Item
Description
Encryption Type
Specifies the encryption type supported by the HP Jetdirect print server.
Key Version Number
Specify the key version number for the encryption keys associated with the principal
and password.
Clock Skew
A Kerberos installation uses clocks that are reasonably synchronized. Clock skew is a
measure of allowed differences between clocks during transactions. When the HP
Jetdirect print server checks time stamps of incoming packets from clients, the clock
skew specifies the time interval (in seconds) within which the HP Jetdirect print server
will accept a packet. If the time interval is exceeded, the packet will be discarded.
NOTE:
Timing differences between the HP Jetdirect print server and a
domain controller depends on the clock skew configuration on the domain
controller.
Time Sync Period
This parameter specifies the time interval (in minutes) that the HP Jetdirect print server
requests to synchronize its clock with a Simple Network Time Protocol (SNTP) time
server.
SNTP Server
If required, specify the Fully Qualified Domain Name (FQDN) or IP address of a Simple
Network Time Protocol (SNTP) time server. By default, the SNTP server is the server
used as the Key Distribution Center (KDC).
IKEv1 Phase 1 (Authentication)
Internet Key Exchange (IKE) is used to create Security Associations dynamically. Use this page to
configure SA parameters for authentication and to securely generate IPsec session keys for encryption
and authentication algorithms. Items on this page are described below.
Table 5-11
IKE Phase 1 (Authentication) page
Item
Description
Negotiation Mode
(Required) IKE provides two modes of negotiation during an exchange for keys and
security services to be used for a Security Association:
Main
: This mode features identity protection between the hosts and is slower but
secure.
Aggressive
: This mode uses half the message exchanges. It is faster, but less secure
than Main mode.
Cryptographic Parameters
Diffie-Hellman Groups
(Required) A Diffie-Hellman exchange allows a secret key and
security services to be securely exchanged between two hosts over an unprotected
network. A Diffie-Hellman group determines the parameters to use during a Diffie-
Hellman exchange. Multiple well-known Diffie-Hellman groups that will be used are
listed. To change the entries in the list, click
Edit
. Selecting all the groups will result in
a single negotiated group.
Encryption
and
Authentication
(Required) Select the encryption methods and strengths, and the authentication
methods to be used.
Selecting all the methods will result in a single negotiated method.
Security Association
SA Lifetime
: (Required) Specify the lifetime, in seconds, that the keys associated with
this Security Association will be valid.
Table 5-10
Kerberos Settings page (continued)
ENWW
HP Jetdirect IPsec/Firewall Wizard 109
Содержание 635n - JetDirect IPv6/IPsec Print Server
Страница 2: ......
Страница 3: ...HP Jetdirect Print Servers Administrator s Guide Firmware V 36 ...
Страница 10: ...viii ENWW ...
Страница 18: ...8 Chapter 1 Introducing the HP Jetdirect Print Server ENWW ...
Страница 26: ...16 Chapter 2 HP Software Solutions Summary ENWW ...
Страница 106: ...96 Chapter 4 Embedded Web Server V 36 xx ENWW ...
Страница 108: ...Figure 5 1 Firewall Policy page Figure 5 2 IPsec Policy page 98 Chapter 5 IPsec Firewall Configuration V 36 xx ENWW ...
Страница 136: ...126 Chapter 7 Troubleshooting the HP Jetdirect Print Server ENWW ...
Страница 162: ...152 Chapter 8 HP Jetdirect Configuration Pages ENWW ...
Страница 174: ...164 Appendix A LPD Printing ENWW ...
Страница 194: ...184 Appendix D Open Source Licensing Statements ENWW ...
Страница 200: ...190 Index ENWW ...
Страница 201: ......
Страница 202: ... 2007 Hewlett Packard Development Company L P www hp com ...