Enterasys Networks CSX5500, CSX6000 Configuring Encryption, Configuration, Select Add a Resource

CONFIGURING ENCRYPTION

OVERVIEW

The CyberSWITCH encryption option provides 56-bit data encryption through two different implementations:

•IP (or Network Layer) Security

•PPP (or Link Layer) Encryption

These implementations use the Data Encryption Standard (DES) algorithm. DES provides data security for transmissions over the WAN between encryption devices, either through PPP or frame relay connections, or over unprotected media, such as the Internet.

If you have purchased the CyberSWITCH encryption option, you will need to properly configure the feature to make it operational. This involves configuring the following through CFGEDIT:

•An encryption adapter (through Resources)

•Security Associations and/or Authentication Headers (through Options). These are for IP secu- rity only.

•Link Layer Encryption parameters (through Security). These are for PPP Encryption only.

Note: If you have an existing CyberSWITCH without encryption, you may upgrade to an encrypted system. To do this, you must install the proper adapter and encryption-capable software, then configure the encryption parameters. However, take note that this is a one- way process! (You cannot “downgrade” an encryption-capable system to a non- encryption software release).

If CyberSWITCH encryption is new to you, we suggest you review the Background Information and Configuration Elements sections before attempting configuration. Then continue with the following configuration process.

CONFIGURATION

CONFIGURING AN ENCRYPTION ADAPTER

USING CFGEDIT

1.From the CFGEDIT Main Menu, select Physical Resources.

2.Select Resource.

3.Select Add a Resource.

4.From the list of resource types, choose DES_RSA.

5.Identify the slot number containing the added encryption adapter.

Note: Only one encryption adapter is allowed per system.

USING MANAGE MODE

You may not add an encryption adapter via Manage Mode.