Managing Actions - Xerox ColorQube 8580 System Administrator Manual

Managing Actions

Use actions to more specifically manage how IPsec controls dependent protocols.
Creating an IPsec Action
You can create IPsec actions with a manual keying method or an Internet Exchange Key (IKE). Use IKE
to set up a Security Association (SA) in the IPsec protocol suite. Manual Keying is used when client
systems either do not support IKE or are not configured for IKE.
To create an IPsec action:
1. In CentreWare Internet Services, click Properties > Security.
Click IPsec.
2.
3. Click IPsec Actions.
Click Create Action.
4.
5. Type a name and description.
6. For Keying Method, select an option.
Configuring Manual Keying Settings
For manual keying, you can select an IPsec transport or tunnel mode. Transport mode only encrypts the
IP payload, whereas Tunnel mode encrypts the IP header and the IP payload. Tunnel mode provides
protection for an entire IP packet by treating it as an Authentication Header (AH), or Encapsulating
Security Payload (ESP).
1. For IPsec Mode, select Transport Mode or Tunnel Mode.
2. If you select Tunnel, type the Remote Tunnel Address.
3. For IPsec Proposal Protocol, select an option.
4. For Encryption and Hash Algorithms, select from options that correspond to the selected IPsec
Proposal Protocol.
5. For the inbound and outbound SPI fields, type a 32-bit number greater than 256.
6. For the inbound and outbound keys, type key values that correspond to the selected protocol and
algorithms.
− AES-CBC is 32 hexadecimal characters long.
− 3DEC is 48 hexadecimal characters long.
− DEC is 16 hexadecimal characters long.
− SHA1 is 40 hexadecimal characters long.
− MD5 is 32 hexadecimal characters long.
7. Click Next.
8. Click Finish.
Click Apply.
9.
®
Xerox ColorQube 8580/8880 Color Printer
System Administrator Guide
Security
63