Black Box ET0010A User Manual
Advanced Configuration
EncrypTight User Guide
327
●
●
Non IP Traffic Handling
The non IP traffic handling setting is available when the ETEP is configured for use in Layer 3
encryption policies. This setting provides options for how to handle Layer 2 packets that are not IP at
Layer 3. Non-IP packets can be discarded or passed in the clear. When discarding non-IP traffic, you
have the option of passing ARP packets in the clear or discarding them as well. All packets that are IP at
Layer 3 are handled according the policies that are loaded on the appliance.
encryption policies. This setting provides options for how to handle Layer 2 packets that are not IP at
Layer 3. Non-IP packets can be discarded or passed in the clear. When discarding non-IP traffic, you
have the option of passing ARP packets in the clear or discarding them as well. All packets that are IP at
Layer 3 are handled according the policies that are loaded on the appliance.
When the non-IP discard feature is enabled, the appliance looks at the packet’s Layer 3 protocol flag. If
the protocol flag is IP, then the appliance processes the packet normally. If the protocol flag is non-IP,
then the appliance discards the packet. This processing applies to both inbound and outbound packets.
the protocol flag is IP, then the appliance processes the packet normally. If the protocol flag is non-IP,
then the appliance discards the packet. This processing applies to both inbound and outbound packets.
The appliance’s default setting is clear, where non-IP packets are passed in the clear and IP packets are
processed according to the policies loaded on the appliance.
processed according to the policies loaded on the appliance.
Related topic:
●
CLI Inactivity Timer
The CLI session is terminated if no activity is detected on the CLI in a specified amount of time. The
inactivity timer is set to 10 minutes by default. The timer applies to a CLI session initiated through the
serial port or through SSH.
inactivity timer is set to 10 minutes by default. The timer applies to a CLI session initiated through the
serial port or through SSH.
The inactivity timer is specified in minutes, with valid values ranging from 0–1440 minutes (24 hours).
When the CLI inactivity timer is set to zero the session does not time out.
When the CLI inactivity timer is set to zero the session does not time out.
Setting the inactivity timer does not affect the current CLI session. The change is effective on all
subsequent CLI sessions.
subsequent CLI sessions.
Password Strength Policy
The password strength policy affects the following items:
●
Password conventions
●
Password history exclusion, which limits the reuse of passwords
●
Password expirations, warnings, and grace periods
Table 101 Non IP traffic handling configuration
Setting
Description
clear
All packets that are non-IP at Layer 3 are passed in the clear.
discard
All packets that are non-IP at Layer 3 are discarded. ARP packets are
excluded from the discard action.
discardIncludingARP
All packets that are non-IP at Layer 3 are discarded, including ARP
packets.