels, filters, and pre-shared keys.

Parent topic: Securing the network