Canon imagerunner advance C5550i User Manual page 623

Hide thumbs Also See for imagerunner advance C5550i:

Table of Contents

<Pre-Shared Key Method>

Select either <Auto> or <Manual Settings> to set how to specify the authentication and encryption

algorithm for IKE phase 1. If you select <Auto>, an algorithm that can be used by both this machine

and the communication peer is set automatically. If you want to specify a particular algorithm, select

<Manual Settings> and configure the settings below.

Configure the IPSec communication settings.

Press <IPSec Network Settings>.

Configure the necessary settings.

Set a period of validity for the generated IKE SA and IPSec SA. Make sure to set either <Time> or

<Size>. If you set both, the period of validity ends when either value is reached.

If you set the Perfect Forward Secrecy (PFS) function to <On>, the secrecy of the encryption key is

increased, but the communication speed is slower. In addition, the PFS function must be enabled on

the communication peer device.

Select either <Auto> or <Manual Settings> to set how to specify the authentication and encryption

algorithm for IKE phase 2. If you select <Auto>, the ESP authentication and encryption algorithm is set

automatically. If you want to specify a particular authentication method, press <Manual Settings> and

select one of the authentication methods below.

Managing the Machine

Set the same passphrase (pre-shared key) that is set for the communication peer.

Press <Shared Key>, enter the character string to use as the shared key, and

Set the key and certificate to use for mutual authentication with the

communication peer. Press <Key and Certificate>, select the key and certificate to

use, and press <Set as Default Key>

Select the hash algorithm.

Select the encryption algorithm.

Select the group for the Diffie-Hellman key exchange method to set the key

Authentication and encryption are both performed. Select the algorithm for <ESP

Authentication> and <ESP Encryption>. Select <NULL> if you do not want to set

the authentication or encryption algorithm.