Black Box EncrypTight Enforcement Point (ETEP) Manual De Usuario
Configuration Example
ETEP Installation Guide
63
To view the ETEP throughput speed:
1 At the command prompt, type
1 At the command prompt, type
show throughput-speed
.
Configuration Example
The following example illustrates the commands used for initial setup of the ETEP to configure the
following parameters: management IP address, subnet mask, and default gateway, auto-negotiation, date
and time. The autoneg command needs to be configured only if you want to disable auto-negotiation and
configure the link speed and flow control manually.
following parameters: management IP address, subnet mask, and default gateway, auto-negotiation, date
and time. The autoneg command needs to be configured only if you want to disable auto-negotiation and
configure the link speed and flow control manually.
pep login: admin
Password: *****
admin>
Password: *****
admin>
configure
config>
management-interface
man-if>
ip 192.168.10.10 255.255.255.0 192.168.10.1
man-if> autoneg disable 100m-full on
man-if>
man-if>
exit
config>
date 2008 10 15 12 30 00
config> exit
admin>
admin>
Managing the ETEP
The ETEP can be managed in two ways, depending on the size and complexity of your deployment:
•
Command Line Interface (CLI)
You can configure the ETEPs for operation and create Layer 2 point-to-point policies using the CLI
commands.
To manage the ETEP using the CLI, you can attached a PC directly to the serial port or use any SSH
client for a secure remote connection through the Ethernet management port.
You can configure the ETEPs for operation and create Layer 2 point-to-point policies using the CLI
commands.
To manage the ETEP using the CLI, you can attached a PC directly to the serial port or use any SSH
client for a secure remote connection through the Ethernet management port.
•
EncrypTight Manager Policy and Key Manager™
EncrypTight Manager can distribute keys to a large number of ETEPs. It works for complex mesh,
hub and spoke, and multicast networks, as well as in straightforward point-to-point topologies.
EncrypTight Manager includes tools for appliance configuration, policy definition and deployment,
and key generation and distribution.
EncrypTight Manager can distribute keys to a large number of ETEPs. It works for complex mesh,
hub and spoke, and multicast networks, as well as in straightforward point-to-point topologies.
EncrypTight Manager includes tools for appliance configuration, policy definition and deployment,
and key generation and distribution.
To prepare the ETEP for operation in the network, you will need to perform the following tasks:
1 Assign passwords
2 Configure the ETEP
3 Define security policies
If you plan to operate the ETEP in FIPS mode, we recommend enabling FIPS mode as your first
configuration task. Entering FIPS mode resets many configuration items, such as passwords, policies, and
certificates. To avoid having to reconfigure the ETEP, enable FIPS mode and then perform the rest of the
appliance and policy configuration tasks.
2 Configure the ETEP
3 Define security policies
If you plan to operate the ETEP in FIPS mode, we recommend enabling FIPS mode as your first
configuration task. Entering FIPS mode resets many configuration items, such as passwords, policies, and
certificates. To avoid having to reconfigure the ETEP, enable FIPS mode and then perform the rest of the
appliance and policy configuration tasks.