Oki ES9455, Руководство по установке программного обеспечения

Страница: 184 / 386

8 [Administration] Tab Page
182 [Setup] Item List
4 IKE Key Name Enter the name of the IKE key. You can enter up to 63 alphanumerical characters and
symbols other than #, %, &, +, \ (backslash), ' (apostrophe), ; (semicolon), , (comma),
", and =.
Up to 30 IKE keys can be created.
5 IKE Type:
IKEv1 (Main Mode) Select this to use IKEv1.
Certificate — Select this to use an electronic certificate. To select this, IPsec
certificate must be installed in this equipment in advance.
Preshared Key — Select this to perform authentication by sharing key information
with the recipient of the communication in advance. Enter key information to be shared
in the entry box. You can enter up to 128 alphanumerical characters and symbols
other than &, <, and ".
If you register more than one Preshared Key for IKEv1, only the one that you
registered last will be valid.
IKEv2 Select this to use IKEv2.
Certificate — Select this to use an electronic certificate. To select this, IPsec
certificate must be installed in this equipment in advance.
Preshared Key — Select this to perform authentication by sharing key information
with the recipient of the communication in advance. Enter key information to be shared
in the entry box. You can enter up to 128 alphanumerical characters and symbols
other than &, <, and ".
y Local ID — Select among IP Address, FQDN, Email and Key-ID. When you have
selected the Key-ID, enter the value to the corresponding item. You can enter up
to 128 alphanumerical characters and symbols other than &, <, and ".
y Remote ID — Select among IP Address, FQDN, Email and Key-ID. When you
selected FQDN, Email or Key-ID, enter a value corresponding to the item you
selected. When you selected Key-ID, enter the corresponding value. You can
enter up to 128 alphanumerical characters and symbols except the following: & <
". When you selected Email, you can enter up to 192 alphanumerical characters.
When you selected FQDN, you can enter up to 255 alphanumerical characters
including hyphen (-) and period (.). However, neither hyphen (-) nor period (.) can
be used as first or last character.
6 Session Key Settings:
Generate a new key after Enter the interval between generating key information for IPsec communications in
seconds. Set the interval period for regenerating key information for IPsec
communication from 60 seconds to 604,800 seconds (7 days).
Enable PFS — Select the check box when using the PFS (Perfect Forward Secrecy)
function in IKE.
7 FilterIKE Transforms:
Integrity Select the authentication algorithm to be used in IKE.
y SHA1 — Select this to use SHA1.
y MD5 — Select this to use MD5.
y AES-XCBC-MAC — Select this to use AES-XCBC-MAC.
Encryption Select the encryption algorithm to be used in IKE.
y AES-256-CBC — Select this to use AES-CBC (256 bits).
y AES-192-CBC — Select this to use AES-CBC (192 bits).
y AES-128-CBC — Select this to use AES-CBC (128 bits).
y AES-CTR — Select this to use AES-CTR.
y 3DES-CBC — Select this to use 3DES-CBC.
y DES-CBC — Select this to use DES-CBC.
Diffie-Hellman algorithm Select the Diffie-Hellman group to be used in IKE.
y MODP 768 (Group 1) — Select this to use the MODP group in 768 bits.
y MODP 1024 (Group 2) — Select this to use the MODP group in 1024 bits.
y MODP 2048 (Group 14) — Select this to use the MODP group in 2048 bits.
y Elliptic Curve P-256 (Group 19) — Select this to use Elliptic Curve P-256.
y Elliptic Curve P-384 (Group 20) — Select this to use Elliptic Curve P-384.
y Elliptic Curve P-521 (Group 21) — Select this to use Elliptic Curve P-521.
Item name Description