Group Policy Setting Items

Access Control

Configure a control method for traffic of IP packets.

Local Address (Scanner)

Select an IPv4 address or IPv6 address that matches your network environment. If an IP address is assigned automatically, you can select Use auto-obtained IPv4 address.

Remote Address(Host)

Enter a device's IP address to control access. The IP address must be 43 characters or less. If you do not enter an IP address, all addresses are controlled.

Method of Choosing Port

Select a method to specify ports.

• Service Name

  If you select Service Name for Method of Choosing Port, select an option.

• Transport Protocol

  If you select Port Number for Method of Choosing Port, you need to configure an encapsulation mode.

  Items	Settings and Explanation
  Any Protocol	Select this to control all protocol types.
  TCP	Select this to control data for unicast.
  UDP	Select this to control data for broadcast and multicast.
  ICMPv4	Select this to control ping command.

• Local Port

  If you select Port Number for Method of Choosing Port and if you select TCP or UDP for Transport Protocol, enter port numbers to control receiving packets, separating them with commas. You can enter 10 port numbers at the maximum.

  Example: 20,80,119,5220

  If you do not enter a port number, all ports are controlled.

• Remote Port

  If you select Port Number for Method of Choosing Port and if you select TCP or UDP for Transport Protocol, enter port numbers to control sending packets, separating them with commas. You can enter 10 port numbers at the maximum.

  Example: 25,80,143,5220

  If you do not enter a port number, all ports are controlled.

IKE Version

Select IKEv1 or IKEv2 for IKE Version. Select one of them according to the device that the scanner is connected to.

• IKEv1

  The following items are displayed when you select IKEv1 for IKE Version.

  Items	Settings and Explanation
  Authentication Method	If you select IPsec for Access Control, select an option. Used certificate is common with a default policy.
  Pre-Shared Key	If you select Pre-Shared Key for Authentication Method, enter a pre-shared key between 1 and 127 characters.
  Confirm Pre-Shared Key	Enter the key you configured for confirmation.

• IKEv2

  The following items are displayed when you select IKEv2 for IKE Version.

  Items			Settings and Explanation
  Local		Authentication Method	If you select IPsec for Access Control, select an option. Used certificate is common with a default policy.
  		ID Type	If you select Pre-Shared Key for Authentication Method, select the type of ID for the scanner.
  		ID	Enter the scanner's ID that matches the type of ID. You cannot use "@", "#", and "=" for the first character. Distinguished Name : Enter 1 to 255 1-byte ASCII (0x20 to 0x7E) characters. You need to include "=". IP Address : Enter IPv4 or IPv6 format. FQDN : Enter a combination of between 1 and 255 characters using A-Z, a-z, 0-9, "-", and period (.). Email Address : Enter 1 to 255 1-byte ASCII (0x20 to 0x7E) characters. You need to include "@". Key ID : Enter 1 to 255 1-byte ASCII (0x20 to 0x7E) characters.
  		Pre-Shared Key	If you select Pre-Shared Key for Authentication Method, enter a pre-shared key between 1 and 127 characters.
  		Confirm Pre-Shared Key	Enter the key you configured for confirmation.
  Remote		Authentication Method	If you select IPsec for Access Control, select an option. Used certificate is common with a default policy.
  		ID Type	If you select Pre-Shared Key for Authentication Method, select the type of ID for the device that you want to authenticate.
  		ID	Enter the scanner's ID that matches to the type of ID. You cannot use "@", "#", and "=" for the first character. Distinguished Name : Enter 1 to 255 1-byte ASCII (0x20 to 0x7E) characters. You need to include "=". IP Address : Enter IPv4 or IPv6 format. FQDN : Enter a combination of between 1 and 255 characters using A-Z, a-z, 0-9, "-", and period (.). Email Address : Enter 1 to 255 1-byte ASCII (0x20 to 0x7E) characters. You need to include "@". Key ID : Enter 1 to 255 1-byte ASCII (0x20 to 0x7E) characters.
  		Pre-Shared Key	If you select Pre-Shared Key for Authentication Method, enter a pre-shared key between 1 and 127 characters.
  		Confirm Pre-Shared Key	Enter the key you configured for confirmation.

Encapsulation

If you select IPsec for Access Control, you need to configure an encapsulation mode.

Security Protocol

If you select IPsec for Access Control, select an option.

Algorithm Settings

It is recommended that you select Any for all settings or select an item other than Any for each setting. If you select Any for some of the settings and select an item other than Any for the other settings, the device may not communicate depending on the other device that you want to authenticate.