Item Description
Encryption Type Specifies the encryption type supported by the HP Jetdirect print server.
Key Version Number Specify the key version number for the encryption keys associated with the principal
and password.
Clock Skew A Kerberos installation uses clocks that are reasonably synchronized. Clock skew is a
measure of allowed differences between clocks during transactions. When the HP
Jetdirect print server checks time stamps of incoming packets from clients, the clock
skew specifies the time interval (in seconds) within which the HP Jetdirect print server
will accept a packet. If the time interval is exceeded, the packet will be discarded.
NOTE: Timing differences between the HP Jetdirect print server and a
domain controller depends on the clock skew configuration on the domain
controller.
Time Sync Period This parameter specifies the time interval (in minutes) that the HP Jetdirect print server
requests to synchronize its clock with a Simple Network Time Protocol (SNTP) time
server.
SNTP Server If required, specify the Fully Qualified Domain Name (FQDN) or IP address of a Simple
Network Time Protocol (SNTP) time server. By default, the SNTP server is the server
used as the Key Distribution Center (KDC).
IKEv1 Phase 1 (Authentication)
Internet Key Exchange (IKE) is used to create Security Associations dynamically. Use this page to
configure SA parameters for authentication and to securely generate IPsec session keys for encryption
and authentication algorithms. Items on this page are described below.
Table 5-11 IKE Phase 1 (Authentication) page
Item Description
Negotiation Mode (Required) IKE provides two modes of negotiation during an exchange for keys and
security services to be used for a Security Association:
Main: This mode features identity protection between the hosts and is slower but
secure.
Aggressive: This mode uses half the message exchanges. It is faster, but less secure
than Main mode.
Cryptographic Parameters Diffie-Hellman Groups (Required) A Diffie-Hellman exchange allows a secret key and
security services to be securely exchanged between two hosts over an unprotected
network. A Diffie-Hellman group determines the parameters to use during a Diffie-
Hellman exchange. Multiple well-known Diffie-Hellman groups that will be used are
listed. To change the entries in the list, click Edit. Selecting all the groups will result in
a single negotiated group.
Encryption and Authentication (Required) Select the encryption methods and strengths, and the authentication
methods to be used.
Selecting all the methods will result in a single negotiated method.
Security Association
SA Lifetime: (Required) Specify the lifetime, in seconds, that the keys associated with
this Security Association will be valid.
Table 5-10 Kerberos Settings page (continued)
ENWW HP Jetdirect IPsec/Firewall Wizard 109
To Next Page
Loading...
Need help?
General
