Canon imagerunner advance C5550i, User Manual

Page: 620 / 1556

Configuring the IPSec Settings
13WK-0C4
By using IPSec, you can prevent third parties from intercepting or tampering with IP packets transported over the IP
network. Because IPSec adds security functions to IP, a basic protocol suite used for the Internet, it can provide
security that is independent of applications or network configuration. To perform IPSec communication with this
machine, you must configure settings such as the application parameters and the algorithm for authentication and
encryption. Administrator or NetworkAdmin privileges are required in order to configure these settings. Check the
system requirements before performing the procedure below. Specifications(P. 1029)
Communication mode
● This machine only supports transport mode for IPSec communication. As a result, authentication and
encryption is only applied to the data portions of IP packets.
Key exchange protocol
This machine supports Internet Key Exchange version 1 (IKEv1) for exchanging keys based on the Internet
Security Association and Key Management Protocol (ISAKMP). For the authentication method, set either the pre-
shared key method or the digital signature method.
● When setting the pre-shared key method, you need to decide on a passphrase (pre-shared key) in advance,
which is used between the machine and the IPSec communication peer.
● When setting the digital signature method, use a CA certificate and a PKCS#12 format key and certificate to
perform mutual authentication between the machine and the IPSec communication peer. For more
information on registering new CA certificates or keys/certificates, see Registering a Key and Certificate
for Network Communication(P. 666) . Note that SNTP must be configured for the machine before it uses
this method. Making SNTP Settings(P. 57)
1
Press .
2
Press <Preferences> <Network> <TCP/IP Settings> <IPSec Settings>.
3
Set <Use IPSec> to <On>, and press <Register>.
Managing the Machine
608