SunScreen SKIP User's Guide, Release 1.5.1

Installing SKIP Binaries

  1. Mount the CD-ROM and type:

    volcheck


    Note -

    If you are not using vold on your system, type # mount -F hsfs -oro /dev/dsk/c0t6d0s0/mnt The device name or the mount point or both depends on your local system configuration.


  2. Go to the directory on the CD-ROM for your OS

    Solaris operating environment for the SPARC Platform:


     cd /cdrom/cdrom0/sparc
    

    Solaris operating environment for the Intel Platform:


    cd /cdrom/cdrom0/x86
    

    Note -

    If you have mounted the CD-ROM manually, replace /cdrom/cdrom0 with /mnt.


  3. Use the standard Solaris operating environment pkgadd command to add all packages:


    pkgadd  -d `pwd`
    
  4. Add /usr/sbin to your PATH variable:


    PATH=/usr/sbin:$PATH export PATH
    
  5. Initialize the SKIP directories by issuing the command:


    skiplocal -i
    
  6. Generate a secret and a public certificate locally by issuing the command:


    skiplocal -k
    
  7. Add SKIP to your network interface by issuing the command:

    skipif -a

  8. Reboot the machine.

  9. Enable SKIP and configure IP encryption with one other host:


    skiphost -a default	 default IP traffic is unencrypted
    skiplocal -x	prints the skiphost command to check info
     	others need to run to talk to us
    skiplocal -x| mail Friend@remote.host
    

    Friend@remote.host should issue these commands as well. Once the corresponding mail is received, verify out-of-band (for example, over the telephone) that the received mail matches the mail that was sent. Then Friend executes the received skiphost command.

  10. Turn SKIP on:


    skiphost -o on	enable SKIP