Security
82
ColorQube 9301/9302/9303 Multifunction Printer
System Administrator Guide
Configuring Manual Keying Settings
Manual Keying is used when client systems either do not support IKE or are not configured for IKE.
1.
Under IPsec Mode, select
Transport Mode
or
Tunnel Mode
.
Note:
Transport mode only encrypts the IP payload, whereas Tunnel mode encrypts the IP header
and the IP payload. Tunnel mode provides protection for an entire IP packet by treating it as an
Authentication Header (AH), or Encapsulating Security Payload (ESP).
2.
If you selected Tunnel Mode, under Enable Security End Point Address, select the address type.
Options are
Disabled
,
IPv4 Address
, or
IPv6 Address
.
3.
Under IPsec Security, select
ESP
,
AH
, or
BOTH
.
4.
In the Security Parameter Index: IN field, type a 32-bit number larger than 256 that identifies the
inbound Security Association (SA).
5.
In the Security Parameter Index: OUT field, type a 32-bit number larger than 256 that identifies the
outbound Security Association (SA).
6.
Under Hash, select from the following:
SHA1
None
7.
Under Enter Keys as, select
ASCII format
or
Hexadecimal number
.
8.
Type a 20-character ASCII key, or 40-character Hexadecimal key for the following:
Hash Key: IN
Hash Key: OUT
9.
If you selected ESP or BOTH for the IPsec Security type, select one or more of the following
Encryption types:
Note:
If the IPsec Security type is set to AH, the Encryption type options do not appear.
AES
3DES
None
10.
Type a 24-character ASCII key, or 48-character Hexadecimal key for the following:
Encryption Key: IN
Encryption Key: OUT
11.
Click
Save
to apply the new settings or
Undo
to retain the previous settings.
Configuring Internet Key Exchange Settings
IKE is a keying protocol that allows automatic negotiation and authentication, anti-replay services, and
CA support. It can also change encryption keys during an IPsec session. IKE is used as part of virtual
private networking.
IKE Phase 1 authenticates the IPsec peers and sets up a secure channel between the peers to enable IKE
exchanges. IKE Phase 2 negotiates IPsec SAs to set up the IPsec tunnel.
