Black Box ET0010A User Manual

ETEP Configuration

330

EncrypTight User Guide

3 On the Advanced tab, select Enable IKE VLAN Tag. 

Online Certificate Status Protocol (OCSP) provides a way for devices that use certificates to verify that a 
received certificate is currently valid. OCSP is an alternative to using Certificate Revocation Lists 
(CRLs). If your organization uses certificates to authenticate management communications in an 
EncrypTight deployment, you can use OCSP to check the validity of the certificates you install.

●

●

Certificate policy extensions indicate the purposes for which a certificate was issued, for example signing 
e-mail or encryption. If your organization uses certificates and makes use of the certificate policy 
extension, you can enable support for the extensions on the ETEP and enter the allowable OIDs. 

●

●

The items on the Features tab define what kind of policies the ETEP can enforce and what layer of traffic 
it acts on. 

●

Configures the ETEP for FIPS mode operation (supported in specific versions of ETEP software). 

●

Determines whether the ETEP will enforce EncrypTight distributed key policies or stand-alone point-
to-point policies. Also enables strict authentication on the ETEP.

●

Configures the ETEP for use in Layer 2 or Layer 3 policies. 

IKE VLAN tag priority

Sets the VLAN priority. Valid values range from 0-7.

IKE VLAN tag identifier

Sets the VLAN ID. Valid values range from 0-4094.