
Specifying IPsec Settings on the Computer
Specify exactly the same settings for IPsec SA settings on your computer as are specified by the machine's
security level on the machine. Setting methods differ according to the computer's operating system. The
example procedure shown here uses Windows XP when the Authentication and Low Level Encryption
Security level is selected.
1.
On the [Start] menu, click [Control Panel], click [Performance and Maintenance], and then
click [Administrative Tools].
2.
Click [Local Security Policy].
3.
Click [IP Security Policies on Local Computer].
4.
In the "Action" menu, click [Create IP Security Policy].
The IP Security Policy Wizard appears.
5.
Click [Next].
6.
Enter a security policy name in "Name", and then click [Next].
7.
Clear the "Activate the default response rule" check box, and then click [Next].
8.
Select "Edit properties", and then click [Finish].
9.
In the "General" tab, click [Advanced].
10.
In "Authenticate and generate a new key after every" enter the same validity period (in
minutes) that is specified on the machine in Encryption Key Auto Exchange Settings Phase
1, and then click [Methods].
11.
Confirm that the combination of hash algorithm (on Windows XP, "Integrity"), the encryption
algorithm (on Windows XP, "Encryption"), and the Diffie-Hellman group settings in "Security
method preference order" match the settings specified on the machine in Encryption Key
Auto Exchange Settings Phase 1.
12.
If the settings are not displayed, click [Add].
13.
Click [OK] twice.
14.
Click [Add] in the "Rules" Tab.
The Security Rule Wizard appears.
15.
Click [Next].
16.
Select "This rule does not specify a tunnel", and then click [Next].
17.
Select the type of network for IPsec, and then click [Next].
18.
Select the "initial authentication method", and then click [Next].
19.
If you select "Certificate" for authentication method in Encryption Key Auto Exchange
Settings on the machine, specify the device certificate. If you select PSK, enter the same PSK
text specified on the machine with the pre-shared key.
20.
Click [Add] in the IP Filter List.
6. Enhanced Network Security
164
6
Summary of Contents for Aficio MP C2030
Page 2: ......
Page 10: ...INDEX 245 8 ...
Page 118: ...6 Press the User Tools Counter key 5 Managing Access to the Machine 116 5 ...
Page 128: ...5 Managing Access to the Machine 126 5 ...
Page 153: ... p 26 Registering the Administrator Protection Using Encryption 151 6 ...
Page 194: ...8 Troubleshooting 192 8 ...
Page 249: ...MEMO 247 ...
Page 250: ...MEMO 248 GB GB EN USA AE AE D040 ...
Page 251: ...Copyright 2008 ...