8.OPTION SETUPS
Setting up IP Security Function 301
8 OPTION SETUPS
6
Click [OK] to apply the change.
During the initialization of a network interface card, the use of a network is not available.
During the initialization “Please restart after waiting a few minutes.” appears on the COMMAND CENTER menu
and also “NETWORK INITIALIZING” appears on the touch panel of this equipment. The COMMAND CENTER
will be available again when these messages disappear.
When you use a certificate for IKE authentication to enable IPsec communication, an IPsec Certificate must be
installed in this equipment. For details, see the following page:
P.308 “Installing IPsec certificate”
If the keys for IPsec communication are leaked out or any security violation occurs, you can manually delete (flush)
the current session with a flush connection function and start a new session. When you want to delete the
information of SAD (Security Association Database) for any reason, you can delete it in the same way. For details,
see the following page:
P.314 “Flushing out IPsec sessions”
Registering policies
To enable data encryption communication using IPsec, you need to create IPsec policies first according to your system
environment. You can create policies by combining IKE key exchange process setting, filtering setting for registration of
addresses from which you permit or block access, and ESP or AH settings to be used as a security protocol.
P.301 “Registering or modifying policies”
P.307 “Deleting policies”
Registering or modifying policies
Define policies required for IPsec. First create a filter and an IKE key according to your IPsec environment, and then
create profiles by combining them. Then select a specific profile among those you have created and make a “policy” from
the profile.
Registering or modifying IPsec policies
1
Select [Filter] on the IPsec menu, and then click [Add]. To modify a filter already
registered, click the link for the desired filter name in the list.
The Add Filter / Modify Filter page is displayed.
To Next Page
Loading...
