IPsec enabled IPsec disabled
Access control disabled
Encryption between the print/
scan system and IPsec stations
is activated.
All stations can communicate
with the system.
The system can communicate
with all stations.
The communication is encryp-
ted ONLY with the stations con-
figured as IPsec stations.
No filtering. No encryption.
IPsec parameters in the Océ Express WebTools
The following IPsec parameters are available on the Océ Express WebTools - Configuration -
Connectivity tab, Network security section:
Enable and configure the parameters for each required station.
The parameters can be different for each different workstation:
- the IP address
- the preshared key (keep the generic default one or set a custom one)
You can define a default preshared key that will be used for all the IPsec stations connected to the
print/scan system.
NOTE
The following IPsec parameters cannot be changed:
• IKE Diffie-Hellman group : 2 then 1
• IKE SA lifetime : 28800 s
• IKE security method : 3DES then MD5
• IKE hash : SHA1 then MD5
• ESP encryption : 3DESthen DES
• ESP hash : SHA1 then MD5 then None
• AH hash : SHA1 the MD5
• Encapsulation type : Transport
• Protocol SA lifetime : 3600 s
Configure the IPsec settings on the Océ controller
Before you begin
You must be logged as a System Administrator or a Power user.
Activate and configure IPsec on the system controller
Procedure
1.
Open a web browser and enter the system URL: https://<hostname>, to open the Océ Express
WebTools
2.
Open the 'Configuration' - 'Connectivity' page
Configure the IPsec settings on the Océ controller
Chapter 5 - Security on Océ ColorWave 550/600/650 (and Poster Printer)
285
To Next Page
Loading...
