Enterasys Networks CSX5500, CSX6000, CSX7000 For IP Layer encryption, For Link Layer encryption

USER’S GUIDE

MULTIPLE MAC/IP ADDRESSES

For backup purposes, you may want to consider using the multiple MAC or multiple IP address feature to set up redundant configurations to use in conjunction with encryption. In such configurations, you must be sure that all CyberSWITCH nodes have the same or comparable Security Associations. When multiple paths through different secure gateways exist, you must be sure such paths are properly protected.

PPPCOMPRESSION

For IP Layer encryption:

We do not recommend using PPP compression if you anticipate a large percentage of encrypted traffic across your network. PPP protocol runs at a lower layer than Internet Protocol; therefore, any data compression performed on ESP datagrams is attempted after the packet has been encrypted. Unfortunately, well-encrypted data is not compressible.

For Link Layer encryption:

PPP compression is available. This compression takes place before the actual encryption.

240 CyberSWITCH