Canon iR3245, Сетевое руководство

Страница: 121 / 288

3
Using
a
TCP/IP
Network
Registering a Security Policy 3-69
Select [Auto] for <Auth./Encryption Algorithm>.
The priority for the authentication and encryption algorithms is indicated below.
Priority Authentication
Algorithm
Encryption Algorithm DH Key Exchange
Method
1 SHA1
AES (128-bit)
Group 2
2 MD5
3 SHA1
AES (192-bit)
4 MD5
5 SHA1
AES (256-bit)
6 MD5
7
SHA1
3DES
8
MD5
10. On the Register screen, press [IPSec Network Settings]
→
specify the
SA validation time and validation type, and PFS (Perfect Forward
Security).
[Time] and [Size] for <Validity>: Specify the validation period for the generated IKE SA and
IPSec SA. In IPSec communications to which a valid security policy is applied, packets can
be sent and received without conducting key exchange negotiations. Make sure to set either
[Time] and [Size]. If you set both, the SA becomes invalid when the value set for either
[Time] or [Size] is reached.
[On] for <PFS>: If you enable the PFS function, you can increase the confidentiality because
even if one encryption key is exposed to a third party, the problem does not spread to other
encryption keys.
Acesst 1.0 6251194