Policy Design Examples 211 | Black Box ET0100A, ET1000A, ET0010A

Table of Contents

Adding a Multicast Policy	199
Adding a Point-to-point Policy	203
Adding Layer 4 Policies	206
Policy Deployment	207
Verifying Policy Rules Before Deployment	207
Deploying Policies	208
Setting Deployment Confirmation Preferences	208
Editing a Policy	209
Deleting Policies	209
Chapter 16: Policy Design Examples	211
Basic Layer 2 Point-to-Point Policy Example	211
Layer 2 Ethernet Policy Using VLAN IDs	212
Complex Layer 3 Policy Example	214
Encrypt Traffic Between Regional Centers	214
Encrypt Traffic Between Regional Centers and Branches	215
Passing Routing Protocols	218
Part IV: Troubleshooting
Chapter 17: ETEMS Troubleshooting	223
Possible Problems and Solutions	223
Appliance Unreachable	224
Appliance Configuration	225
Pushing Configurations	226
Status Indicators	226
Software Upgrades	227
Pinging the Management Port	227
Retrieving Appliance Log Files	228
Viewing Diagnostic Data	230
Viewing Statistics	230
Viewing Port and Discard Status	232
Exporting SAD and SPD Files	232
CLI Diagnostic Commands	233
Working with the Application Log	234
Viewing the Application Log from within EncrypTight	234
Sending Application Log Events to a Syslog Server	235
Exporting the Application Log	235
Setting Log Filters	235
Other Application Log Actions	236
Chapter 18: ETPM and ETKMS Troubleshooting	237
Learning About Problems	237
Monitoring Status	237
Symptoms and Solutions	238
Policy Errors	239
Status Errors	240
Renew Key Errors	240
Viewing Log Files	241
ETPM Log Files	241

8	EncrypTight User Guide

Page 7

Image 7

Black Box ET0100A, ET1000A, ET0010A, EncrypTight manual Policy Design Examples 211

EncrypTight, ET0100A, ET0010A, ET1000A specifications

The Black Box ET1000A, ET0010A, EncrypTight, and ET0100A are advanced solutions designed for secure data transmission and network management, catering to modern enterprise needs. These tools integrate cutting-edge technologies to enhance connectivity, security, and efficiency within various environments.

The Black Box ET1000A is primarily a high-performance Ethernet over Twisted Pair (EoTP) solution. It enables users to extend Ethernet signals over long distances using existing twisted-pair cabling without sacrificing speed or reliability. With support for speeds up to 100 Mbps, this device is ideal for organizations looking to upgrade their existing infrastructure without extensive rewiring. Key features include plug-and-play installation, which simplifies deployment, and versatile compatibility with both legacy and modern ethernet networks.

The ET0010A model takes connectivity a step further by providing seamless integration with fiber optics. This device supports transmission distances that far exceed traditional copper solutions, making it a perfect fit for larger facilities or multi-building campuses. Its built-in Ethernet switch enhances network efficiency by providing multiple ports for device connectivity, thus facilitating greater data flow.

EncrypTight technology is a notable feature across these Black Box models, offering advanced encryption capabilities to safeguard sensitive data during transmission. With military-grade encryption protocols, EncrypTight ensures that corporate information remains secure from potential eavesdroppers. This technology is essential for businesses operating in regulated industries or that handle confidential customer information.

The ET0100A model combines intelligence with monitoring features to provide users with comprehensive network insights. It boasts built-in diagnostic tools that enable IT professionals to troubleshoot issues quickly and efficiently. Additionally, it features real-time performance monitoring, allowing users to analyze bandwidth usage and optimize network performance accordingly.

In conclusion, the Black Box ET1000A, ET0010A, EncrypTight, and ET0100A are powerful tools that embody the latest in data transmission and network management technologies. With their unique features—including extended connectivity capabilities, robust encryption technologies, and real-time monitoring solutions—these devices cater to the growing demands of businesses seeking to enhance their network infrastructure while ensuring robust security and efficiency. Integrating these tools into any organization’s operations can fundamentally improve both performance and data protection, making them indispensable in today’s digital landscape.

Contents

EncrypTight User Guide Table of Contents Managing EncrypTight Users Provisioning Appliances Getting Started with Etems Managing Appliances 117 Creating Vlan ID Ranges for Layer 2 Networks Managing Key Management SystemsManaging IP Networks Managing Network Sets Policy Design Examples 211 Modifying the Etkms Properties File Using Enhanced Security Features Etep Configuration 299 302 Index 343 About This Document Preface Contacting Black Box Technical Support Part I EncrypTight Installation and Maintenance EncrypTight User Guide Distributed Key Topologies EncrypTight Overview Layer 2 Ethernet topologies Network topologiesTopology Description Layer 3 IP topologies Related topics EncrypTight Elements Policy Manager EncrypTight Element Management SystemKey Management System Single Etkms for multiple sites Policy Enforcement Point Shared keys Point-to-Point Negotiated Topology Layer 2 Point-to-Point Deployment Security within EncrypTight Secure Key Storage within the Etkms Secure Communications Between Devices EncrypTight Component Connections EncrypTight Deployment Planning Etpm to Etkms Connections Management Station Connections Etpm and Etkms on Different Subnetworks Etpm and Etkms on the Same SubnetworkEtpm and Etkms in Layer 3 IP Policies Out-of-band Etkms management in an Ethernet network External Etkms to Etkms Connections Connections for Backup ETKMSs Etkms to Etkms Connections in Ethernet Networks Connecting Multiple ETKMSs in an IP Network Etkms to PEP Connections in IP Networks Etkms to PEP Connections In-line Etkms to PEP communications in IP networks Etkms to PEP Connections in Ethernet Networks IPv6 Address Support Network Clock Synchronization IPv6 address representations Certificate SupportAddress Format Address Representation Network Addressing Options Network Addressing for IP NetworksAddressing Method Description Related topics Before You Start Installation and Configuration Third party management station software Hardware RequirementsSoftware Requirements EncrypTight management station requirements Firewall Ports EncrypTight Software InstallationInstalling EncrypTight Software for the First Time To install the EncrypTight software Starting EncrypTight Uninstalling EncrypTight SoftwareTo uninstall EncrypTight Upgrading to a New Version of EncrypTight Related topic Management Station ConfigurationExiting EncrypTight To start Etems Etems communications options To enable the Microsoft FTP Server serviceSecuring the Management Interface Enabling the Microsoft FTP Server Etkms server connections Installing ETKMSsConfiguring ETKMSs Configuring the Syslog Server About Local ETKMSs Basic Configuration for Local ETKMSsAdding a Local Etkms To launch a local Etkms Launching and Stopping a Local EtkmsStarting the Local Etkms Automatically To add a local Etkms Maintaining the start.bat file Configuring External ETKMSsPrior to configuring the batch file do the following To configure the batch file To log into the Etkms Changing the Admin PasswordTo change the admin password Logging Into the Etkms To change the root password Changing the Root Password IPv4 Configure the Network ConnectionTo configure the network connection and hostname Static IP Netmask Default Gateway IP address IPv6 To configure the network interfaceTo set the hostname and IPv6 default gateway address To set the default DNS server and configure the hosts file To set up time synchronization Configure Time and Date PropertiesTo set the time zone Field Description Ntpq -p command outputTo restart the NTP daemon To check the time source connection status Check the Status of the Hardware Security Module Starting and Stopping the Etkms Service Checking the Status of the Etkms Configuring Syslog Reporting on the ETKMSsTo check the status of the Etkms service To configure syslog reporting on a Etkms Policy Enforcement Point Configuration Etep Throughput Speeds Default User Accounts and PasswordsPasswords to change Managing Licenses Choose Tools Put License Installing LicensesTo install a license on the Etep To enter EncrypTight licenses Upgrading Etep Licenses Next StepsUpgrading Licenses Upgrading the EncrypTight License Next Steps Installation and Configuration EncrypTight User Guide Working with EncrypTight User Accounts Managing EncrypTight Users Task Administrator User Configuring EncrypTight User AuthenticationEncrypTight account types and privileges Login Session Inactivity Timer Password Authentication and ExpirationCommon Access Card Authentication DoD Login Banner Parameter User Name Password Login preferences default settingsEncrypTight user name and password conventions Preference Setting To modify an EncrypTight user account Changing an EncrypTight User PasswordTo change a password To add an EncrypTight user account Relationship between EncrypTight users and Etep users Example 1 Default EncrypTight user and default Etep userExample 2 Setting up new EncrypTight and Etep users How EncrypTight Users Work with Etep Users Example 3 Adding a new Etep user to EncrypTight Working with the EncrypTight Workspace Maintenance TasksAbout the EncrypTight Workspace To save a workspace to a new location Saving a Workspace to a New LocationOn the File menu, click Save Workspace To To load an existing workspace Loading an Existing Workspace To delete a workspace Moving a Workspace to a New PCDeleting a Workspace To move a workspace to a new PC Schedule the Upgrade Installing Software Updates Prepare Etpm Status and Renew Keys Upgrade the EncrypTight SoftwareVerify Etkms Status and Deploy Policies To deploy policies Upgrade PEP Software On the Tools menu, click Upgrade Software To upgrade software on the PEPsFTP server site information for appliance software upgrades To check the status of the PEPs Click Edit Multiple Configurations Software VersionChange the PEP Software Version and Check Status To change the software version of the PEPs Upgrading External ETKMSs Return Status Refresh and Key Renewal to Original SettingsTo stop and remove the current Etkms software To start the Etkms software To install the new Etkms softwareTo configure the new Etkms software To mount the Cdrom drive Maintenance Tasks EncrypTight User Guide Etems Part II Working with Appliances using EncrypTight User Guide Getting Started with Etems Defining Appliance ConfigurationsEtems Quick Tour Interface configuration for a new ET1000A appliance Pushing Configurations to Appliances Upgrading Appliance Software Comparing Configurations Maintenance and Troubleshooting Policy and Certificate Support Understanding the Etems Workbench Editors Appliance Manager perspective Views Etems toolbar ToolbarsPerspectives To open a perspective Appliance Manager toolbar Status IndicatorsCertificate Manager toolbar EncrypTight User Types Appliance status indicatorsStatus Indicator Description Understanding Roles To change communication preferences Function Administrator OpsModifying Communication Preferences Appliance roles for ETEPs General communication preferences Strict authentication communication preferencesPreference Description Policy Extensions Ignore CRL accessEnable Certificate CRL File Location Provisioning Basics Provisioning Appliances New Appliance editor for the ET1000A To add a new appliance Adding a New Appliance On the Tools menu, click Put Configurations Saving an Appliance ConfigurationSaving appliance configurations To push Etems configurations to appliances Viewing Appliance Status Put configuration statusResult Description Appliances view To configure automatic status checking Etems To apply a filter to the appliances in the Appliances view Filtering Appliances Based on Address Etep User Roles Rebooting AppliancesTo reboot appliances Appliance User Management Appliance roles for ETEPs v 1.4 and later Configuring the Password Enforcement PolicyDefault user names and passwords on the Etep Role Default user name Default password Strong Password Policy Conventions Default Password Policy ConventionsUser Name Conventions Upgrading Software Removing ETEPs From Service On the Tools menu, click Appliance User Add User Managing Appliance UsersAdding Etep Users To add a user to the Etep Default password Strong password Parameter Policy Password policy values On the Tools menu, click Appliance User Modify User Modifying Etep User CredentialsDeleting Etep Users To modify Etep user credentials To delete a user from the Etep Viewing Etep UsersOn the Tools menu, click Appliance User Delete User On the Edit menu, click Default Configuration Working with Default ConfigurationsCustomizing the Default Configuration To customize the default configuration Provisioning Large Numbers of Appliances Restoring the Etems Default ConfigurationsTo return the default values to factory settings On the Edit menu, click Default Configurations Importing Configurations from a CSV File Creating a Configuration Template Attribute Description To import appliance configurations to Etems Remote and local keywords and attributes Importing Remote and Local Interface Addresses Changing Configuration Import Preferences To shut down the Etep Shutting Down AppliancesChecking the Time on New Appliances Shutdown operational codes Managing Appliances Editing Configurations Changing the Address on the Appliance Changing the Management IP AddressTo change the management IP address on the appliance Change Management IP window Related topics Changing the Address in Etems Operation failed message in response to management IP change Changing the Date and Time To change the date and time Changing Settings on a Single ApplianceChanging Settings on Multiple Appliances To edit the configuration of a single appliance Deleting Appliances To update an appliance setting on multiple appliances To delete appliances Connecting Directly to an ApplianceConnecting to the Command Line Interface Upgrading Appliance Software 124 EncrypTight User Guide To upgrade software 126 EncrypTight User Guide Checking Upgrade Status Restoring the Backup File SystemCanceling an Upgrade What to do if an Upgrade is Interrupted To restore the appliance file system from a backup copy Part III Using Etpm to Create Distributed Key Policies 130 EncrypTight User Guide To open Etpm Getting Started with EtpmOpening Etpm About the Etpm User Interface Etpm perspective Component Chapter EncrypTight Components View Editors To edit an element from the policy view Etpm Status IndicatorsStatus indicators Policy View Sorting and Using Drag and Drop Etpm toolbar To enable or disable automatic status checkingEtpm Toolbar Etpm Status Refresh Interval IP Policies About Etpm PoliciesEthernet Policies Policy generation and distribution Policy Generation and Distribution Key generation with one Etkms Key generation with multiple ETKMSs Creating a Policy An Overview Network Set B Network aNetwork B Network Set a To create a policy 144 EncrypTight User Guide EncrypTight User Guide 145 146 EncrypTight User Guide Provisioning PEPs Managing Policy Enforcement Points Configuration Description EncrypTight PEP configurationAdding a New PEP in Etems On the Advanced tab, select Enable Sntp Client On the Features tab, select Enable passing TLS traffic To add a new PEP using Etpm Adding a New PEP Using EtpmAdding Large Numbers of PEPs Editing PEPs Pushing the ConfigurationTo push Etems configurations to PEPs To edit a PEP’s configuration Editing PEPs From Etpm To change the NTP settings for multiple PEPsSelect Edit Multiple Configurations Sntp Client Editing Multiple PEPs To change the IP address of a PEP Deleting PEPsChanging the IP Address of a PEP Changing the PEP from Layer 3 to Layer 2 Encryption To delete PEPs Etkms connections Managing Key Management Systems To add an Etkms Adding ETKMSs To edit an existing Etkms Editing ETKMSsDeleting ETKMSs Etkms entries To delete an existing Etkms Adding Networks Managing IP Networks Address Network Mask To add a networkNetwork entries Network IP Grouping Networks into Supernets Advanced Uses for Networks in Policies Using Non-contiguous Network Masks IP Address Network Mask Networks definitions Deleting Networks Editing NetworksTo edit an existing network To delete a network Managing IP Networks 166 EncrypTight User Guide Network Sets Managing Network Sets IP address Mask 40.32.21.0 255.255.255.0 Types of Network SetsIP address Mask 40.55.11.0 255.255.255.0 IP address Mask Network set for a collection of networks To add a Network Set Adding a Network SetNetwork Set fields Mode Key ManagementSystem Network Addressing Network Set editor Importing Networks and Network Sets Networks and network sets import document format in Excel To edit a Network Set Editing a Network SetDeleting a Network Set To import networks and network sets into Etpm To delete an existing network set Managing Network Sets 176 EncrypTight User Guide Adding a Vlan ID Range Creating Vlan ID Ranges for Layer 2 NetworksTo add a new Vlan ID Range Lower Vlan ID Vlan ID range entriesUpper Vlan ID To delete an existing Vlan ID range Editing a Vlan ID RangeDeleting a Vlan ID Range To edit a Vlan ID range 180 EncrypTight User Guide Policy Concepts Creating Distributed Key Policies Schedule for Renewing Keys and Refreshing Policy Lifetime Policy Priority Encapsulation Policy Types and Encryption MethodsLayer 2 Ethernet payload encryption Aria Encryption Encryption and Authentication AlgorithmsTo use Aria in an encryption policy, do the following Using Encrypt All Policies with Exceptions Addressing ModeKey Generation and ETKMSs Encrypt all policy with exceptions Policy Size and Etep Operational LimitsPolicy Policy Type Priority Action Protocol Covered Minimizing Policy Size To add a new Layer 2 mesh policy Adding Layer 2 Ethernet Policies Layer 2 Mesh policy entries Layer 2 Mesh policy editor Adding a Hub and Spoke Policy Adding Layer 3 IP Policies Hub and spoke policy entries To add a new hub and spoke policy Size IPSecAddressing Minimize Policy Hub and spoke policy editor To add a new mesh policy Adding a Mesh Policy Mesh policy entries Specifies a method for reducing the policy size Mesh policy editor Multicast network example Adding a Multicast Policy Multicast policy entries To add a multicast policy Network Multicast Multicast policy editor To add a point-to-point policy Adding a Point-to-point Policy Point-to-point policy entries Point B Point aNetwork Set Point a Ports Point-to-point policy editor Adding Layer 4 Policies Verifying Policy Rules Before Deployment Policy DeploymentTo create a new Layer 4 policy To verify policies Setting Deployment Confirmation PreferencesTo enable or disable the deployment warning Deploying Policies Editing policies Editing a PolicyDeleting Policies To edit an existing policy To delete all policies To delete an existing policySelect Tools Clear Policies Basic Layer 2 Point-to-Point Policy Example Policy Design Examples Setting PEP Layer 2 Ethernet Policy Using Vlan IDsPoint-to-point Layer 2 encryption policy Policy 3 Discard All Other Policy 2 Partner and Partner Portal Server Encrypt Traffic Between Regional Centers Complex Layer 3 Policy Example Network sets for mesh policy Encrypt Traffic Between Regional Centers and BranchesEncrypt all mesh policy Region a hub and spoke policy Network sets for the hub and spoke policies Field Region B hub and spoke policyRegion C hub and spoke policy Region D hub and spoke policy Pass protocol 88 in the clear mesh policy Passing Routing Protocols EncrypTight User Guide 219 Policy Design Examples 220 EncrypTight User Guide Part IV Troubleshooting 222 EncrypTight User Guide Possible Problems and Solutions Etems Troubleshooting Preferences Symptom Explanation and possible solutionsConfig to Appliance Appliance Unreachable Disable-trusted-hosts CLI command Appliance Configuration Appliance Tools Reboot Pushing ConfigurationsCompare Config to Appliance . Do one of the following To ping the management port Software UpgradesAbout upgrades show system-log and show upgrade Status Pinging the Management Port Retrieving Appliance Log Files Tools preferences To change the default ping tool On the Tools menu, click Retrieve Appliance Logs To retrieve log files from an applianceFTP server site information for log retrieval Viewing Statistics Viewing Diagnostic Data Statistic Description Etep Statistics Exporting SAD and SPD Files Viewing Port and Discard Status To access the appliance CLI CLI Diagnostic Commands Viewing the Application Log from within EncrypTight Working with the Application LogTo view the log information Sending Application Log Events to a Syslog Server Setting Log FiltersExporting the Application Log Log File Actions Other Application Log ActionsIcon Description Learning About Problems Etpm and Etkms TroubleshootingMonitoring Status Etpm status problems and solutions Symptoms and Solutions Etep PEPs, see the EncrypTight User Guide Policy Errors Renew Key Errors Status Errors Etpm Log Files Viewing Log FilesEtkms Log Files Etkms Server Operation Etkms Troubleshooting ToolsLinux Commands Command Description Shutting Down or Restarting an External Etkms PEP Troubleshooting ToolsResetting the Admin Password Optimizing Time Synchronization To view statistics To disable the Sntp client on multiple PEPsStatistics Etep PEP Policy and Key Information To export SAD or SPD files from Etep PEPs Troubleshooting PoliciesReplacing Licensed ETEPs Checking Traffic and Encryption Statistics Placing PEPs in Bypass Mode Solving Policy ProblemsViewing Policies on a PEP Expired Policies Allowing Local Site Exceptions to Distributed Key Policies Cannot Add a Network Set to a Policy Solving Network Connectivity Problems Modifying EncrypTight Timing Parameters Certificate Implementation ErrorsCannot Communicate with PEP Invalid Certificate Error Etkms Boot ErrorInvalid Parameter in Function Call Enter strict-client-authentication disable To disable strict authentication on ETEPs Etpm and Etkms Troubleshooting 252 EncrypTight User Guide Part V Reference 254 EncrypTight User Guide About the Etkms Properties File Modifying the Etkms Properties File Digital Certificate Configuration Hardware Security Module ConfigurationLogging Setup Peer Etkms and Etpm Communications Timing Base Directory for Storing Operational State Data PEP Communications Timing Policy Refresh Timing PEP Communications Timing Page About Enhanced Security Features Using Enhanced Security Features About Strict Authentication Order of Operations Prerequisites for Using Certificates with EncrypTightHow to Reference Prerequisites Certificate Information Setting DescriptionDistinguished name information Usage, you type this string as follows Using Certificates in an EncrypTight System To change the EncrypTight keystore password Changing the Keystore PasswordChanging the EncrypTight Keystore Password Changing the Etkms Keystore Password Changing the Keystore Password on a Etkms Restart the Etkms Service To start the Etkms service Changing the Keystore Password on a Etkms with an HSMChanging the Password Used in the Etkms Properties File To change the password listed in the Etkms properties file To configure the certificate policies extension for ETEPs Configuring the Certificate Policies ExtensionClick Enable Policy Extensions Parameter Description To configure certificate policy extensions for ETKMSsClick Enable Certificate Policy Extensions Etkms Certificate Policies Entries EncrypTight User Guide 271 Generating a Key Pair Working with Certificates for EncrypTight and the ETKMSs To create the certificate request Keytool genkeypair CommandRequesting a Certificate To generate a key pair Keytool Parameters for Importing a CA Certificate To install a CA certificateImporting a CA Certificate Importing a CA Certificate Reply Working with Certificates and an HSM Configuring the HSM for KeytoolExporting a Certificate Generating a Key Pair for use with the HSM Importing CA Certificates into the HSM Generating a Certificate Signing Request for the HSM Working with Certificates for the ETEPsImporting Signed Certificates into the HSM To start the Certificate Manager do one of the following Understanding the Certificate Manager Perspective Working with External Certificates Certificate Manager WorkflowObtaining External Certificates To install an external certificate Installing an External CertificateTo obtain a CA certificate from a CA Requesting a Certificate Working with Certificate Requests 282 EncrypTight User Guide To view a pending certificate signing request Installing a Signed CertificateViewing a Pending Certificate Request Certificate usage To set certificate request preferences Canceling a Pending Certificate RequestSetting Certificate Request Preferences To cancel a pending certificate request Certificate request preference fields Managing Installed Certificates Viewing a Certificate To export an installed certificateExporting a Certificate To delete an external certificate Validating Certificates Using CRLsValidating Certificates Deleting a Certificate To use CRLs with the Etkms Configuring CRL Usage in EncrypTight and the ETKMSsConfiguring CRL Usage on ETEPs To use CRLs with the EncrypTight software To view CRLs Validating Certificates Using OcspTo install a CRL on the Etep Handling Revocation Check Failures Options Description To set up Ocsp in EncrypTightClick Enable Online Certificate Status Protocol Ocsp EncrypTight Ocsp Options Ocsp Settings To set up Ocsp in the EtkmsTo set up Ocsp on the ETEPs Click Enable Ocsp To enable strict authentication on PEPs Enabling and Disabling Strict AuthenticationTo enable strict authentication in the EncrypTight software To enable strict authentication on the Etkms Removing Certificates To disable strict authenticationClear the Enable Strict Client Authentication box To disable strict authentication from the command line To remove certificates Using a Common Access CardSelect Tools Clear Certificates Enabling Common Access Card Authentication Configuring User Accounts for Use With Common Access CardsTo add common names to the Etkms To enable CAC Authentication in EncrypTight To enable CAC Authentication on the EtepClick XML-RPC Certificate Authentication To enable CAC Authentication on the Etkms Handling Common Name Lookup Failures To specify how to handle common name failures Using Enhanced Security Features 298 EncrypTight User Guide Etep Configuration Product Family and Software Version Identifying an ApplianceAppliance Name To configure appliance interfaces Interface ConfigurationThroughput Speed Management Port Addressing ET0100A interfaces configuration Related topics IPv4 management port addressing IPv4 Addressing IPv6 management port addressing IPv6 Addressing Link speeds on the management port Auto-negotiation All Ports Transparent Mode Remote and Local Port SettingsLink speeds on the local and remote ports Policy Type Mode of operation When to use transparent modeLocal and Remote Port IP Addresses Default Gateway Transmitter EnableIP Address and Subnet Mask Dhcp Relay IP Address Transmitter Enable settings on the Etep Ignore DF Bit Reassembly ModeIgnore DF Bit settings Reassembly mode settings Trusted host list Trusted Hosts Outbound host Appliance Editor Tab Inbound trusted host protocols used by EncrypTightTo add a trusted host Protocol System Information Snmp Configuration Under Community Strings, click Add Community StringsSnmp system information To define a community name Traps reported on the Etep TrapsTrap Description SNMPv2 Trap Hosts To configure a trap hostSNMPv3 SNMPv3 Configuration Related topics Retrieving and Exporting Engine IDs Generating the Engine IDTo retrieve engine IDs Viewing SNMPv3 Engine IDs Related topics Configuring the SNMPv3 Trap Host Users SNMPv3 trap host users SNMPv3 Trap Host configuration To configure a trap host user Etep Logging tab Logging Configuration Log facilities Log Event SettingsFacility Description Under Syslog Servers, click Add Defining Syslog ServersLog priorities To define a syslog server Internals logs Log File ManagementLog file sizes Log name File size Log files extracted from the Etep Related topics Advanced Configuration Packet Payload Size Layer 2 Etep Layer 3 Etep Path Maximum Transmission UnitValid Pmtu ranges on Etep appliances Pmtu and fragmentation behavior on the Etep Non IP Traffic Handling CLI Inactivity TimerPassword Strength Policy Non IP traffic handling configuration XML-RPC Certificate Authentication IKE Vlan Tags SSH Access to the EtepSntp Client Settings To configure the NTP client IKE Vlan Tags Features ConfigurationOcsp Settings Certificate Policy Extensions Encryption algorithms Authentication algorithms Fips ModeEnabling Fips Mode Fips approved encryption and authentication algorithms Operational Notes Policy Type Action upon entering Fips modeDisabling Fips Verifying Fips Status on the Etep EncrypTight settings EncrypTight SettingsSetting Definition Encryption policy settings Encryption Policy SettingsWorking with Policies Creating Layer 2 Point-to-Point Policies Using EncrypTight Distributed Key PoliciesTo launch Etpm from Etems Etep Policy tab Using Group IDs Using Preshared Keys for IKE AuthenticationSelecting a Role Parameter Value Selecting the Traffic Handling ModeHow the Etep Encrypts and Authenticates Traffic IKE Phase 2 Parameters Interfaces Factory DefaultsInterfaces defaults Interfaces Default Setting Snmp defaults Trusted hosts defaultsTrusted Hosts Policy LoggingAdvanced Features Default Setting FeaturesHard-coded Settings Features defaults Numerics Index Index EncrypTight User Guide 345 Etpm See also HSM Https TLS 348 EncrypTight User Guide EncrypTight User Guide 349 350 EncrypTight User Guide See also TLS trap configuration 352 EncrypTight User Guide Black Box Tech Support FREE! Live /7

Chapter 16: Policy Design Examples

211

Part IV: Troubleshooting

Chapter 17: ETEMS Troubleshooting

223

Chapter 18: ETPM and ETKMS Troubleshooting

237

EncrypTight, ET0100A, ET0010A, ET1000A specifications