Canon MF729Cx, Important Safety Instructions And Installation Manual

Page: 460 / 782

[Local Port]/[Remote Port]
If you want to create separate policies for each protocol, such as HTTP or SMTP, enter the appropriate port number for the
protocol to determine whether to use IPSec.
IPSec is not applied to the following packets
Loopback, multicast, and broadcast packets
IKE packets (using UDP on port 500)
ICMPv6 neighbor solicitation and neighbor advertisement packets
Specify the IKE Settings.
[IKE Mode]
The mode used for the key exchange protocol is displayed. The machine supports the main mode, not the aggressive mode.
[Authentication Method]
Select [Pre-Shared Key Method] or [Digital Signature Method] for the method used when authenticating the machine. You need to
enable SSL for the Remote UI before selecting [Pre-Shared Key Method] (
Enabling SSL Encrypted Communication for the
Remote UI ). You need to generate or install a key pair before selecting [Digital Signature Method] ( Configuring Settings for
Key Pairs and Digital Certificates ).
[Valid for]
Specify how long a session lasts for IKE SA (ISAKMP SA). Enter the time in minutes.
[Authentication]/[Encryption]/[DH Group]
Select an algorithm from the drop-down list. Each algorithm is used in the key exchange.
[Authentication] Select the hash algorithm.
[Encryption] Select the encryption algorithm.
[DH Group] Select the Diffie-Hellman group, which determines the key strength.
Using a pre-shared key for authentication
1
Click the [Pre-Shared Key Method] radio button for [Authentication Method] and then click [Shared Key
Settings].
2
Enter up to 24 alphanumeric characters for the pre-shared key and click [OK].
3
Specify the [Valid for] and [Authentication]/[Encryption]/[DH Group] settings.
Using a key pair and preinstalled CA certificates for authentication
Click the [Digital Signature Method] radio button for [Authentication Method] and then click [Key and
9
㻠㻢㻜㻌㻛㻌㻣㻟㻡