Brother International ADS-2800W Network Users Guide - Page 85

Encapsulating Security, SHA256, SHA384, SHA512, Code key ESP, In/Out, Custom, Use Prefixed Template

Page 85 highlights

Security Features NOTE The number of characters you can set may differ depending on the setting you selected for Hash in the Encapsulating Security section. If the length of the specified authentication key is different than the selected hash algorithm, an error will occur. • MD5: 128 bits (16 bytes) • SHA1: 160 bits (20 bytes) • SHA256: 256 bits (32 bytes) • SHA384: 384 bits (48 bytes) • SHA512: 512 bits (64 bytes) When you specify the key in ASCII Code, enclose the characters in double quotation marks ("). 6 Code key (ESP) Specify the key to use for encryption. Type the In/Out values. These settings are necessary when Custom is selected in Use Prefixed Template, Manual is selected in IKE, and ESP is selected in Protocol in Encapsulating Security. NOTE The number of characters you can set may differ depending on the setting you selected for Encryption in the Encapsulating Security section. If the length of the specified code key is different than the selected encryption algorithm, an error will occur. • DES: 64 bits (8 bytes) • 3DES: 192 bits (24 bytes) • AES-CBC 128: 128 bits (16 bytes) • AES-CBC 256: 256 bits (32 bytes) When you specify the key in ASCII Code, enclose the characters in double quotation marks ("). SPI These parameters are used to identify security information. Generally, a host has multiple Security Associations (SAs) for several types of IPsec communication. Therefore, it is necessary to identify the applicable SA when an IPsec packet is received. The SPI parameter, which identifies the SA, is included in the Authentication Header (AH) and Encapsulating Security Payload (ESP) header. These settings are necessary when Custom is selected for Use Prefixed Template, and Manual is selected for IKE. Enter the In/Out values (3-10 characters). Encapsulating Security  Protocol Select ESP or AH. 81

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114

Security Features
81
6
NOTE
The number of characters you can set may differ depending on the setting you selected for
Hash
in the
Encapsulating Security
section.
If the length of the specified authentication key is different than the selected hash algorithm, an error will
occur.
MD5
: 128 bits (16 bytes)
SHA1
: 160 bits (20 bytes)
SHA256
: 256 bits (32 bytes)
SHA384
: 384 bits (48 bytes)
SHA512
: 512 bits (64 bytes)
When you specify the key in ASCII Code, enclose the characters in double quotation marks (").
Code key (ESP)
Specify the key to use for encryption. Type the
In/Out
values.
These settings are necessary when
Custom
is selected in
Use Prefixed Template
,
Manual
is selected in
IKE
, and
ESP
is selected in
Protocol
in
Encapsulating Security
.
NOTE
The number of characters you can set may differ depending on the setting you selected for
Encryption
in
the
Encapsulating Security
section.
If the length of the specified code key is different than the selected encryption algorithm, an error will occur.
DES
: 64 bits (8 bytes)
3DES
: 192 bits (24 bytes)
AES-CBC 128
: 128 bits (16 bytes)
AES-CBC 256
: 256 bits (32 bytes)
When you specify the key in ASCII Code, enclose the characters in double quotation marks (").
SPI
These parameters are used to identify security information. Generally, a host has multiple Security
Associations (SAs) for several types of IPsec communication. Therefore, it is necessary to identify the
applicable SA when an IPsec packet is received. The SPI parameter, which identifies the SA, is included in
the Authentication Header (AH) and Encapsulating Security Payload (ESP) header.
These settings are necessary when
Custom
is selected for
Use Prefixed Template
, and
Manual
is selected
for
IKE
.
Enter the
In/Out
values (3-10 characters).
Encapsulating Security
Protocol
Select
ESP
or
AH
.