HP 635n HP Jetdirect Print Server Administrator's Guide - Page 115

Manual Keys, Summary, Configuring Windows Systems

Page 115 highlights

Manual Keys Use this page to configure encryption keys and Security Associations manually. Because the applicable hosts will also be manually configured, authentication and dynamic key generation are not needed. Items on this page are described below. Table 5-8 Manual Keys page Item ESP SPI (256 to 4095 ASCII) AH SPI (256 to 4095 ASCII) Description If ESP is enabled on the IPsec Protocols page, the ESP SPI (Security Parameters Index) fields are provided. The ESP SPI is a 32-bit field in an ESP header that helps to identify the IPsec Security Association (SA). in: Enter a value for an SA used for received packets. out: Enter a value for an SA used for transmitted packets from the print server. If AH is enabled on the IPsec Protocols page, the AH Security Parameters Index (SPI) edit fields are provided. An AH SPI is a 32-bit field in an Authentication header that helps to identify the IPsec SA. in: Enter a value for an SA used for received packets. out: Enter a value for an SA used for transmitted packets from the print server. CAUTION The use of IPsec AH may not function properly in environments that use Network Address Translation (NAT). Key Format Encryption Hash Choose whether you will use Hexadecimal values or ASCII characters to specify Encryption or Hash entries. Enter the Encryption keys for packets received (in) or sent (out) by the print server. Enter the Hash keys for packets received (in) or sent (out) by the print server. The Hash keys must be the same for ESP and AH protocols if both are enabled. Summary This page provides summary information for the IPsec rule. Click Create Another Rule to define another IPsec rule before returning to the IPsec Policy page. Or, click Finish to add all configured rules to the IPsec Policy page. Configuring Windows Systems To configure IPsec on supported Windows systems, consult your system documentation, or search for IPsec on the Microsoft Web site. ENWW Configuring Windows Systems 105

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194

Manual Keys
Use this page to configure encryption keys and Security Associations manually. Because the
applicable hosts will also be manually configured, authentication and dynamic key generation are not
needed. Items on this page are described below.
Table 5-8
Manual Keys page
Item
Description
ESP SPI (256 to 4095 ASCII)
If ESP is enabled on the
IPsec Protocols
page, the ESP SPI (Security Parameters
Index) fields are provided. The ESP SPI is a 32-bit field in an ESP header that helps
to identify the IPsec Security Association (SA).
in: Enter a value for an SA used for received packets.
out: Enter a value for an SA used for transmitted packets from the print server.
AH SPI (256 to 4095 ASCII)
If AH is enabled on the
IPsec Protocols
page, the AH Security Parameters Index
(SPI) edit fields are provided. An AH SPI is a 32-bit field in an Authentication header
that helps to identify the IPsec SA.
in: Enter a value for an SA used for received packets.
out: Enter a value for an SA used for transmitted packets from the print server.
CAUTION
The use of IPsec AH may not function properly in environments
that use Network Address Translation (NAT).
Key Format
Choose whether you will use Hexadecimal values or ASCII characters to specify
Encryption or Hash entries.
Encryption
Enter the Encryption keys for packets received (in) or sent (out) by the print server.
Hash
Enter the Hash keys for packets received (in) or sent (out) by the print server. The
Hash keys must be the same for ESP and AH protocols if both are enabled.
Summary
This page provides summary information for the IPsec rule. Click
Create Another Rule
to define
another IPsec rule before returning to the
IPsec Policy
page. Or, click
Finish
to add all configured
rules to the
IPsec Policy
page.
Configuring Windows Systems
To configure IPsec on supported Windows systems, consult your system documentation, or search
for IPsec on the Microsoft Web site.
ENWW
Configuring Windows Systems
105