Planning IP security configuration

When a simple tunnel is defined for all traffic to use, the filter rules can be automatically generated. If more complex filtering is desired, filter rules can be configured separately.

You can configure IP Security using the Virtual Private Network plug-in or the System Management Interface Tool (SMIT). If using SMIT, the following fast paths are available:

smit ips4_basic

Basic configuration for IP version 4

smit ips6_basic

Basic configuration for IP version 6

Before configuring IP Security for your site, you must decide what method you intend to use; for example, whether you prefer to use tunnels or filters (or both), which type of tunnel best suits your needs, and so on. The following sections provide information you must understand before making these decisions: