Canon iR3245, Сетевое руководство

Страница: 120 / 288

3
Using
a
TCP/IP
Network
3-68 Registering a Security Policy
Select [Manual Settings] for <Auth./Encryption Algorithm>
→
specify the
authentication and encryption algorithm to apply to the IKE SA.
[SHA1] for <Authentication>: Select to set SHA1 (Secure Hash Algorithm 1) for the
authentication algorithm. 160-bit hash values are supported.
[MD5] for <Authentication>: Select to set MD5 (Message Digest Algorithm 5) for the
authentication algorithm. 128-bit hash values are supported.
[3DES-CBC] for <Encryption>: Select to set 3DES (Triple Data Encryption Standard) for the
encryption algorithm, and CBC (Cipher Block Chaining) for the encryption mode. 3DES
takes longer to process because it performs DES three times, but enables increased
encryption strength. CBC links the encryption result of the previous block with the next block
to make it harder to decipher the encryption.
[AES-CBC] for <Encryption>: Select to set AES (Advanced Encryption Standard) for the
encryption algorithm, and CBC for the encryption mode. AES supports encryption keys with
a key length of 128, 192, or 256 bits. As the supported key lengths are long, it enables
increased encryption strength. CBC links the encryption result of the previous block with the
next block to make it harder to decipher the encryption.
[Group1(762)] for <DH Group>: Select to set Group 1 for the DH (Diffie-Hellman) key
exchange method. In Group 1, 762-bit MODP (Modular Exponentiation) is supported.
[Group2(1024)] for <DH Group>: Select to set Group 2 for the DH key exchange method. In
Group 2, 1024-bit MODP is supported.
[Group14(2048)] for <DH Group>: Select to set Group 14 for the DH key exchange method.
In Group 14, 2048-bit MODP is supported.
Automatically Setting the Authentication and Encryption Algorithm:
Acesst 1.0 6251194