HP 635n HP Jetdirect Print Server Administrator's Guide - Page 108

Table 5-1 IPsec Policy page Item Enable IPsec Allow all non-IPsec traffic Drop all non-IPsec traffic Description Enter a check mark in the checkbox to enable your IPsec policy. Clear this checkbox to disable IPsec operation. If IPsec is enabled, select a Default Policy for non-IPsec packets. The default setting is to discard (drop) non-IPsec packets for maximum security. Dropped packets will not be processed. You can choose to allow non-IPsec traffic to be processed as long as a configured IPsec rule is not violated. Example: IPsec is enabled on the print server with the following rule: ■ All IPv4 addresses ■ Printing services (Port 9100) ■ A simple IPsec template If Allow all non-IPsec traffic is enabled, then: ■ A non-IPsec packet with IPv4 address, directed to printing port 9100, would not be processed (dropped) because it violates the configured rule. ■ A non-IPsec packet with IPv4 address to the Telnet port would be allowed and processed. If Drop all non-IPsec traffic is enabled, then: ■ A non-IPsec packet with IPv4 address directed to printing port 9100 would not be processed (dropped) because it violates the configured rule. ■ An IPsec packet with IPv4 address directed to printing port 9100 would be allowed and processed because it matches the rule. ■ A non-IPsec packet with IPv4 address to the Telnet port would be dropped because of the Default Policy for non-IPsec packets. 98 Chapter 5 IPsec Configuration ENWW