17. Select the authentication method, and then click [Next].
If you select "Certificate" for authentication method in Encryption Key Auto Exchange Settings on the
machine, specify the device certificate. If you select "PSK", enter the same PSK text specified on the
machine with the pre-shared key.
18. Click [Add] in the IP Filter List.
19. In [Name], enter an IP Filter name, and then click [Add].
The IP Filter Wizard appears.
20. Click [Next].
21. Select "My IP Address" in "Source address", and then click [Next].
22. Select "A specific IP Address" in "Destination address", enter the machine's IP address, and
then click [Next].
23. Select the protocol type for IPsec, and then click [Next].
24. Click [Finish].
25. Click [OK].
26. Select the IP filter that was just created, and then click [Next].
27. Select the IPsec security filter, and then click [Edit].
28. In the "Security Methods" tab, check "Negotiate security" and then click [Add].
29. Select "Custom" and click [Settings].
30. In "Integrity algorithm", select the authentication algorithm that was specified on the
machine in Encryption Key Auto Exchange Settings Phase 2.
31. In "Encryption algorithm", select the encryption algorithm that specified on the machine in
Encryption Key Auto Exchange Settings Phase 2.
32. In Session key settings, select "Generate a new key every", and enter the validity period (in
seconds) that was specified on the machine in Encryption Key Auto Exchange Settings Phase
2.
33. Click [OK] three times.
34. Click [Next].
35. Click [Finish].
If you are using IPv6 under Windows Vista or a newer version of Windows, you must repeat this
procedure from step 13 and specify ICMPv6 as an exception. When you reach step 23, select [58]
as the protocol number for the "Other" target protocol type, and then set [Negotiate security] to
[Permit].
36. Click [OK].
37. Click [Close].
The new IP security policy (IPsec settings) is specified.
Transmission Using IPsec
209
To Next Page
Loading...
