Xerox ColorQube 8580 System Administrator Manual page 64

Security
Configuring Internet Key Exchange Settings
IKE is a keying protocol that allows automatic negotiation and authentication, anti-replay services, and
CA support. It can also change encryption keys during an IPsec session. IKE is used as part of virtual
private networking.
IKE Phase 1 authenticates the IPsec peers and sets up a secure channel between the peers to enable IKE
exchanges. IKE Phase 2 negotiates IPsec SAs to set up the IPsec tunnel.
To configure IKE:
1. For IKE Phase 1, for Authentication, select an option.
− For X.509 Certificate, select an option.
− For Pre-shared Key, type a key phrase. This field cannot be blank and cannot contain special
characters.
2. Click Next.
3. For Authentication Transforms 1, 2, or 3, select at least one algorithm combination used during IKE
protocol negotiation.
4. To specify the key expiration time, for Key Lifetime, type a value in seconds or KB. The minimum
Key Lifetime value is 12 seconds or 2560 KB.
When a key reaches this lifetime, the Security Association (SA) is renegotiated and the key is
regenerated or refreshed.
Click Next.
5.
6. For IPsec Mode, select Transport Mode or Tunnel Mode.
7. If you select Tunnel, type the Remote Tunnel Address.
8. To configure at least one protocol, for IPsec Proposal Protocol 1, 2, and 3, select an option.
9. For Encryption and Hash Algorithms, select from options that correspond to the selected IPsec
Proposal Protocol.
10. For DH Group, select an option.
11. To specify the key expiration time, for Key Lifetime, type a value in seconds or KB. The minimum
Key Lifetime value is 12 seconds or 2560 KB.
12. Click Next.
13. Click Finish.
14. Click Apply.
Modifying or Deleting an IPsec Action
1. In CentreWare Internet Services, click Properties > Security > IPsec.
2. Click IPsec Actions.
To modify, click the name, modify as needed, then click Save Changes > Apply.
3.
4. To delete an action, for that action, select the check box, then click Delete Action.
®
64 Xerox ColorQube 8580/8880 Color Printer
System Administrator Guide