Home » Canon Manuals » Printers » Canon Color imageCLASS LBP712Cdn » Manual Viewer

Canon Color imageCLASS LBP712Cdn imageCLASS LBP712Cdn User Guide - Page 308

Registering Security Policies

View all Canon Color imageCLASS LBP712Cdn manuals

Add to My Manuals
Save this manual to your list of manuals

Page 308 highlights

Security Before configuring IPSec communication settings ● Check the IPSec settings in the operating system the machine will communicate with. An incorrect combination of the operating system settings and machine settings will disable the IPSec communication. IPSec functional restrictions ● IPSec supports communication to a unicast address (or a single device). ● The machine cannot use both IPSec and DHCPv6 at the same time. ● IPSec is unavailable in networks in which NAT or IP masquerade is implemented. ● In IKEv1 phase1, PFS is not supported. Using IPSec with IP address filter ● The IPSec settings are applied before the IP address filter settings during packet reception while the IP address settings are applied before the IPSec settings during packet transmission. Specifying IP Addresses for Firewall Rules(P. 268) Registering Security Policies To use IPSec for encrypted communication, you need to register security policies (SP) before enabling the IPSec settings ( Enabling IPSec Communication(P. 309) ). A security policy consists of the groups of settings described below. Up to 10 policies can be registered. You can register multiple policies according to a combination of the IP address and the port number. After registering policies, specify the order in which they are applied. Selector Selector defines conditions for IP packets to apply IPSec communication. Selectable conditions include IP addresses and port numbers of the machine and the devices to communicate with. IKE IKE configures the IKEv1 that is used for key exchange protocol. Note that instructions vary depending on the authentication method selected. [Pre-Shared Key Method] A key of up to 24 alphanumeric characters can be shared with the other devices. Enable TLS for the Remote UI in advance ( Using TLS for Encrypted Communications(P. 297) ). [Digital Signature Method] The machine and the other devices authenticate each other by mutually verifying their digital signatures. Have a key pair to use ready ( Using CA-issued Key Pairs and Digital Certificates(P. 329) ). Setting Protocols and Options Specify the settings for ESP and AH, which are added to packets during IPSec communication. ESP and AH cannot be used at the same time. You can also select whether or not to enable PFS for tighter security. 1 Start the Remote UI and log on in Management Mode. Starting Remote UI(P. 336) 2 Click [Settings/Registration]. 302

Section	Page
Contents	2
Important Safety Instructions	8
Installation	9
Power Supply	11
Handling	12
Maintenance and Inspections	15
Consumables	16
Basic Operations	20
Parts and Their Functions	22
Front Side	23
Back Side	25
Interior	27
Multi-Purpose Tray	28
Paper Drawer	29
Operation Panel	30
Display	33
Using the Operation Panel	35
Entering Text	38
Turning ON/OFF the Power	40
Performing a Quick Start of the Machine	42
Loading Paper	44
Loading Paper in the Paper Drawer	46
Loading Paper in the Multi-Purpose Tray	52
Loading Envelopes or Postcards	55
Loading Preprinted Paper	59
Specifying Paper Size and Type	63
Specifying Paper Size and Type in the Paper Drawer	64
Specifying Paper Size and Type in the Multi-Purpose Tray	66
Saving Energy	68
Entering Sleep Mode	69
Setting Auto Shutdown Time	71
Printing a Document	75
Printing from a Computer	76
Basic Printing Operations	78
Canceling Prints	83
Various Print Settings	85
Enlarging or Reducing	87
Switching 1-Sided and 2-Sided Printing	89
Collating Printouts by Page	91
Printing Multiple Pages onto One Sheet	93
Printing Posters	95
Printing Booklet	97
Printing Borders	99
Printing Dates and Page Numbers	100
Printing Watermarks	102
Setting Color Mode	104
Printing Specific Pages onto Different Paper	106
Selecting Document Type	108
Saving Toner	110
Combining and Printing Multiple Documents	112
Configuring Print Settings to Your Needs	116
Registering Combinations of Frequently Used Print Settings	117
Changing Default Settings	119
Using Useful Print Functions	121
Printing from USB Memory (USB Direct Print)	123
Changing Default USB Print Settings	133
Printing a Document Secured by a PIN (Secured Print)	135
Using the Encrypted Print	140
Printing a Document Stored in the Machine (Stored Job Print)	141
Deleting a Document Stored in the Machine	145
Setting a Name or PIN to a Box	148
Printing without Opening a File (Direct Print)	150
Print Settings for Direct Print	154
Printing Received E-mail (E-Mail Print)	165
Can Be Used Conveniently with a Mobile Device	173
Connecting to a Mobile Device	174
Making the Best Use of the Machine by Utilizing Applications	175
Using AirPrint	177
Printing with AirPrint	181
If AirPrint Cannot Be Used	184
Using Google Cloud Print	185
Managing the Machine Remotely	189
Network	191
Connecting to a Network	192
Connecting to a Wired LAN	194
Setting IP Addresses	196
Setting IPv4 Address	197
Setting IPv6 Addresses	201
Configuring the Machine for Printing from a Computer	205
Configuring Printing Protocols and WSD Functions	206
Enabling IPP/IPPS	212
Setting Up Print Server	221
Configuring the Machine for Your Network Environment	225
Configuring Ethernet Settings	226
Setting a Wait Time for Connecting to a Network	228
Configuring DNS	229
Configuring WINS	235
Configuring SNTP	238
Monitoring and Controlling the Machine with SNMP	241
Configuring Settings for Device Management Software	247
Configuring SMB	251
Configuring Settings on the Computer for Printing	254
Security	257
Protecting the Machine from Unauthorized Access	258
Preventing Unauthorized Access	259
Setting Access Privileges	261
Setting the System Manager Password	262
Setting the Department ID Management	264
Setting a Remote UI PIN	271
Restricting Communication by Using Firewalls	273
Specifying IP Addresses for Firewall Rules	274
Specifying MAC Addresses for Firewall Rules	280
Setting a Proxy	283
Restricting the Machine's Functions	286
Restricting the Printing Operations	287
Restricting USB Functions	291
Restricting Operation Panel Functions	294
Disabling HTTP Communication	297
Disabling Remote UI	298
Disabling the LAN Port	299
Hiding the Print Job History	300
Implementing Robust Security Features	302
Using TLS for Encrypted Communications	303
Configuring IPSec Settings	307
Configuring IEEE 802.1X Authentication	318
Configuring Settings for Key Pairs and Digital Certificates	324
Generating Key Pairs	326
Using CA-issued Key Pairs and Digital Certificates	335
Verifying Key Pairs and Digital Certificates	338
Using Remote UI	341
Starting Remote UI	342
Remote UI Screens	345
Managing Documents and Checking the Machine Status	351
Enabling End Users to Operate Documents	357
Setting Up Menu Options from Remote UI	360
Saving/Loading Registered Data	362
Saving Registered Data	363
Loading Registered Data	365
Setting Menu List	368
Setup Menu	369
Control Menu	370
Paper Source	384
Network	385
Layout	405
Print Quality	409
Interface	424
User Maintenance	427
Print Mode	443
Settings Specific to Print Mode	445
UFR II	446
PCL	447
Imaging	453
XPS	463
PDF	474
PS	485
MEAP Settings	495
Check Counter	496
Initialize Menu	497
Utility Menu	498
Job Menu	503
Reset Menu	505
Select Feeder Menu	507
Troubleshooting	516
Clearing Jams	518
When an Error Message Appears	526
Common Problems	548
Installation/Settings Problems	549
Printing Problems	552
When You Cannot Print Properly	554
Printing Results Are Not Satisfactory	556
Paper Creases or Curls	563
Paper Is Fed Incorrectly	565
When a Problem Cannot Be Solved	566
Maintenance	569
Cleaning the Machine	571
Exterior	572
Fixing Unit	573
Replacing Toner Cartridges	574
How to Replace Toner Cartridges	577
Replacing the Waste Toner Container	579
How to Replace the Waste Toner Container	580
Relocating the Machine	582
Maintaining and Improving Print Quality	584
Adjusting Print Density	585
Correcting Color Mismatch and Hues	587
Adjusting Print Position	590
Printing Reports and Lists	594
Viewing the Counter Value	603
Checking Consumables	606
Initializing Settings	608
Initializing Menu	609
Initializing the Network Settings	610
Appendix	612
Third Party Software	613
Feature Highlights	614
Going Green and Saving Money	615
Improving Efficiency	617
So Much More	620
Specifications	623
Machine Specifications	624
Paper	627
Consumables	632
Optional Items	634
Installing the ROM	636
Installing an SD Card	640
Manuals Included with the Machine	644
Using User's Guide	645
Screen Layout of User's Guide	646
Viewing User's Guide	650
Managing MEAP Applications	652
Using FTP Clients	653
Preparing for Using the FTP Server	654
Printing via FTP Client (FTP Print)	657
Specifying Settings via FTP Client	659
Others	666
Basic Windows Operations	667
Font Samples	674
Menu Route Map	679
Notice	680
Office Locations	683

Match case Limit results 1 per page

Before conﬁguring IPSec communication settings

●

Check the IPSec settings in the operating system the machine will communicate with. An incorrect

combination of the operating system settings and machine settings will disable the IPSec communication.

IPSec functional restrictions

●

IPSec supports communication to a unicast address (or a single device).

●

The machine cannot use both IPSec and DHCPv6 at the same time.

●

IPSec is unavailable in networks in which NAT or IP masquerade is implemented.

●

In IKEv1 phase1, PFS is not supported.

Using IPSec with IP address ﬁlter

●

The IPSec settings are applied before the IP address ﬁlter settings during packet reception while the IP

address settings are applied before the IPSec settings during packet transmission.

Specifying IP

Addresses for Firewall Rules(P. 268)

Registering Security Policies

To use IPSec for encrypted communication, you need to register security policies (SP) before enabling the IPSec

settings (

Enabling IPSec Communication(P. 309)

). A security policy consists of the groups of settings described

below. Up to 10 policies can be registered. You can register multiple policies according to a combination of the IP

address and the port number. After registering policies, specify the order in which they are applied.

Selector

Selector deﬁnes conditions for IP packets to apply IPSec communication. Selectable conditions include IP

addresses and port numbers of the machine and the devices to communicate with.

IKE

IKE conﬁgures the IKEv1 that is used for key exchange protocol. Note that instructions vary depending on the

authentication method selected.

[Pre-Shared Key Method]

A key of up to 24 alphanumeric characters can be shared with the other devices. Enable TLS for the Remote UI

in advance (

Using TLS for Encrypted Communications(P. 297)

[Digital Signature Method]

The machine and the other devices authenticate each other by mutually verifying their digital signatures. Have

a key pair to use ready (

Using CA-issued Key Pairs and Digital Certiﬁcates(P. 329)

Setting Protocols and Options

Specify the settings for ESP and AH, which are added to packets during IPSec communication. ESP and AH

cannot be used at the same time. You can also select whether or not to enable PFS for tighter security.

Start the Remote UI and log on in Management Mode.

Starting Remote UI(P. 336)

Click [Settings/Registration].

Security

302