Canon 1064C001, Operation Manual

Page: 214 / 264

Setting Page
5
213
[IPsec Mode]
Select the IPsec mode.
[Destination IPv4 Address], [Destination IPv6 Address]
Enter the IP address of the connection destination.
[Source IPv4 Address], [Source IPv6 Address]
Enter the IP address of the source.
[Security Protocol]
Select the IPsec protocol.
If you select [ESP], enter only the setting items relating to ESP.
If you select [AH], enter only the setting items relating to AH.
If you select [ESP and AH], enter all setting items.
[Security Gateway IPv4 Address], [Security Gateway IPv6 Address]
Enter the IP address of the security gateway if [IPsec Mode] is set to [Tunnel Mode].
[Destination Subnet Mask Length (IPv4)], [Destination Prefix Length (IPv6)]
Enter the subnet mask (IPv4) or prefix length (IPv6) when [IPsec Mode] is set to [Tunnel Mode].
If the Setting in [Security Protocol] Includes “ESP”
[SA ESP Encryption Algorithm]
Set the ESP encryption algorithm to suit the encryption algorithm supported by the device to connect to.
Normally [AES] or [3DES] is recommended.
[SA ESP Authentication Algorithm]
Set the ESP authentication algorithm to suit the authentication algorithm supported by the device to connect to.
If [ESP] is used alone, [No Authentication] cannot be selected.
[SA ESP Encryption Key (outbound)]
Enter the SA encryption key for outbound.
If [AES], [3DES] or [DES] was selected in [SA ESP Encryption Algorithm], set a 128-bit, 192-bit or 64-bit hexadecimal
number, respectively. This item need not be set if [NULL] was selected.
[SA ESP Authentication Key (outbound)]
Enter the SA authentication key for outbound.
If [HMAC_SHA1_96] or [HMAC_MD5_96] was selected in [SA ESP Authentication Algorithm], set a 160-bit or 128-bit
hexadecimal number, respectively. This item need not be set if [No Authentication] was selected.
[SA ESP SPI (outbound)]
Enter the SA SPI value for outbound.
Set a desired value in the range of 256 to 4294967295.
[SA ESP Encryption Key (inbound)]
Enter the SA encryption key for inbound.
If [AES], [3DES] or [DES] was selected in [SA ESP Encryption Algorithm], set a 128-bit, 192-bit or 64-bit hexadecimal
number, respectively. This item need not be set if [NULL] was selected.
[SA ESP Authentication Key (inbound)]
Enter the SA authentication key for inbound.
If [HMAC_SHA1_96] or [HMAC_MD5_96] was selected in [SA ESP Authentication Algorithm], set a 160-bit or 128-bit
hexadecimal number, respectively. This item need not be set if [No Authentication] was selected.
[SA ESP SPI (inbound)]
Enter the SA SPI value for inbound.
Set a desired value in the range of 256 to 4294967295.
Since this setting is used as an ID for identifying the SA, be careful not to specify an inbound SPI whose value is
already used in the SPI for another ESP.
If the Setting in [Security Protocol] Includes “AH”
[SA AH Authentication Algorithm]
Set the AH authentication algorithm to suit the authentication algorithm supported by the device to connect to.