Home » Canon Manuals » Printers » Canon Color imageCLASS X LBP1538C » Manual Viewer

Canon Color imageCLASS X LBP1538C imageCLASS X LBP1538C Users Guide - Page 252

Configuring the IPSec Settings, Communication mode, Key exchange protocol

View all Canon Color imageCLASS X LBP1538C manuals

Add to My Manuals
Save this manual to your list of manuals

Page 252 highlights

Managing the Machine Configuring the IPSec Settings 7L3E-04S By using IPSec, you can prevent third parties from intercepting or tampering with IP packets transported over the IP network. Because IPSec adds security functions to IP, a basic protocol suite used for the Internet, it can provide security that is independent of applications or network configuration. To perform IPSec communication with this machine, you must configure settings such as the application parameters and the algorithm for authentication and encryption. Administrator privileges are required in order to configure these settings. Enabling IPSec(P. 246) Registering a Policy(P. 246) Communication mode ● This machine only supports transport mode for IPSec communication. As a result, authentication and encryption is only applied to the data portions of IP packets. Key exchange protocol This machine supports Internet Key Exchange version 1 (IKEv1) for exchanging keys based on the Internet Security Association and Key Management Protocol (ISAKMP). For the authentication method, set either the preshared key method or the digital signature method. ● When setting the pre-shared key method, you need to decide on a passphrase (pre-shared key) in advance, which is used between the machine and the IPSec communication peer. ● When setting the digital signature method, use a CA certificate and a PKCS#12 format key and certificate to perform mutual authentication between the machine and the IPSec communication peer. For more information on registering new CA certificates or keys/certificates, see Registering a Key and Certificate for Network Communication(P. 233) . Note that SNTP must be configured for the machine before it uses this method. Making SNTP Settings(P. 40) ● Regardless of the setting of [Format Encryption Method to FIPS 140-2] for IPSec communication, an encryption module which has already obtained FIPS140-2 certification will be used. ● In order to make IPSec communication comply with FIPS 140-2, you must set the key length of both DH and RSA for IPSec communication to 2048-bit or longer in the network environment that the machine belongs to. ● Only the key length for DH can be specified from the machine. ● Take note when configuring your environment, as there are no settings for RSA in the machine. ● You can register up to 10 security policies. 245

Section	Page
Contents	2
Setting Up	9
Preparations Required Before Use	10
Preventing Unauthorized Access	11
Setting up Using the Setup Guide	13
Setting the Date/Time	14
Setting up the Network Environment	15
Selecting the Network Connection Method	17
Connecting to a Wired LAN	19
Connecting to a Wireless LAN	21
Setting Up the Connection Using WPS Push Button Mode	23
Setting Up the Connection Using WPS PIN Code Mode	24
Setting Up Connection by Selecting a Wireless Router	25
Setting Up a Connection by Specifying Detailed Settings	26
Checking the SSID and Network Key	28
Setting an IP Address	29
Setting an IPv4 Address	30
Setting an IPv6 Address	32
Setting the IPv4 Address of the Sub Line	34
Adapting to the Network Environment	35
Making Ethernet Settings	36
Setting the Wait Time When Connecting to a Network	37
Making DNS Settings	38
Monitoring and Controlling the Machine with SNMP	41
Setting Static Routing	45
Other Network Settings	47
Configuring System Data Communication	50
Installing Drivers	51
Configuring E-Mail Print Settings	52
Basic Operations	56
Parts and Their Functions	58
Front Side	59
Back Side	62
Interior	63
Multi-Purpose Tray	64
Paper Drawer	65
Control Panel	66
Turning ON the Machine	68
Turning OFF the Machine	69
Loading Paper	70
Basic Paper Loading Method	71
Loading Envelopes	79
Loading Postcards	83
Loading Preprinted Paper	85
Using the Control Panel	87
Basic Screens	88
Items Displayed on the <Home> Screen	90
Basic Operation	92
Entering Characters	95
Logging into the Machine	97
Specifying Paper Size and Type	98
Specifying Paper Size and Type in the Paper Drawer	99
Specifying Paper Size and Type in the Multi-purpose Tray	101
Registering Frequently Used Paper Size and Type for the Multi-purpose Tray	103
Registering Free Size Paper (Custom Size Paper)	105
Automatically Selecting the Appropriate Paper Source for a Specific Function	106
Customizing the Display	107
Customizing the <Home> Screen	108
Switching the Displayed Language	109
Setting Sounds	110
Entering Sleep Mode	111
Printing	114
Printing From a Computer	116
Canceling Printing	119
Checking the Printing Status and History	121
Advanced Functions for Printing	122
Printing Documents Held in the Machine	123
Printing Out Secured Documents	126
Various Printing Methods	128
Directly Printing Files without Opening Them	129
Printing Using a Virtual Printer	131
Printing From Memory Media (Media Print)	133
Printing Received E-mail (E-Mail Print)	134
Printing Using the Microsoft Cloud Service (Universal Print)	135
Configuring the Universal Print User Settings	139
Using Memory Media Such as USB Memory	143
Using Memory Media	144
Linking with Mobile Devices	150
Connecting with Mobile Devices	151
Connecting Directly	152
Utilizing the Machine through Applications	155
Using AirPrint	157
Printing with AirPrint	161
If AirPrint Cannot Be Used	164
Printing with Default Print Service (Android)	165
Managing the Machine	168
Applying a Security Policy to the Machine	170
Using a Password to Protect the Security Policy Settings	171
Configuring the Security Policy Settings	173
Security Policy Setting Items	175
Managing Users	180
Configuring the Personal Authentication Management Settings	182
Registering User Information in the Local Device	185
Importing/Exporting User Data	189
Adding and Editing User Information in a CSV File	192
Registering Server Information	196
Configuring the Authentication Functions	202
Using Personal Authentication to Manage Printing via a Computer	206
Using Other Convenient Personal Authentication Management Functions	207
Setting the Department ID Management	208
Changing the System Manager ID and PIN	209
Configuring the Department ID Management Settings	211
Using Department IDs to Manage Printing via Computer	214
Setting an Authentication/Password Policy	215
Configuring the Network Security Settings	218
Restricting Communication by Using Firewalls	220
Specifying IP Addresses in Firewall Settings	221
Specifying MAC Addresses in Firewall Settings	224
Configuring the Firewall of the Sub Line	226
Setting a Proxy	229
Configuring the Key and Certificate for TLS	231
Generating the Key and Certificate for Network Communication	235
Generating a Key and Certificate Signing Request (CSR)	237
Registering a Key and Certificate for Network Communication	240
Configuring the Expiration Check Method for Received Certificates	243
Retrieving/Updating a Certificate from an SCEP Server	246
Configuring the IPSec Settings	252
Configuring the IEEE 802.1X Authentication Settings	259
Restricting the Machine's Functions	262
Restricting Printing from a Computer	263
Restricting the Use of Memory Media	267
Restricting Use of the Operation Panel	268
Managing the Machine from a Computer (Remote UI)	269
Starting the Remote UI	270
Checking the Status and Logs	274
Turning OFF/Restarting the Machine	277
Managing the Logs	278
Importing/Exporting the Setting Data	281
Importing/Exporting All Settings	283
Updating the Firmware	287
Updating the Firmware (Distribution)	289
Setting Scheduled Updates	292
Displaying Messages from the Administrator	294
Installing System Options	295
Initializing Settings	297
Functions Linked to Cloud Service	299
Settings/Registration	303
Settings/Registration Table	304
Preferences	306
Display Settings	307
Timer/Energy Settings	308
Network	310
External Interface	329
Accessibility	330
Volume Settings	331
Adjustment/Maintenance	332
Maintenance	333
Adjust Image Quality	334
Function Settings	336
Common	337
Printer	339
Custom Settings	340
UFR II	343
PCL	344
PS	346
Imaging	347
PDF	348
XPS	350
Utility	351
Send	352
Receive	353
Access Files	354
Print	355
Management Settings	356
User Management	357
Device Management	358
License/Other	359
Data Management	360
Security Settings	361
Output Report	362
<Preferences>	363
<Display Settings>	364
<Timer/Energy Settings>	366
<Network>	370
<External Interface>	382
<Accessibility>	384
<Volume Settings>	385
<Adjustment/Maintenance>	386
<Maintenance>	387
<Adjust Image Quality>	388
<Function Settings>	392
<Common>	393
<Printer>	396
<Send>	398
<Receive>	399
<Access Files>	400
<Print>	401
<Management Settings>	402
<User Management>	403
<Device Management>	404
<License/Other>	406
<Data Management>	408
<Security Settings>	410
<Output Report>	411
Maintenance	415
Regular Cleaning	417
Cleaning the Exterior	418
Replacing the Toner Cartridge	419
Replacing the Waste Toner Container	423
Replacement Parts	426
Checking the Remaining Amount of Consumables	429
Adjusting Print Quality	430
Adjusting Gradation	431
Automatically Adjusting Color Registration and Color Intensity	432
Adjusting the Print Position	433
Reducing Toner Used When Color Printing	436
Paper Type Management Settings	437
Checking the Number of Pages for Print	443
Printing Reports and Lists	444
Troubleshooting	446
If the Machine Does Not Operate	447
Cannot Print	449
Problems with Printing Results	450
Problems with the Network	453
Problems with Security	457
Other Problems	458
A Message or a Number Starting with \	459
A Message Saying to Contact Your Dealer or Service Representative Is Displayed	460
Countermeasures for Each Message	461
Countermeasures for Each Error Code	485
Clearing Paper Jams	493
Paper Jams inside the Machine or in the Fixing Unit	495
Paper Jams in a Paper Source	499
Implementing Security Measures	505
Various Security Functions	506
Appendix	510
Third Party Software	512
Notice	513
Feature Highlights	516
Productivity	517
Image Quality	518
Manageability	519
Building a Dual Network Environment	520
Office Compatibility	523
Basic Windows Operations	524
System Specifications	528
Printer Functions	529
Management Functions	532
System Environment	536
Network Environment	537
System Options	539
Hardware Specifications	540
Main Unit	541
Available Paper	543
Paper Feeder PF-D	550
Cassette Feeding Unit-AV	551
Options	552
Optional Equipment	553
Paper Feeder PF-D	554
Cassette Feeding Unit-AV	555
Manuals and Their Contents	556
Using User's Guide	557
Screen Layout of User's Guide	558
Viewing User's Guide	561

Match case Limit results 1 per page

Conﬁguring the IPSec Settings

7L3E-04S

By using IPSec, you can prevent third parties from intercepting or tampering with IP packets transported over the IP

network. Because IPSec adds security functions to IP, a basic protocol suite used for the Internet, it can provide

security that is independent of applications or network conﬁguration. To perform IPSec communication with this

machine, you must conﬁgure settings such as the application parameters and the algorithm for authentication and

encryption. Administrator privileges are required in order to conﬁgure these settings.

Enabling IPSec(P. 246)

Registering a Policy(P. 246)

Communication mode

●

This machine only supports transport mode for IPSec communication. As a result, authentication and

encryption is only applied to the data portions of IP packets.

Key exchange protocol

This machine supports Internet Key Exchange version 1 (IKEv1) for exchanging keys based on the Internet

Security Association and Key Management Protocol (ISAKMP). For the authentication method, set either the pre-

shared key method or the digital signature method.

●

When setting the pre-shared key method, you need to decide on a passphrase (pre-shared key) in advance,

which is used between the machine and the IPSec communication peer.

●

When setting the digital signature method, use a CA certiﬁcate and a PKCS#12 format key and certiﬁcate to

perform mutual authentication between the machine and the IPSec communication peer. For more

information on registering new CA certiﬁcates or keys/certiﬁcates, see

Registering a Key and Certiﬁcate

for Network Communication(P. 233)

. Note that SNTP must be conﬁgured for the machine before it uses

this method.

Making SNTP Settings(P. 40)

●

Regardless of the setting of [Format Encryption Method to FIPS 140-2] for IPSec communication, an

encryption module which has already obtained FIPS140-2 certiﬁcation will be used.

●

In order to make IPSec communication comply with FIPS 140-2, you must set the key length of both DH and

RSA for IPSec communication to 2048-bit or longer in the network environment that the machine belongs to.

●

Only the key length for DH can be speciﬁed from the machine.

●

Take note when conﬁguring your environment, as there are no settings for RSA in the machine.

●

You can register up to 10 security policies.

Managing the Machine

245