If anyone has IPSEC working between a filer (I'm running 7.0.1R1) and Solaris 10, I would love to see your config.

On Solaris:

/etc/inet/ipsecinit.conf (config file for ipsecconf) /etc/inet/ike/conf (config file for in.iked) /etc/inet/secret/ike.preshared (hide your pre shared keys of course!)

On the filer:

/etc/psk.txt (hide pre shared keys!)

Output of: ipsec policy show ipsec sa show

Am I missing anything?

I want to use the IPSEC AH protocol to verify the identity of some Solaris NFS clients in a lab with a physically insecure network.

Steve Losen scl@virginia.edu phone: 434-924-0640

University of Virginia ITC Unix Support