Black Box ET0010A User Manual

Policy Design Examples

218

EncrypTight User Guide

With Layer 3 routed networks, you might need to pass routing protocols in the clear. This is normally 
true when routers are placed behind the PEPs and when your WAN uses a private routed infrastructure. 
With a public routed infrastructure, the ISP handles the routing. 

To create policies to pass routing protocols in the clear, include the router interfaces or subnets that 
participate in sharing the routing protocol. In our example, all the regional networks are Layer 3 routed 
networks and all branches are switched networks. Each regional network shares routing information with 
the other regional networks using EIGRP (protocol 88). 

Using the four network sets created in 

mesh policy as shown in the following table: 

903

4 hours

IPSec

Encryption Algorithms - AES 

Authentication Algorithms - HMAC-SHA-1

By Network Set

Preserve internal network addresses 

Disable 

Network Set D

Network Set D1

Network Set D2

Network Set D3

Any

Clear EIGRP

2000 (higher priority than the Mesh encryption policy)

4 hours

Bypass

By Network Set