Item
Description
Aggressive: This mode uses half the message exchanges. It is faster, but less secure
than Main mode.
Security Methods
(Required) Select the Encryption methods and strengths and Hash methods to be used.
Selecting all the methods will result in a single negotiated method.
Perfect Forward Secrecy
When secret keys are periodically replaced, Perfect Forward Secrecy (PFS) indicates
that the new keys are independently derived and unrelated to the prior keys. This helps
to ensure that data protected by the new keys is secure. While PFS provides additional
security, it requires additional processing overhead.
If PFS is desired, enable the following:
Identity Perfect Forward Secrecy (Master PFS): Enables PFS for identity protection.
Key Perfect Forward Secrecy (Session PFS): Enables PFS for key protection.
Diffie-Hellman Groups: (For Session PFS only) Select one or more Diffie-Hellman
groups to use during the key exchange.
Replay detection
IPsec protocols support anti-replay services. Enable or disable the IPsec anti-replay
algorithm.
IKE Retries
Specify the number of times that IKE protocols are to be retried if a failure occurs. Enter
a value from 0 to 20.
IKE Retransmit Interval
Specify the time (in seconds) between successive IKE protocol retries if a failure occurs.
Enter a value from 0 to 5.
IPsec Protocols
After authentication, this page is used to specify IPsec protocols and associated encryption to use for
Security Associations in this rule.
Item
Description
ESP
Use IPsec Encapsulating Security Payload (ESP) protocol for IP packets. ESP headers
are inserted in packets to ensure privacy and integrity of packet contents. Select among
the supported encryption methods/strengths and Hash methods to be used for data
protection.
AH
Use IPsec Authentication Header (AH) protocol for IP packets. AH headers are inserted
in packets to protect integrity of packet contents through cryptographic checksums.
Select among the supported Hash methods.
CAUTION
The use of IPsec AH may not function properly in environments
that use Network Address Translation (NAT).
Encapsulation Type
Specify how the IPsec protocols selected (ESP or AH) will be encapsulated:
●
Transport: Only the user data in each IP packet is protected, the IP packet header
is not protected.
●
Tunnel: All packet fields are protected, including the IP packet header.
SA Lifetime
Specify the Security Association lifetime, either in seconds or in the number of Kbytes.
Within the limits specified, shorter lifetimes will provide improved security depending on
the frequency of SA use.
Table 5-8
IKE Phase 1 (Authentication) page (continued)
102
Chapter 5 IPsec/Firewall Configuration (V.34.xx)
ENWW
Содержание Jetdirect J7974E
Страница 2: ......
Страница 3: ...HP Jetdirect Print Servers Administrator s Guide ...
Страница 10: ...viii ENWW ...
Страница 18: ...8 Chapter 1 Introducing the HP Jetdirect Print Server ENWW ...
Страница 26: ...16 Chapter 2 HP Software Solutions Summary ENWW ...
Страница 68: ...58 Chapter 3 TCP IP Configuration ENWW ...
Страница 104: ...Figure 5 1 Firewall Policy page Figure 5 2 IPsec Policy page 94 Chapter 5 IPsec Firewall Configuration V 34 xx ENWW ...
Страница 114: ...104 Chapter 5 IPsec Firewall Configuration V 34 xx ENWW ...
Страница 162: ...152 Appendix A LPD Printing ENWW ...
Страница 178: ...168 Appendix D Open Source Licensing Statements ENWW ...
Страница 184: ...174 Index ENWW ...
Страница 185: ......
Страница 186: ... 2006 Hewlett Packard Development Company L P www hp com ...