Black Box ET0010A User Manual

Adding Layer 3 IP Policies

EncrypTight User Guide

205

Overrides the Network addressing setting for the network sets. 
• Preserve internal network addresses - This setting overrides the network 

set’s network addressing mode and preserves the network addressing of the 

protected networks. The IP header contains the source address of the 

originating network. 
If this setting is disabled and the addressing mode of the network set uses 

the PEP’s remote IP address or a Virtual IP address, the IP header contains 

the source address as specified in the network set. If the addressing mode 

of the network set preserves the network IP address, disabling this setting 

has no effect.

• Preserve address, protocol and port - This setting overrides the network 

set’s addressing mode and preserves the network addressing of the 

protected networks, as well as the specified protocol and port numbers. The 

IP header includes the source address, protocol, and port of the originating 

network. This allows you to send the Layer 4 header information in the clear 

for traffic engineering and Service Level Agreement (SLA) management (for 

example, Quality of Service controls). 

Reduces policy size by ignoring the network addresses on the local port of the 

PEP. This reduces the amount of network traffic needed to renew keys and 

refresh policy lifetimes.
• Minimize Policy Size (Ignore Source IP) - This setting replaces the source 

network address for outbound traffic and the destination network address for 

inbound traffic with all networks wildcard addresses (0.0.0.0/0). For more 

information, see 

Identifies the network set included in this policy for one side of the point-to-point 

network configuration. 
• Click the Network Sets tab of the EncrypTight Components view and drag 

the appropriate network set to the Point A - Network Set.

Specifies the source and destination ports for the network set selected for Point 

A. In TCP and UDP, port numbers are used to identify well-known services, 

such as FTP, e-mail and so on. Choosing a specific port limits the action of the 

policy to traffic using that port. 
This setting is only valid if the protocol is set to 6 (TCP) or 17 (UDP).

Identifies the network set included in this policy for the other side of the point-

to-point network configuration. 
• Click on the Network Sets tab of the EncrypTight Components view and 

drag the appropriate network set to the Point B - Network Set menu.

Specifies the source and destination ports for the network set selected for Point 

B. In TCP and UDP, port numbers are used to identify well-known services, 

such as FTP, e-mail and so on. Choosing a specific port limits the action of the 

policy to traffic using that port. 
This setting is only valid if the protocol is set to 6 (TCP) or 17 (UDP).

Specifies the Layer 3 protocol affected by this policy. The action selected for 

the policy is only applied to the traffic with the specified protocol.
• Any - specifies all protocols
• Only - specifies a particular protocol. Click to select and then enter the 

required protocol in the range 0 to 255.