PageScope Web Connection

Admin Mode

TCP/IP Setting
  >IPsec Setting
    >IKEv1 Setting
    >IKEv2 Setting
    >SA
    >Delete SA
    >Peer
    >Delete Destination
    >Protocol Setting
    >Delete Protocol Setting
  >Enable IPsec
    >IPsec Policy
    >Delete IPsec Policy
  >Check Communication
    >Communication Error Details

Top of Screen Description
Top Page

IKEv1 Setting
 Allows you to configure IKEv1 settings.

Encryption Algorithm Select the Encryption Algorithm that is used to create the control tunnel.
DES-CBC Check to enable DES-CBC as the encryption algorithm.
3DES-CBC Check to enable 3DES-CBC as the encryption algorithm.
AES-CBC Check to enable AES-CBC as the encryption algorithm.
Key Length Select key length for AES-CBC encryption algorithm.
Authentication Algorithm Select the Authentication Algorithm that is used to create the control tunnel.
MD5 Check to enable MD5 as the authentication algorithm.
SHA-1 Check to enable SHA-1 as the authentication algorithm.
SHA-2 Check to enable SHA-2 as the authentication algorithm.
Key Length Select key length for SHA-2 authentication algorithm.
Key Validity Period Select encryption key validity period.
Diffie-Hellman Group Select the Diffie-Hellman group.
Negotiation Mode Select Negotiation Mode.

Back


IKEv2 Setting
 Allows you to configure IKEv2 settings.

Encryption Algorithm Select the Encryption Algorithm that is used to create the control tunnel.
DES-CBC Check to enable DES-CBC as the encryption algorithm.
3DES-CBC Check to enable 3DES-CBC as the encryption algorithm.
AES-CBC Check to enable AES-CBC as the encryption algorithm.
Key Length Select key length for AES-CBC encryption algorithm.
Authentication Algorithm Select the Authentication Algorithm that is used to create the control tunnel.
MD5 Check to enable MD5 as the authentication algorithm.
SHA-1 Check to enable SHA-1 as the authentication algorithm.
SHA-2 Check to enable SHA-2 as the authentication algorithm.
Key Length Select key length for SHA-2 authentication algorithm.
AES-XCBC Check to enable AES-XCBC as the authentication algorithm.
Key Validity Period Select encryption key validity period.
Diffie-Hellman Group Select the Diffie-Hellman group.
Priority1 Select the Diffie-Hellman group that should be assigned Priority 1.
Priority2 Select the Diffie-Hellman group that should be assigned Priority 2.
Priority3 Select the Diffie-Hellman group that should be assigned Priority 3.
Priority4 Select the Diffie-Hellman group that should be assigned Priority 4.

Back


SA
 Set the parameters that are used during actual encrypted communication. Set the security protocol, encryption algorithm, and authentication algorithm.

Name Allows you to set the SA name.
Encapsulation Mode Allows you to set the SA Encapsulation Mode.
Security Protocol Select Security Protocol.
Key Exchange Method Allows you to set the Key Exchange method.
Lifetime After Establishing SA Establishing SA Enter the validity period of the common key used for communication encryption. A new key will be generated when the validity period expires, ensuring security.
IKE Setting IKE is the process that safely generates the common key used for encryption of communication between the machine and computer. Configure the settings that are required for the common key generation process. Set the encryption algorithm and the authentication algorithm.
Authentication Method Select Authentication Method.
ESN Select ENABLE to enable ESN. Select DISABLE to disable ESN.
Replay Detection Select ENABLE to enable Replay Detection. Select DISABLE to disable Replay Detection.
ESP Encryption Algorithm Select the ESP encryption algorithm. Set this when "ESP" is selected in "Security Protocol".
DES-CBC Check to enable DES-CBC as the ESP encryption algorithm.
3DES-CBC Check to enable 3DES-CBC as the ESP encryption algorithm.
AES-CBC Check to enable AES-CBC as the ESP encryption algorithm.
Key Length If AES-CBC is selected as the ESP authentication algorithm, enter the key length.
AES-CTR Check to enable AES-CTR as the ESP encryption algorithm.
Key Length If AES-CTR is selected as the ESP authentication algorithm, enter the key length.
AES-GCM Check to enable AES-GCM as the ESP encryption algorithm.
Key Length If AES-GCM is selected as the ESP authentication algorithm, enter the key length.
AES-GCM-64 Check to enable AES-GCM-64 as the ESP encryption algorithm.
Key Length If AES-GCM-64 is selected as the ESP authentication algorithm, enter the key length.
ENC_NULL_AES_GMAC Check to enable ENC_NULL_AES_GMAC as the ESP encryption algorithm.
Key Length If ENC-NULL-AES-GMAC is selected as the ESP authentication algorithm, enter the key length.
NULL Check to enable NULL as the ESP encryption algorithm.
ESP Authentication Algorithm Select the ESP authentication algorithm. Set this when "ESP" is selected in "Security Protocol".
MD5 Check to enable MD5 as the ESP authentication algorithm.
SHA-1 Check to enable SHA-1 as the ESP authentication algorithm.
SHA-2 Check to enable SHA-2 as the ESP authentication algorithm.
Key Length If SHA-2 is selected as the ESP authentication algorithm, enter the key length.
AES-XCBC Check to enable AES-XCBC as the ESP authentication algorithm.
AH Authentication Algorithm Select the AH authentication algorithm. Set this when "AH" is selected in "Security Protocol".
MD5 Check to enable MD5 as the AH authentication algorithm.
SHA-1 Check to enable SHA-1 as the AH authentication algorithm.
SHA-2 Check to enable SHA-2 as the AH authentication algorithm.
Key Length If SHA-2 is selected as the AH authentication algorithm, enter the key length.
AES-XCBC Check to enable AES-XCBC as the AH authentication algorithm.
AES-GMAC Check to enable AES-GMAC as the AH authentication algorithm.
Key Length If AES-GMAC is selected as the AH authentication algorithm, enter the key length.
Perfect Forward Secrecy Select whether or not Perfect Forward Secrecy is used. Select "ON" if you wish to enhance security by increasing the strength of IKE. When "ON" is selected, the time required for communication increases.
Diffie-Hellman Group(IKEv1) Select the Diffie-Hellman Group for IKEv1.
Diffie-Hellman Group(IKEv2) Select the Diffie-Hellman Group for IKEv2.
Priority1 Select the Diffie-Hellman group for IKEv2 that should be assigned Priority 1.
Priority2 Select the Diffie-Hellman group for IKEv2 that should be assigned Priority 2.
Priority3 Select the Diffie-Hellman group for IKEv2 that should be assigned Priority 3.
Priority4 Select the Diffie-Hellman group for IKEv2 that should be assigned Priority 4.
Manual Key Settings Check the Manual Key Setting if you wish to manually enter the Key Exchange Method.
Encryption Algorithm Select the Encryption Algorithm to be used with the Manual Key Setting.
Key Length Select the Key Length for the Encryption Algorithm to be used with the Manual Key Setting.
Authentication Algorithm Select the Authentication Algorithm to be used with the Manual Key Setting.
Key Length Select the Key Length for the Authentication Algorithm to be used with the Manual Key Setting.
SA Index Select SA Index to be used with the Manual Key Setting.
Receive Select the SA Index for RX to be used with the Manual Key Setting.
Send Select the SA Index for TX to be used with the Manual Key Setting.
Common Keys for Enc. Sets Common Key Encryption for Manual Key Setting.
Receive Set Common Key Encryption for RX to be used with Manual Key Setting.
Send Set Common Key Encryption for TX to be used with Manual Key Setting.
Common Keys for Auth. Sets Common Key Authentication for Manual Key Setting.
Receive Set Common Key Authentication for RX to be used with Manual Key Setting.
Send Set Common Key Authentication for TX to be used with Manual Key Setting.

Back


Delete SA
 SA can be deleted.

Back


Peer
 Set the communication destination.

Name Allows you to set the Peer Name.
Set IP Address Set the Peer IP Address. The selections include [Single Address], [Subnet] or [Range].
Single Address Select the Single Address button to allow you to set the Peer IP Address.
IP Address Enter the Single IP Address.
Subnet Settings Select to allow you to set the IP Address with the Subnet.
Subnet Mask Enter the Subnet Mask.
Set Range Select to allow you to specify the IP Address with a range.
Set Enter the IP Address range.
Pre-Shared Key Text Enter Pre-Shared Key text to be shared with Peer. Use the same string as the Peer (Up to 64 one-byte alphanumeric and symbol characters can be entered).
Key-ID String Enter Key ID.

Back


Delete Destination
 The Destination can be deleted.

Back


Protocol Setting
 Allows you to enter Protocol settings.

Name Enter the Protocol Name.
Protocol Identification Setting Select the Protocol Identification
Port No. Allows you to enter Port Number parameters.
Port Number Select to allow you to enter Port Number information.
From Enter the From (Source) Port Number.
Destination Enter the Destination Port Number.
Set Range Select the Range button to allow you to enter port number range.
From Enter the From (Source) Port Number.
Destination Enter the Destination Port Number.

Back


Delete Protocol Setting
 Delete Protocol Setting.

Back


IPsec Policy
 Allows you to configure IPsec Policy settings.

Name Enter the IPsec Policy Name.
Peer Select a registered IPsec Peer.
Protocol Setting Select a registered IPsec Protocol setting.
IPsec Setting Select an IPsec Setting from the registered SA.
Communication Type Select the IPsec Communication Type.
Action Select the IPsec action.

Back


Delete IPsec Policy
 Allows you to delete the IPsec Policy.

Back


Communication Error Details
 Displays the IPsec communication error details.

IP Address Displays Peer IP Address.
Security Association (SA) Type Displays SA type.
Initiator/Responder Displays Initiator or Responder.
Error Displays the error message.
Error Details Displays error details.
Occurred Time Displays the date and time the error occurred.

Back