Using IP Security Architecture in Zones
The Internet Protocol Security Architecture (IPsec), which provides IP datagram protection, is described in
Chapter 19, IP Security Architecture (Overview), in System Administration Guide: IP Services. The Internet Key Exchange (IKE) protocol is used to manage the required
keying material for authentication and encryption automatically.
For more information, see the ipsecconf(1M) and ipseckey(1M) man pages.
IP Security Architecture in Shared-IP Zones
IPsec can be used in the global zone. However, IPsec in a
non-global zone cannot use IKE. Therefore, you must manage the IPsec keys and
policy for the non-global zones by running the ipseckey and ipsecconf commands from
the global zone. Use the source address that corresponds to the non-global zone
that you are configuring.
IP Security Architecture in Exclusive-IP Zones
IPsec can be used in exclusive-IP zones.