Sindoh D310 Series, User Manual, Page: 213 / 324

13.6 Using IPsec communication 13
[Web Management Tool] 13-14
4
From [Peer] in [IPsec Setting], click [Create] and register peers of this machine.
% Up to 10 peers can be registered.
5
From [Protocol Setting] in [IPsec Setting], click [Create] and specify the protocol used for IPsec com-
munication.
% Up to 10 protocols can be specified.
6
In the administrator mode, select [Network] - [TCP/IP Setting] - [IPsec] - [Enable IPsec], then click [OK].
7
In [Enable IPsec], configure the following settings.
Settings Description
[Name] Enter the peer name (using 1 to 10 characters, excluding ").
[Set IP Address] Specify the IP address of the peer.
[Pre-Shared Key Text] Enter the Pre-Shared Key text to be shared with the peer.
•
[ASCII]: Enter the Pre-Shared Key text using ASCII characters (up to 128).
• [HEX]: Enter the Pre-Shared Key text using hexadecimal characters (up to
256).
Specify the same text as that for the peer.
[Key-ID String] Enter the Key-ID to be specified for the Pre-Shared Key (using up to 128 char-
acters).
Settings Description
[Name] Enter the protocol name (using 1 to 10 characters, excluding ").
[Protocol Identification
Setting] Select a protocol used for IPsec communication.
[Port Number] If [TCP] or [UDP] has been selected in [Protocol Identification Setting], specify
the port number used for IPsec communication.
[ICMP Message Type] Select the ICMP message type when [ICMP] is selected in [Protocol Identifica-
tion Setting].
•
[Echo Request/Reply]: Specify an ICMP message for echo request or re-
sponse.
• [No Selection]: You do not specify the ICMP message type.
[ICMPv6 Message
Type] Select the ICMP message type when [ICMPv6] is selected in [Protocol Identi-
fication Setting].
•
[Echo Request/Reply]: Specify an ICMP message for echo request or re-
sponse.
• [No Selection]: You do not specify the ICMP message type.
Settings Description
[IPsec] Select [ON] to use the IPsec.
[Dead Peer Detection] If no response can be confirmed from the peer in a certain period, the SA with
the peer is deleted.
Select a time that elapses before sending survival confirmation information to
the peer how has not responded.
[Cookies] Select whether to enable the defense using Cookies against denial-of-service
attacks.
[ICMP Pass] Select whether to apply IPsec to the Internet Control Message Protocol (ICMP).
Select [Enable] to allow the ICMP packets to pass without applying IPsec to the
ICMP.
[ICMPv6 Pass] Select whether to apply IPsec to the Internet Control Message Protocol for IPv6
(ICMPv6).
Select [Enable] to allow the ICMPv6 packets to pass without applying IPsec to
the ICMPv6.
[Default Action] Select an action to be taken if no settings meet the [IPsec Policy] while IPsec
communication is enabled.
Select [Deny] to discard IP packets that do not meet the [IPsec Policy] settings.