Canon imageCLASS D1650 All-in-One Monochrome Laser Printer User Manual

Page 400

Description

Example

IPv6:
Delimit alphanumeric characters with colons.

fe80::10

Specifying a range of addresses Insert a hyphen between the addresses.

192.168.0.10-192.168.0.20

[Subnet Settings]

When manually specifying IPv4 address, you can express the range by using the subnet mask. Enter the

subnet mask using periods to delimit numbers (example:"255.255.255.240").

[Prefix Length]

Specifying the range of IPv6 addresses manually also allows you to specify the range using prefixes. Enter a

range between 0 and 128 as the prefix length.

[Local Port]/[Remote Port]

If you want to create separate policies for each protocol, such as HTTP or WSD, click the [Single Port] radio

button and enter the appropriate port number for the protocol to determine whether to use IPSec.

IPSec is not applied to the following packets

●

Loopback, multicast, and broadcast packets

●

IKE packets (using UDP on port 500)

●

ICMPv6 neighbor solicitation and neighbor advertisement packets

Specify the IKE Settings.

[IKE Mode]

The mode used for the key exchange protocol is displayed. The machine supports the main mode, not the

aggressive mode.

[Authentication Method]

Select [Pre-Shared Key Method] or [Digital Signature Method] for the method used when authenticating the

machine. You need to enable TLS for the Remote UI before selecting [Pre-Shared Key Method]. You need to

generate or install the key and certificate before selecting [Digital Signature Method]. Configuring the

[Valid for]

Specify how long a session lasts for IKE SA (ISAKMP SA). Enter the time in minutes.

[Authentication]/[Encryption]/[DH Group]

Select an algorithm from the drop-down list. Each algorithm is used in the key exchange.

Managing the Machine

392