Oki B721 User Manual page 118

Network Setting Items
„ IPSec
Web browser
IPSec
IP Address 1-50
4
IKE Encryption Algorithm
IKE Hash Algorithm
Diffie-Hellman Group
LifeTime
Pre-shared Key
Key PFS
Diffie-Hellman Group when Key
PFS Enable
ESP
ESP Encryption Algorithm
ESP Authentication Algorithm
AH
AH Authentication Algorithm
LifeTime
Item
Configuration
Network
Tool
Card Setup
(Network
Setting Plug-in)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 118 -
Shaded text indicates the factory default setting.
Setting
(Mac)
- ENABLE Set whether to use IPSec.
DISABLE
- 0.0.0.0 Specify the host address allowed to
communicate by IPSec.
● Use one-byte characters
● Use one-byte alphanumeric
● IPv6 link-local address is not
- 3DES-CBC Set the IKE encryption method.
DES-CBC
- SHA-1 Set the IKE hash method.
MD5
- Group1 Set the Diffie-Hellman group used in
Phase1 Proposal.
Group2
- 600 Set the lifetime of ISAKMP SA.
Normally, use the factory default
86400
setting.
28800
- (NULL) Set the pre-shared key.
- KEYPFS Set whether to use Key PFS (Perfect
Forward Secrecy).
NOPFS
- Group2 Set the Diffie-Hellman group used
for Key PFS.
Group1
None
- Enable Set whether to use ESP
(Encapsulating Security Payload).
Disable
- 3DES-CBC Set the encryption algorithm for ESP.
DES-CBC
- SHA-1 Set the authentication algorithm for
ESP.
MD5
OFF
- Enable Set whether to use AH
(Authentication Header).
Disable
- SHA-1 Set the encryption algorithm for AH.
MD5
- 600 Set the lifetime of IPSec SA.
Normally, use the factory default
3600
setting.
86400
Description
separated by a dot for an IPv4
address.
characters separated by a colon
for an IPv6 global address.
supported.