Brother HL-S7000DN Series Service manual

IPsec Setting Guide
Version 0
ENG

i
Definitions of notes
We use the following icon throughout this user’s guide:
Trademarks
The Brother logo is a registered trademark of Brother Industries, Ltd.
Any trade names and product names of companies appearing on Brother products, related
documents and any other materials are all trademarks or registered trademarks of those respective
companies.
©2012 Brother Industries, Ltd. All rights reserved.
Note Notes tell you how you should respond to a situation that may arise or give
tips about how the operation works with other features.

ii
Table of Contents
1 Introduction 1
Overview....................................................................................................................................................1
Configuration using Web Based Management (web browser) ..................................................................2
2 IPsec Settings 5
Address Template......................................................................................................................................5
Service Template.......................................................................................................................................7
IPsec Service Template.......................................................................................................................7
Setup Service ......................................................................................................................................8
IPsec Template........................................................................................................................................12
A Appendix A 20
Service Templates...................................................................................................................................20
Type/Code ...............................................................................................................................................22

1
1
1
Overview 1
IPsec (Internet Protocol Security) is a security protocol that uses an optional Internet Protocol function to
prevent manipulation and ensure the confidentiality of data transmitted as IP packets. IPsec encrypts data
carried over the network, such as print data sent from computers to a printer. Because the data is encrypted
at the network layer, applications that use a higher-level protocol use IPsec even if the user is not aware of
its use.
IPsec supports the following functions:
IPsec transmissions
According to the IPsec setting conditions, the network-connected computer sends data to and receives
data from the specified device using IPsec. When the devices start communicating using IPsec, keys are
exchanged using IKE (Internet Key Exchange) first, and then the encrypted data is transmitted using the
keys.
In addition, IPsec has two operation modes: the Transport mode and Tunnel mode. The Transport mode
is used mainly for communication between devices and the Tunnel mode is used in environments such as
a VPN (Virtual Private Network).
Note
• For IPsec transmissions, the following conditions are necessary:
• A computer that can communicate using IPsec is connected to the network.
• The printer or MFC is configured for IPsec communication.
• The computer connected to the printer or MFC is configured for IPsec connections.
• IPsec does not support broadcast or multicast communication.
IPsec settings
The settings that are necessary for connections using IPsec. These settings can be configured using Web
Based Management. (See Configuration using Web Based Management (web browser) uu page 2.)
Note
To configure the IPsec settings, a computer that can operate the browser must be connected to the
network.
Introduction 1

Introduction
2
1
Configuration using Web Based Management (web browser) 1
Use the IPsec setting screen for Web Based Management to specify the IPsec connection conditions.
The IPsec connection conditions are comprised of three Template types: Address, Service, and IPsec, and
a maximum of 10 connection conditions can be configured.
aStart your web browser.
bType “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP
address).
For example:
http://192.168.1.2/
cNo password is required by default. Enter a password if you have set one and press .
dClick the Network tab.
eClick Security.
fClick IPsec.
gYou can configure the IPsec settings from the screen below.
Status
Select Enabled or Disabled for IPsec.
Negotiation Mode
Select the mode for IKE Phase 1.

Introduction
3
1
•Main: The main mode is used.
•Aggressive: The aggressive mode is used.
Note
IKE is a protocol that is used to exchange encryption keys in order to carry out encrypted communication
using IPsec.
If the Main mode is selected, the processing speed is slow, but the security is high. If the Aggressive
mode is selected, the processing speed is faster than when the Main mode is selected, but the security is
lower.
All Non-IPsec Traffic
Select the action to be taken for non-IPsec packets.
•Allow: All packets are allowed to be received.
•Drop: Non-IPsec packets are discarded.
Note
When using Web Services, you must select Allow for All Non-IPsec Traffic. If Drop is selected, Web
Services cannot be used.
Rules
A maximum of 10 IPsec connection conditions (template set) can be configured.
Enabled
When this check box is selected, the template set for that number is enabled.
Note
When multiple check boxes are selected, the check boxes with the lower numbers are given priority if the
settings for the selected check boxes conflict.
Template - Address
Select the Address Template that is used for the IPsec connection conditions.
To add an Address Template, click Add Template. (See Address Template uu page 5.)
Template - Service
Select the Service Template that is used for the IPsec connection conditions.
To add a Service Template, click Add Template. (See Service Template uu page 7.)
Note
If you want to use DNS for the name resolution when using service templates 2, 3, and 4 in Appendix A,
the DNS settings must be configured separately.
Template - IPsec
Select the IPsec Template that is used for the IPsec connection conditions.
To add an IPsec Template, click Add Template. (See IPsec Template uu page 12.)

Introduction
4
1
Submit
Click this button to register the settings. If the computer must be restarted to change the settings, the
restart confirmation screen will be displayed when this button is clicked.
Note
If you select the Enabled check box and click Submit, an error will occur if there is a blank item for the
selected template.

5
2
2
Address Template 2
Specify the IP addresses that will be used for the IPsec connection conditions. A maximum of 10
Address Template can be used.
aStart your web browser.
bType “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP
address).
For example:
http://192.168.1.2/
cNo password is required by default. Enter a password if you have set one and press .
dClick the Network tab.
eClick Security.
fClick IPsec Address Template.
10 Address Template will be displayed. If the Address Template has not been configured,
Not Configured will be displayed.
Delete
Click this button to delete the selected Address Template. However, the currently used
Address Template cannot be deleted.
gClick the number for the Address Template that you want to create. Specify the IP address that you
want to use IPsec in the screen below, and create the IPsec Address Template.
IPsec Settings 2

IPsec Settings
6
2
Template Name
Enter a name for the template in this box. (Maximum of 16 characters)
Local IP Address
Specify the IP address conditions for the sender.
•IP Address
Specify the IP address. Select ALL IPv4 Address, ALL IPv6 Address, All Link Local IPv6, or
Custom.
If Custom is selected, enter the specified IP address (IPv4 or IPv6) in the text box.
•IP Address Range
Enter the starting and ending IP addresses for the IP address range. If the starting and ending IP
addresses are not standardized to IPv4 or IPv6, or the ending IP address is smaller than the
starting address, an error will occur.
•IP Address / Prefix
Specify the IP address using a prefix.
For example: 192.168.1.1/24
Because the prefix is specified in the form of a 24-bit subnet mask (255.255.255.0) for 192.168.1.1,
the addresses 192.168.1.xx are valid.
Remote IP Address
Specify the IP address conditions for the recipient.
•Any
When Any is selected, all IP addresses are enabled.
•IP Address
Enter the specified IP address (IPv4 or IPv6) in the text box.
•IP Address Range
Enter the starting and ending IP addresses for the IP address range. If the starting and ending IP
addresses are not standardized to IPv4 or IPv6, or the ending IP address is smaller than the
starting address, an error will occur.
•IP Address / Prefix
Specify the IP address using a prefix.
For example: 192.168.1.1/24
Because the prefix is specified in the form of a 24-bit subnet mask (255.255.255.0) for 192.168.1.1,
the addresses 192.168.1.xx are valid.
Submit
Click this button to register the settings.
Note
When you change the settings of the currently used template, the IPsec setting screen for Web Based
Management will close and open again.

IPsec Settings
7
2
Service Template 2
IPsec Service Template 2
Specify the protocol and the port number to use for IPsec connections. A maximum of 10 Service Template
can be used.
aStart your web browser.
bType “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP
address).
For example:
http://192.168.1.2/
cNo password is required by default. Enter a password if you have set one and press .
dClick the Network tab.
eClick Security.
fClick IPsec Service Template.
10 Service Template will be displayed. If the Service Template has not been configured,
Not Configured will be displayed.
Delete
Click this button to delete the selected Service Template. However, the currently used
Service Template cannot be deleted.
gClick the number for the Service Template that you want to create. Select the services that you want to
use for IPsec in the screen below, and create the IPsec Service Template.
In addition, if you want to create original services, click Setup Service. (See Setup Service uu page 8.)