Handleiding
Je bekijkt pagina 84 van 133
Network Settings
80 Embedded Web Server
rows the extent of the parameter negotiations. When Aggressive Mode is
selected and Pre-shared Key is selected for Authentication Type, only host
addresses can be specified for IP addresses of the rule.
Hash: Selects the hash algorithm.
Encryption: Selects the encryption algorithm.
Diffie-Hellman Group: The Diffie-Hellman key-sharing algorithm allows two hosts
on an unsecured network to share a private key securely. Select the Diffie-Hellman
group to use for key sharing.
Lifetime (Time): Specifies the lifetime of an ISAKMP SA in seconds.
5. Data Protection (IKE phase2)
In IKE phase2, IPSec SAs such as ESP or AH are established by using SAs estab-
lished in IKE phase1. Configure the following items so that they meet the require-
ment of the other end.
Protocol: Select ESP or AH for the protocol. ESP protects the privacy and integ-
rity of the packet contents. Select the hash algorithm and encryption algorithm
below. AH protects the integrity of the packet contents using encryption checksum.
When you select AH as Protocols, you cannot use the AES-GCM-128, 192, or
256. Select the hash algorithm below.
Hash: Selects the hash algorithm. When you select AES-GCM-128, 192, or 256
on Encryption, you have to select the AES-GCM-128, 192, or 256 or the AES-
GMAC-128, 192, or 256 corresponding to the same bit.
Encryption: Selects the encryption algorithm. (When ESP is selected under Pro-
tocol.) When you select the AES-GCM-128, 192, or 256 on Hash, you have to
select the AES-GCM-128, 192, or 256 corresponding to the same bit. When you
select the AES-GMAC-128, 192, or 256 on Hash, you have to select the AES-
GCM-128, 192, or 256 corresponding to the same bit. If you do not select any
algorithm, the machine authenticates without encryption.
PFS: When PFS is turned On (enabled), even if a key is decrypted, the decrypted
key cannot be used to decrypt the other keys generated after the decryption. This
improves the safety, but imposes a heavy burden because of more key-generation
processes.
Diffie-Hekkman Group: When PFS is turned On (enabled), select the Diffie-Hekk-
man Group to use.
Lifetime Measurement: Select Time or Time & Data Size.
Lifetime (Time): Configure the lifetime of IPSec SA in seconds.
Lifetime (Data Size): Configure this item when is Time & Data Size selected as
Lifetime Measurement. Configure the lifetime (data size) of IPSec SA in kilo-
bytes.
Extended Sequence Number: Determines whether a sequence number is 64-bit
extended by IPSec. To execute, select On.
6. Manual: If Key Management Type is set to Manual, configure:
Protocol, Hash,
Encryption, SPI Format, SPI f
or
Inbound, SPI for Outbound,
Key Format, Authentication Key for Inbound, Authentication Key for Out-
bound, Encryption Key for Inbound, Encryption Key for Outbound.
Click Submit button to finalize settings.
3. Click Submit button.
Protocol
This section includes advanced settings for various protocols used as the
communication procedures and communication protocols.
*: If the settings for the item marked with an asterisk (*) has been changed, you must
restart the machine or the network. To restart the machine, proceed to the Management
Settings : Restart/Reset page.
Bekijk gratis de handleiding van UTAX 5009ci, stel vragen en lees de antwoorden op veelvoorkomende problemen, of gebruik onze assistent om sneller informatie in de handleiding te vinden of uitleg te krijgen over specifieke functies.
Productinformatie
| Merk | UTAX |
| Model | 5009ci |
| Categorie | Printer |
| Taal | Nederlands |
| Grootte | 11339 MB |
