Certificate Authentication—Allows any hosts or subnet of hosts to authenticate for IPSec. Each host must have a public/private key pair. Validate Peer Certificate is enabled by default, requiring each host to have a signed certificate. The certificate authority certificate must be installed. Each host must have its identifier in the Subject Alternate Name of the signed certificate.

Note: After an MFP is configured for IPSec with a host, IPSec is required for any IP communication to take place.

5Indicate the setting for each sub-item as required for the network environment.

6Click Submit.

142

Page 142
Image 142
Lexmark X642e manual 142