IKEv1 Phase 2 / Quick Mode (IPsec Protocols)
Items on this page are described in the following table.
IKEv1 Phase 2 / Quick Mode Settings (IPsec Protocols) page
|
|
|
Specify how the selected IPsec protocols (ESP or AH) are encapsulated:
|
●
|
Transport (default) Protect only the user data in each IP packet. Do not protect the IP packet header.
|
|
●
|
Tunnel Protect all packet fields, including the header.
|
|
|
|
Set the encryption methods and strengths, and the authentication methods used:
|
●
|
ESP IPsec encapsulating security payload (ESP) protocol for IP packets. ESP headers are inserted in packets to ensure privacy and integrity of packet contents. Select among the supported encryption methods and strengths and the authentication methods to use for data protection.
|
|
●
|
AH IPsec authentication header (AH) protocol for IP packets. AH headers are inserted in packets to protect integrity of packet contents through cryptographic checksums. Select among the supported authentication methods.
|
| CAUTION:
|
IPsec AH might not function properly in environments that use network address translation (NAT).
|
|
| NOTE:
|
You cannot use ESP authentication if AH is enabled. If you enable ESP and AH, you must select AH authentication methods.
|
|
|
SA Lifetime Security association lifetime in seconds, the number of kilobytes (KB), or both. Within the limits specified, shorter lifetimes provide improved security depending on the frequency of SA use.
|
Set to zero (0) to disable.
|
|
|
Configure advanced IKE settings.
|
|
HP Jetdirect Print Servers IKEv1 Phase 2 / Quick Mode (IPsec Protocols)