a prefix (IPv6
When manually specifying IPv4 address, you can express the range by using the subnet mask. Enter the subnet mask using
periods to delimit numbers (example:"255.255.255.240").
[Local Port]/[Remote Port]
If you want to create separate policies for each protocol, such as HTTP or SMTP, enter the appropriate port number for the
protocol to determine whether to use IPSec.
IPSec is not applied to the following packets
Loopback, multicast, and broadcast packets
IKE packets (using UDP on port 500)
ICMPv6 neighbor solicitation and neighbor advertisement packets
Specify the IKE Settings.
The mode used for the key exchange protocol is displayed. The machine supports the main mode, not the aggressive mode.
Select [Pre-Shared Key Method] or [Digital Signature Method] for the method used when authenticating the machine. You need to
enable SSL for the Remote UI before selecting [Pre-Shared Key Method] (
Remote UI). You need to generate or install a key pair before selecting [Digital Signature Method] (
Key Pairs and Digital Certificates).
Specify how long a session lasts for IKE SA (ISAKMP SA). Enter the time in minutes.
Select an algorithm from the drop-down list. Each algorithm is used in the key exchange.
Using a pre-shared key for authentication
Click the [Pre-Shared Key Method] radio button for [Authentication Method] and then click [Shared Key
Enter up to 24 alphanumeric characters for the pre-shared key and click [OK].
Downloaded from ManualsPrinter.com Manuals
Enter the address, followed by a slash and a number indicating the prefix
Select the hash algorithm.
Select the encryption algorithm.
Select the Diffie-Hellman group, which determines the key strength.
Enabling SSL Encrypted Communication for the
Configuring Settings for