Toshiba e-STUDIO 332s User Manual Advanced page 151

On the [Key Exchange Security
13
Methods] window, click [Add].
Specify [Integrity algorithm],
14
[Encryption algorithm], and [Diffie-
Hellman group].
Note
Select the same value that was specified in [IKE
Encryption Algorithm], [IKE Hush Algorithm],
and [Diffie-Hellman group] at the time of
configuration for "Phase1 Proposal" in
Your Machine" P. 150.
Click [OK].
15
On the [Key Exchange Security
16
Methods] window, click [OK].
On the [Key Exchange Settings]
17
window, click [OK].
On the IP security policy properties
18
window, select the [Rules] tab.
Click [Add].
19
On the [Security Rule Wizard], click
20
[Next].
On the [Tunnel Endpoint] screen,
21
select [This rule does not specify a
tunnel and then click [Next].
On the [Network Type] screen, select
22
[All Network Connections] and then
click [Next].
On the [IP Filter List] screen, click
23
[Add].
On the [IP Filter List] window, click
24
[Add].
On the [IP Filter Wizard], click [Next].
25
On the [IP Filter Description and
26
Mirrored Property] screen, click
[Next].
On the [IP Traffic Source] screen, click
27
[Next].
On the [IP Traffic Destination] screen,
28
click [Next].
On the [IP Protocol Type] screen, click
29
[Next].
Click [Finish].
30
On the [IP Filter List] window, click
31
[OK].
32
33
34
35
"Configuring
36
37
38
39
40
41
42
43
44
45
46
- 151 -
Changing Network Settings From the Web Page
On the [Security Rule Wizard], select
the new IP filter from the list and then
click [Next].
On the [Filter Action] screen, click
[Add].
On the [Filter Action Wizard], click
[Next].
On the [Filter Action Name] screen,
enter a [Name] and a [Description]
and then click [Next].
On the [Filter Action General Options]
screen, select [Negotiate security] and
then click [Next].
On the [Communicating with
computers that do not support
IPsec] screen, select [Do not allow
unsecured communication] and then
click [Next].
On the [IP Traffic Security] screen,
select[Custom] and then click
[Settings].
On the [Custom Security Method
Settings] window, configure the settings
and then click [OK].
Note
Configure the AH and ESP settings to the same
settings as configured for the "Phase2 Proposal" in
"Configuring Your Machine" P.
On the [IP Traffic Security] screen,
click [Next].
Select [Edit Properties] and then click
[Finish].
On the filter action properties window,
select [Use session key perfect
forward secrecy (PFS)] if you want to
enable Key PFS.
Select [Accept unsecured
communication, but always respond
using IPsec] if you perform IPSec
communication by the IPv6 global
address.
Click [OK].
Select the new filter action and then click
[Next].
On the [Authentication Method]
screen, select the authentication method
you want and then click [Next].
8
150.