Configuring The Ipsec Settings - Canon imagerunner advance C5550i User Manual

Hide thumbs Also See for imagerunner advance C5550i:

Table of Contents

Configuring the IPSec Settings

By using IPSec, you can prevent third parties from intercepting or tampering with IP packets transported over the IP

network. Because IPSec adds security functions to IP, a basic protocol suite used for the Internet, it can provide

security that is independent of applications or network configuration. To perform IPSec communication with this

machine, you must configure settings such as the application parameters and the algorithm for authentication and

encryption. Administrator or NetworkAdmin privileges are required in order to configure these settings. Check the

system requirements before performing the procedure below.

Communication mode

This machine only supports transport mode for IPSec communication. As a result, authentication and

encryption is only applied to the data portions of IP packets.

Key exchange protocol

This machine supports Internet Key Exchange version 1 (IKEv1) for exchanging keys based on the Internet

Security Association and Key Management Protocol (ISAKMP). For the authentication method, set either the pre-

shared key method or the digital signature method.

When setting the pre-shared key method, you need to decide on a passphrase (pre-shared key) in advance,

which is used between the machine and the IPSec communication peer.

When setting the digital signature method, use a CA certificate and a PKCS#12 format key and certificate to

perform mutual authentication between the machine and the IPSec communication peer. For more

information on registering new CA certificates or keys/certificates, see

for Network Communication(P. 666) . Note that SNTP must be configured for the machine before it uses

this method.

Making SNTP Settings(P. 57)

Press <Preferences>

Set <Use IPSec> to <On>, and press <Register>.

Managing the Machine

Specifications(P. 1029)

Registering a Key and Certificate

<IPSec Settings>.