Dascom 7010 PrintServer Manual - Manual (Page 222)

Appendix - Parameter List
Print Server User Manual 222
ipsec_key_exchange1_
encapsulation_mode
ipsec_key_exchange2_
encapsulation_mode
ipsec_key_exchange3_
encapsulation_mode
ipsec_key_exchange4_
encapsulation_mode
[Encapsulation type] 0 = Transport mode Specifies how the IP data packet is
handled within the SA. The IPsec
specification differentiates between the
’Transport Mode’ and the ’Tunnel Mode’.
- In the Transport Mode the IP data packet
is encrypted. However, the IP header will
be kept.
- In the Tunnel Mode a complete IP data
packet will be encapsulated in another
packet and be given a new IP header.
NOTE: The Tunnel Mode cannot be
selected via the selection list on the
Printserver Homepage. Use a
configuration file (racoon/setkey) instead.
ipsec_key_exchange1_
pfs_group
ipsec_key_exchange2_
pfs_group
ipsec_key_exchange3_
pfs_group
ipsec_key_exchange4_
pfs_group
[Diffie-Hellman group] 0 = ---
1 = modp768
2 = modp1024
3 = modp1536
4 = modp2084
5 = modp3072
6 = modp4096
7 = modp6144
8 = modp8192 Specifies the Diffie-Hellman group number
for the creation of additional dynamically
generated temporary keys. The keys are
used during phase 2.
ipsec_key_exchange1_
encryption_algo_ph2
ipsec_key_exchange2_
encryption_algo_ph2
ipsec_key_exchange3_
encryption_algo_ph2
ipsec_key_exchange4_
encryption_algo_ph2
[Encryption algorithm 3des = 3des
des = des
aes = aes
des_iv64 = des64
des_iv32 = des32
null_enc = none Specifies the encryption algorithm for
phase 2.
You can select several procedures. If the
remote party also offers several
procedures, the procedure that was listed
first with the communication partner will be
used.
ipsec_key_exchange
1_auth_algo_ph2
ipsec_key_exchange
2_auth_algo_ph2
ipsec_key_exchange
3_auth_algo_ph2
ipsec_key_exchange
4_auth_algo_ph2
[Authentication
algorithm] hmac_md5 = md5
hmac_sha1 = sha1
non_auth = none Specifies the Hash algorithm for phase 2.
You can select several procedures. If the
remote party also offers several
procedures, the procedure that was listed
first with the communication partner will be
used.
Parameter Value Description