Canon LBP351 Series, User Manual

Page: 312 / 642

Specify how long SA is used as a communication tunnel. Select the [Specify by Time] or [Specify by Size] check
box or both check boxes as necessary. If both check boxes are selected, the IPSec SA session is terminated
when either of the conditions has been satisfied.
[Specify by Time] Enter a time in minutes to specify how long a session lasts. The entered time is applied
to both IPSec SA and IKE SA.
[Specify by Size] Enter a size in megabytes to specify how much data can be transported in a session.
The entered size is applied to IPSec SA only.
If you have selected the [Specify by Size] check box only
● The IKE SA validity cannot be specified by size, so that the initial value (480 minutes) of [Specify by Time] is
applied.
[Authentication/Encryption Algorithm]
Select the protocol and algorithm to use for IPSec communication.
Automatically setting up connection
Select [Auto].
[ESP Authentication] ESP is enabled and the authentication algorithm is set to [SHA1 and MD5].
[ESP Encryption] ESP is enabled and the encryption algorithm is set to [3DES-CBC and AES-CBC].
Using ESP
Choose [ESP] and select the authentication algorithm and encryption algorithm.
[ESP Authentication] Select the hash algorithm to use for ESP authentication.
[ESP Encryption] Select the encryption algorithm for ESP.
Using AH
Choose [AH], and select the hash algorithm to use for AH authentication from [AH Authentication].
[Connection Mode]
The connection mode of IPSec is displayed. The machine supports transport mode, in which the payloads of
IP packets are encrypted. Tunnel mode, in which whole IP packets (headers and payloads) are encapsulated
is not available.
10
Click [OK].
● If you need to register an additional security policy, return to step 5.
11
Arrange the order of policies listed under [IPSec Policy List].
● Policies are applied from one at the highest position to the lowest. Click [Raise Priority] or [Lower Priority] to
move a policy up or down the order.
Security
305