Conguring the IPSec Settings
13WK-0C4
By using IPSec, you can prevent third parties from intercepting or tampering with IP packets transported over the IP
network. Because IPSec adds security functions to IP, a basic protocol suite used for the Internet, it can provide
security that is independent of applications or network conguration. To perform IPSec communication with this
machine, you must congure settings such as the application parameters and the algorithm for authentication and
encryption. Administrator or NetworkAdmin privileges are required in order to congure these settings. Check the
system requirements before performing the procedure below.
Specications(P. 1029)
Communication mode
● This machine only supports transport mode for IPSec communication. As a result, authentication and
encryption is only applied to the data portions of IP packets.
Key exchange protocol
This machine supports Internet Key Exchange version 1 (IKEv1) for exchanging keys based on the Internet
Security Association and Key Management Protocol (ISAKMP). For the authentication method, set either the pre-
shared key method or the digital signature method.
● When setting the pre-shared key method, you need to decide on a passphrase (pre-shared key) in advance,
which is used between the machine and the IPSec communication peer.
● When setting the digital signature method, use a CA certicate and a PKCS#12 format key and certicate to
perform mutual authentication between the machine and the IPSec communication peer. For more
information on registering new CA certicates or keys/certicates, see
Registering a Key and Certicate
for Network Communication(P. 666) . Note that SNTP must be congured for the machine before it uses
this method. Making SNTP Settings(P. 57)
1
Press .
2
Press <Preferences> <Network> <TCP/IP Settings> <IPSec Settings>.
3
Set <Use IPSec> to <On>, and press <Register>.
Managing the Machine
608
To Next Page
Loading...
Need help?
General
