Loading ...
Loading ...
Loading ...
[Authentication]/[Encryption]/[DH Group]
Select an algorithm fr
om the drop-down list. Each algorithm is used in the key exchange.
[Authentication] Select the hash algorithm.
[Encryption] Select the encryption algorithm.
[DH Group] Select the Die-Hellman gr
oup, which determines the key strength.
Authenticating a machine using a pre-shared key
1
Click the [Pre-Shared Key Method] radio button for [Authentication Method] and then click [Shared Key
Settings].
2
Enter alphanumeric characters for the pre-shared key and click [OK].
3
Specify the [Valid for] and [Authentication]/[Encryption]/[DH Group] settings.
Authenticating a machine using digital signature method
1
Click the [Digital Signature Method] radio button for [Authentication Method] and then click [Key and
Certicate].
2
Click [Register Default Key] on the right of the key and certicate you want to use.
Viewing details of a certicate
● Y
ou can check the details of the certicate or verify the certicate by clicking the corresponding text
link under [Key Name], or the certicate icon.
3
Specify the [Valid for] and [Authentication]/[Encryption]/[DH Group] settings.
10
Specify the IPSec Network Settings.
[Use PFS]
Select the check bo
x to enable Perfect Forward Secrecy (PFS) for IPSec session keys. Enabling PFS enhances
the security while increasing the load on the communication. Make sure that PFS is also enabled for the other
devices.
[Specify by Time]/[Specify by Size]
Set the conditions for terminating a session for IPSec SA. IPSec SA is used as a communication tunnel. Select
either or both of the check boxes as necessary. If both check boxes are selected, the IPSec SA session is
terminated when either of the conditions has been satised.
Managing the Machine
223
Loading ...
Loading ...
Loading ...