Table of Contents
Advertisement
Specifying a range of addresses Insert a hyphen between the addresses.
[Subnet Settings]
When manually specifying IPv4 address, you can express the range by using the subnet mask. Enter the
subnet mask using periods to delimit numbers (example:"255.255.255.240").
[Prefix Length]
Specifying the range of IPv6 addresses manually also allows you to specify the range using prefixes. Enter a
range between 0 and 128 as the prefix length.
[Local Port]/[Remote Port]
If you want to create separate policies for each protocol, such as HTTP or WSD, enter the appropriate port
number for the protocol to determine whether to use IPSec.
IPSec is not applied to the following packets
●
Loopback, multicast, and broadcast packets
●
IKE packets (using UDP on port 500)
●
ICMPv6 neighbor solicitation and neighbor advertisement packets
9
Specify the IKE Settings.
[IKE Mode]
The mode used for the key exchange protocol is displayed. The machine supports the main mode, not the
aggressive mode.
[Authentication Method]
Select [Pre-Shared Key Method] or [Digital Signature Method] for the method used when authenticating the
machine. You need to enable TLS for the Remote UI before selecting [Pre-Shared Key Method]. You need to
generate or install the key and certificate before selecting [Digital Signature Method].
Key and Certificate for TLS(P. 380)
[Valid for]
Specify how long a session lasts for IKE SA (ISAKMP SA). Enter the time in minutes.
[Authentication]/[Encryption]/[DH Group]
Select an algorithm from the drop-down list. Each algorithm is used in the key exchange.
Managing the Machine
Description
IPv6:
Delimit alphanumeric characters with colons.
394
Example
fe80::10
192.168.0.10-192.168.0.20
Configuring the
Advertisement
Table of Contents
