Black Box ET0010A User Manual

Adding Layer 3 IP Policies

EncrypTight User Guide

197

Overrides the Network addressing setting for the network sets. 
• Preserve internal network addresses - This setting overrides the network 

set’s network addressing mode and preserves the network addressing of the 

protected networks. The IP header contains the source address of the 

originating network. 
If this setting is disabled and the addressing mode of the network set uses 

the PEP’s remote IP address or a Virtual IP address, the IP header contains 

the source address as specified in the network set. If the addressing mode 

of the network set preserves the network IP address, disabling this setting 

has no effect.

• Preserve address, protocol and port - This setting overrides the network 

set’s addressing mode and preserves the network addressing of the 

protected networks, as well as the specified protocol and port numbers. The 

IP header includes the source address, protocol, and port of the originating 

network. This allows you to send the Layer 4 header information in the clear 

for traffic engineering and Service Level Agreement (SLA) management (for 

example, Quality of Service controls). 

Specifies a method for reducing the policy size.
• Ignore source IP address - Reduces policy size by ignoring the network 

addresses on the local port of the PEP. This limits the amount of network 

traffic needed to renew keys and refresh policy lifetimes. If you select this 

option, the source network address for outbound traffic and the destination 

network address for inbound traffic are replaced with all networks wildcard 

addresses (0.0.0.0/0). 

• Apply to all traffic - Reduces the policy size by applying the policy to all 

traffic, inbound and outbound, regardless of the source and destination 

address and ports. If the policy specifies encryption, all 

s associated 

with the policy use the same key set. This option reduces the number of 

policy entries and SAs on each 

.

. 

Identifies the network sets included in this policy.
Click the Network Sets tab of the EncrypTight Components view and drag the 

appropriate network sets to Mesh Network Sets.

Specifies the Layer 3 protocol affected by this policy. The action selected for 

the policy is only applied to the traffic with the specified protocol.
• Any - specifies all protocols.
• Only - specifies a particular protocol. Click to select and then enter the 

required protocol in the range 0 to 255.