Network User's Guide

Table Of Contents
Security Features
80
6
EAP
EAP is an authentication protocol that is an extension of PPP. When using EAP with IEEE 802.1x, a different
key is used for user authentication during each session.
The following settings are necessary only when EAP - MD5 or EAP - MS-CHAPv2 is selected in
Authentication Method:
Mode
Select Server-Mode or Client-Mode.
Certificate
Select the certificate.
User Name
Type the user name (up to 32 characters).
Password
Type the password (up to 32 characters). The password must be entered two times for confirmation.
Certificate
Click this button to move to the Certificate configuration screen.
Manual Settings for an IPsec Template 6
Template Name
Type a name for the template (up to 16 characters).
Use Prefixed Template
Select Custom, IKEv1 High Security, IKEv1 Medium Security, IKEv2 High Security, or IKEv2 Medium
Security. The settings are different depending on the selected template.
NOTE
The default template may differ depending on whether you selected Main or Aggressive for Negotiation
Mode on the IPsec configuration screen.
Internet Key Exchange (IKE)
IKE is a communication protocol used to exchange encryption keys in order to carry out encrypted
communication using IPsec. To carry out encrypted communication for that time only, the encryption
algorithm that is necessary for IPsec is determined and the encryption keys are shared. For IKE, the
encryption keys are exchanged using the Diffie-Hellman key exchange method, and the encrypted
communication that is limited to IKE is carried out.
If you selected Custom in Use Prefixed Template, select IKEv1, IKEv2, or Manual.
If you selected a setting other than Custom, the IKE, authentication type and Encapsulating Security selected
in Use Prefixed Template are displayed.
Authentication Key (ESP, AH)
Specify the key to use for authentication. Type the In/Out values.
These settings are necessary when Custom is selected for Use Prefixed Template, Manual is selected for
IKE, and a setting other than None is selected for Hash for Encapsulating Security section.