Справочник Пользователя для Black Box Appliance Trim Kit ET1000A
EncrypTight Deployment Planning
32
EncrypTight User Guide
Figure 12
In-line ETKMS to PEP communications in IP networks
ETKMS to PEP Connections in Ethernet Networks
If the ETKMS and the PEP are located on the same subnetwork, the ETKMS to PEP interconnection is
straightforward. For in-line management when the ETKMS and the PEP are located on different Ethernet
networks, make sure that the Enable passing TLS traffic in the clear feature is enabled on the Layer 2
PEPs.
straightforward. For in-line management when the ETKMS and the PEP are located on different Ethernet
networks, make sure that the Enable passing TLS traffic in the clear feature is enabled on the Layer 2
PEPs.
If you need to pass additional traffic in the clear, such as routing protocols, you can route the
management communications using out-of-band connections or put your management traffic on a separate
VLAN.
management communications using out-of-band connections or put your management traffic on a separate
VLAN.
If you choose to put the management traffic on a separate VLAN, you will need to create a Layer 2
policy to pass the VLAN tag in the clear. To prevent an interruption in management traffic, set the
policy’s key renewal/lifetime to zero, which means “do not expire or update.”
policy to pass the VLAN tag in the clear. To prevent an interruption in management traffic, set the
policy’s key renewal/lifetime to zero, which means “do not expire or update.”
With out-of-band management, the management traffic between the ETKMSs and the PEPs is routed over
a separate network path through the ISP. When communications paths pass through any firewalls, be sure
to configure the firewalls to pass TLS traffic.
a separate network path through the ISP. When communications paths pass through any firewalls, be sure
to configure the firewalls to pass TLS traffic.
shows an out-of-band management scenario with
the external ETKMS connecting to a PEP on a different subnetwork with Layer 2 PEPs encrypting
Ethernet data.
Ethernet data.
Figure 13
Out-of-band ETKMS to PEP communications in Ethernet networks