HomeDescriptions of Functions / Utility KeysEnable IPsec

Enable IPsec

To display:
  • [Utility]
    • [Administrator Settings]
      • [Network Settings]
        • [TCP/IP Settings]
          • [IPsec Settings]
            • [Enable IPsec]

Configure settings to enable use of IPsec on this machine. Also, specify the policy for IPsec communication.

In [IPsec Settings], register items [IKE Settings], [IPsec SA Settings], [Peer], and [Protocol Setting].

Settings

Description

[ON]/[OFF]

Select whether to use IPsec.

[OFF] is specified by default.

[IPsec Policy]

Configure the policy to apply for IPsec communication.

IP packet conditions can be specified to pass or allow the IP packets that meet each of the conditions.

Select a group, then tap [Edit].

[ON]/[OFF]

Select whether to use the IPsec policy.

[OFF] is specified by default.

[Group Name]

Enter a name for the IPsec policy (using up to 10 characters).

[action]

Select an action to be taken for the IP packets that meet [Peer], [Protocol], and [IPsec Settings].

  • [Protected]: Protect the IP packets that met the conditions.

  • [Allow]: Do not protect the IP packets that met the conditions.

  • [Deny]: Discard the IP packets that met the conditions.

  • [Cancel]: Refuse the IP packets that met the conditions.

[Select Group]

Select [Peer], [Protocol], and [IPsec Setting] from the registered settings.

[Communication Type]

Select a direction of IPsec communication.

[Common Settings]

Configure common settings for IPsec policy.

  • [Cookies]: Select whether to enable the defense using Cookies against denial-of-service attacks. [Invalid] is specified by default.

  • [ICMP Pass Settings]: Select whether to apply IPsec to the Internet Control Message Protocol (ICMP). Select [Enable] to allow the ICMP packets to pass without applying IPsec to the ICMP. [Invalid] is specified by default.

  • [ICMPv6 Pass Settings]: Select whether to apply IPsec to the Internet Control Message Protocol for IPv6 (ICMPv6). Select [Enable] to allow the ICMPv6 packets to pass without applying IPsec to the ICMPv6. [Invalid] is specified by default.

  • [default action]: Select an action to be taken if no settings meet the [IPsec Policy] while IPsec communication is enabled. Select [Deny] to discard IP packets that do not meet the [IPsec Policy] settings. [Allow] is specified by default.

  • [Certificate Verification Level Settings]: To verify the certificate, select items to be verified.
    [Expiration Date]: Confirm whether the certificate is within the validity period. [Confirm] is specified by default.
    [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer. [Do Not Confirm] is specified by default.
    [Chain]: Confirm whether there is a problem in the certificate chain (certificate path). The chain is validated by referencing the external certificates managed on this machine. [Do Not Confirm] is specified by default.
    [Expiration Date Confirmation]: Confirm whether the certificate has expired. [Do Not Confirm] is specified by default.

  • [Dead Peer Detection]: If no response can be confirmed from the peer within a certain period, the SA with the peer is deleted. Select a time that elapses before sending survival confirmation information to the peer how has not responded. [15] sec is specified by default.