Canon MF515 Series User Manual page 584

● The machine cannot use both IPSec and DHCPv6 at the same time.
● IPSec is unavailable in networks in which NAT or IP masquerade is implemented.
Using IPSec with IP address filter
● IP address filter settings are applied before the IPSec policies.
Rules(P. 542)
Configuring IPSec Settings
Before using IPSec for encrypted communication, you need to register security policies (SP). A security policy consists
of the groups of settings described below. Up to 10 policies can be registered. After registering policies, specify the
order in which they are applied.
Selector
Selector defines conditions for IP packets to apply IPSec communication. Selectable conditions include IP
addresses and port numbers of the machine and the devices to communicate with.
IKE
IKE configures the IKEv1 that is used for key exchange protocol. Note that instructions vary depending on the
authentication method selected.
[Pre-Shared Key Method]
A key of up to 24 alphanumeric characters can be shared with the other devices. Enable TLS for the Remote UI
before specifying this authentication method (
UI(P. 570) ).
[Digital Signature Method]
The machine and the other devices authenticate each other by mutually verifying their digital signatures.
Generate or install the key pair beforehand (
Certificates(P. 588) ).
AH/ESP
Specify the settings for AH/ESP, which is added to packets during IPSec communication. AH and ESP can be used
at the same time. You can also select whether or not to enable PFS for tighter security.
1
Start the Remote UI and log on in System Manager Mode.
UI(P. 606)
2
Click [Settings/Registration].
3
Click [Security Settings]
Security
Enabling TLS Encrypted Communication for the Remote
Configuring Settings for Key Pairs and Digital
[IPSec Settings].
575
Specifying IP Addresses for Firewall
Starting Remote