IBM Bertl 用户手册

Page Number 10 

Page 10 

I

 

tel. (1) 732-761-2311 

fax. (1) 732-761-2312 
BERTLinfo@BERTL.com 

All Rights Reserved. The license under which this document is made available and applicable law prohibit any 
reproduction or further transmission of any portion of this document. This document may only be viewed elec-
tronically through the www.BERTL.com Web site and may not be stored in electronic or hard copy format. Any 
reproduction of trademarks is strictly prohibited. BERTL accepts no responsibility for any inaccuracies or 
omissions contained in this document.

 

Page 10 

LabCheck

® 

 

 

tel.  (1) 732-761-2311 

fax. (1) 732-761-2312 

BERTLinfo@BERTL.com 

All Rights Reserved.  The license under which this document is made available and applicable law prohibit any 
reproduction or further transmission of any portion of this document.  This document may only be viewed 
electronically through the  www.BERTL.com Web site and may not be stored in electronic or hard copy format. 
Any reproduction of trademarks is strictly prohibited. BERTL accepts no responsibility for any inaccuracies or 
omissions contained in this document. 

IPsec: 
 
The networking options on the IBM 
Infoprint 1532 Express are extensive: fast 
Ethernet, Gigabit Ethernet, and 802.11G 
wireless.  LAN and WAN security is 
accomplished through standard IPSec. 
IPsec is a framework for a set of protocols 
for security at the network layer of the TCP/
IP protocol stack. IPsec supports both 
authentication and encryption. A major 
advantage of IPsec is that security 
arrangements can be implemented without 
requiring changes to existing user 
software. For example, with Windows XP 
and 2000, IPsec can be enabled through 
the Microsoft Management Console 
(MMC). Networking protocols like Telnet, 
FTP, HTTP, LPR, Discovery and others 
can then be secured transparently.  
 
To enable security for the IBM Infoprint 
1532 Express, administrators, using the 
Web interface, must first configure how the 
initial authentication of devices is 
performed. They can choose from pre-
shared keys, digital certificates, or 
Kerberos authentication. In many LAN 
environments, the pre-shared 
key may be sufficient and is 
simpler to implement. 
Administrators enter the same 
secret shared key on both the 
IBM Infoprint 1532 Express 
and on Windows by setting up 
an MMC policy.  
 
After the devices authenticate 
each other they can then, 
depending on the policy 
configured, encrypt the data or 
print stream. The IBM Infoprint 
1532 Express supports DES, 
3DES, and AES. These 
standards must be included in 

the Windows encryption policy for a 
security negotiation to complete 
successfully.  
 
With authentication and encryption 
configured, administrators then use the 
“TCP/IP Port Access” Web page, selecting 
which ports to enable security on. If 
desired, ports can be configured to accept 
both secure and non-secure 
communication.