Telnet Setting Commands - Ricoh MP 2553 Series Read Me First

5. Enhanced Network Security
40. Select the filter action that was just created, and then click [Next].
If you set "Encryption Key Auto Exchange Settings" to "Authentication and High Level Encryption",
select the IP filter action that was just created, click [Edit], and then check "Use session key perfect
forward secrecy (PFS)" on the filter action properties dialog box. If using PFS in Windows, the PFS
group number used in phase 2 is automatically negotiated in phase 1 from the Diffie-Hellman
group number (set in step 11). Consequently, if you change the security level specified automatic
settings on the machine and "User Setting" appears, you must set the same the group number for
"Phase 1 Diffie-Hellman Group" and "Phase 2 PFS" on the machine to establish IPsec transmission.
41. Select the authentication method, and then click [Next]. For Windows XP, go to Step 42.
If you select "Certificate" for authentication method in "Encryption Key Auto Exchange Settings" on
the machine, specify the device certificate. If you select "PSK", enter the same PSK text specified on
the machine with the pre-shared key.
42. Click [Finish].
43. Click [OK].
If you are using Windows XP, click [Close].
The new IP security policy (IPsec settings) is specified.
44. Select the security policy that was just created, right-click, and then click [Assign].
The computer's IPsec settings are enabled.
• To disable the computer's IPsec settings, select the security policy, right-click, and then click [Un-
assign].

telnet Setting Commands

You can use telnet to confirm IPsec settings and make setting changes. This section explains telnet
commands for IPsec. The default user name for logging into telnet is "admin". The password is not
configured by default. For details about logging in to telnet and telnet operations, see "Remote
Maintenance Using telnet", Connecting the Machine/ System Settings.
• If you are using a certificate as the authentication method in encryption key auto exchange settings
(IKE), install the certificate using Web Image Monitor. A certificate cannot be installed using telnet.
ipsec
To display IPsec related settings information, use the "ipsec" command.
Display current settings
msh> ipsec
158