EncrypTight Enforcement Point (ETEP) Installation Guide
EncrypTight acts as a transparent overlay that
integrates easily into any existing network
architecture, providing encryption rules and keys
to EncrypTight Enforcement Points.
EncrypTight consists of a suite of tools that performs various tasks of
appliance and policy management, including Policy Manager (PM),
Key Management System (KMS), and EncrypTight Enforcement Points
ET0010A
ET0100A
ET1000A
(ETEPs).
Customer
Support
Information
Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500)
FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746
Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018
Web site: w ww.blackbox.com • E-mail : info@blackbox.com
Table of Contents
About This Document................................................................................................................. 7
Contacting Black Box Technical Support ............................................................................................... 7
The ET VSE-series Installation Guide describes how to cable and install the Black Box™ ETEP
EncrypTight Enforcement Points.
Intended audience
This document is intended for use by network technicians and security administrators who are familiar
with setting up and maintaining network equipment.
Assumptions
This document assumes that its readers have an understanding of the following:
● Basic principles of TCP/IP networking, including IP addressing, switching and routing.
● Personal computer (PC) operation and common PC terminology
● Terminal emulation software and FTP operations.
Conventions used in this document
BoldIndicates one of the following:
● a menu title
● the name of a command
● the name of a parameter
ItalicsIndicates a new term
Monospaced
Monospaced bold
Indicates machine text, such as terminal output or a file name
Indicates a command to be issued by the user
Contacting Black Box Technical Support
Contact our FREE technical support, 24 hours a day, 7 days a week:
Phone724-746-5500
Fax724-746-0746
e-mailinfo@blackbox.com
Web sitewww.blackbox.com
ETEP Installation Guide7
About This Document
8ETEP Installation Guide
1Product Overview
This section includes the following topics:
● ETEP Introduction
● ET0010A Physical Description
● ET0100A Physical Description
● ET1000A Physical Description
● Features
● Specifications
ETEP Introduction
The EncrypTight Enforcement Point (ETEP) Variable Speed Encryptors (VSEs) are purpose-built
encryption appliances that provide multi-layer data protection. With straightforward setup and
configuration, the ETEP has the flexibility to provide Ethernet frame encryption for Layer 2 networks, IP
packet encryption for Layer 3 networks, and Layer 4 data payload encryption for MPLS networks.
The ETEP’s variable speed capability lets you enable just the bandwidth you need, using a software
license. As your bandwidth needs increase, simply update your license. No need to replace your
hardware. The ET VSE-series offer full-duplex, line rate encryption from 3 Mbps to 1 Gbps using the
AES-256 encryption algorithm.
ETEP Installation Guide9
Product Overview
Figure 1Multipoint Ethernet Encryption using EncrypTight
The ETEP interfaces with network equipment through two data ports, the local port and the remote port.
Unencrypted traffic that originates from a trusted, local network is received on the local port, where the
ETEP applies security processing to it. The encrypted traffic is then sent from the remote port to an
untrusted network such as the Internet. At the opposite endpoint the process is reversed. Encrypted traffic
is received on the ETEP remote port and decrypted. Then the decrypted traffic is sent from the local port
to the destination.
The ETEP is managed in-line or out-of-band through a dedicated Ethernet management interface. The
ETEP can be managed in two ways, depending on the size and complexity of your deployment:
● Command Line Interface (CLI)
The CLI is all you need to manage a standalone deployment, typically a pair of ETEPs. CLI
commands are available to perform initial setup of the ETEP, along with diagnostic and
troubleshooting commands. In Layer 2 deployments, you can configure the ETEPs for operation and
create Layer 2 point-to-point policies using the CLI commands.
● EncrypTight Policy and Key Manager™
EncrypTight is an application for managing group encryption deployments. EncrypTight separates the
functions of policy management, key generation and distribution, and policy enforcement. As a result,
multiple ETEPs can use common keys. This works for complex mesh, hub and spoke, and multicast
networks, as well as in straightforward point-to-point topologies. Figure 1 shows ETEPs deployed in a
multipoint Ethernet network.
EncrypTight includes the following components:
● EncrypTight Element Management System (ETEMS) for appliance configuration and management
● EncrypTight Policy Manager (ETPM) for policy definition and deployment
● EncrypTight Key Management System (ETKMS) for key generation and distribution
10ETEP Installation Guide
ET0010A Physical Description
The ET0010A is a rack-mountable encryptor that can run at speeds ranging from 3-50 Mbps. It has three
data ports on the front panel labeled Remote, Local, and Aux1. The following sections describe the
ET0010A connectors and LED indicators.
Front Panel Connectors
The ET0010A front panel connectors are shown in Figure 2.
Figure 2ET0010A Front PanelConnectors
ET0010A Physical Description
Elements in Figure 2:
1)RS-232 management port
2)Ethernet management port
3)Auxiliary port (not enabled in this release)
4)Remote port (encrypted traffic):
5)Local port (clear traffic):
ETEP Installation Guide11
Product Overview
Status Indicators
The ET0010A status indictors are shown in Figure 3. The status indications are described in Table 1.
Figure 3ET0010A Status Indicators
Elements of Figure 3:
1)Power LED
2)Alarm LED
3)Status indicators
4)Link indicators
The following table describes how to interpret the ET0010A status indicators.
Table 1 ET0010A Status Indicators
Indicator LightStateIndication
Power (green)OffUnit is powered off.
OnUnit is powered on.
10/100 link status
a
(green)
Gigabit link status
(amber)
Alarm (green)OffNormal operation.
Status (1,2,3,4)OffUnit is up and operational.
a
OffLoss of signal on the 10/100 link.
OnThe 10/100 link is up but no traffic is passing over the link.
BlinkingIndicates the presence of traffic on the 10/100 link.
OffLoss of signal on the Gigabit link.
OnThe Gigabit link is up but no traffic is passing over the link.
BlinkingIndicates the presence of traffic on the Gigabit link.
OnThe unit is in an error state. This occurs when the
diagnostics detect a boot failure, a critical error threshold is
exceeded, or a FIPS test fails when the ETEP is in FIPS
mode.
OnDisplays diagnostic codes during boot up.
a. The link status LEDs are on the remote and local data ports, Ethernet management port, and Aux1 port.
12ETEP Installation Guide
Rear Panel
The ET0010A rear panel and external power supply are shown in Figure 4.
Figure 4ET0010A Rear Panel and External Power Supply
Elements of Figure 4:
1)External power supply power connector
2)Rear panel power connector
ET0100A Physical Description
ET0100A Physical Description
The ET0100A is a rack-mountable encryptor that can run at speeds ranging from 100–250 Mbps. The
following sections describe the connectors and LED indicators that appear on the front and rear panels of
the ET0100A.
ETEP Installation Guide13
Product Overview
Front Panel Connectors
The ET0100A front panel connectors are shown in Figure 5.
Figure 5ET0100A Front Panel Connectors
Elements of Figure 5:
1)10/100 Ethernet management port
2)RS-232 port
3)Remote port (encrypted traffic)
4)Local port (clear traffic)
LED Indicators
The ET0100A LED indictors are shown in Figure 6. The LED indications are described in Table 2.
Figure 6ET0100A LED Indicators
Elements of Figure 6:
1)Diagnostic display
2)Alarm LED
3)Link indicators
4)Power indictor
14ETEP Installation Guide
ET0100A Physical Description
The following table describes how to interpret the LEDs on the ET0100A front panel.
Table 2 ET0100A Front Panel LED Indicators
Indicator LightStateIndication
Power (green)OffUnit is powered off.
OnUnit is powered on.
Ethernet port status
a
(green)
Gigabit link status (amber)aOffLoss of signal on the Gigabit link.
Alarm (green)OffNormal operation.
Diagnostic code displayOnDisplays diagnostic codes during boot up. After boot up, it
OffLoss of signal on the 10/100 link.
OnThe link is up but no traffic is passing over the link.
BlinkingIndicates the presence of traffic on the 10/100 link.
OnThe Gigabit link is up but no traffic is passing over the link.
BlinkingIndicates the presence of traffic on the Gigabit link.
OnThe unit is in an error state. This occurs when the
diagnostics detect a boot failure, a critical error threshold is
exceeded, or a FIPS test fails when the ETEP is in FIPS
mode.
reflects the operational state of the appliance and error
conditions.
a. The link status LEDs are on the remote and local data ports, and Ethernet management port.
Rear Panel
The ET0100A rear panel is shown in Figure 7.
Figure 7ET0100A Rear Panel
Elements of Figure 7:
1)Power receptacle
2)Fan
3)Product ID label
ETEP Installation Guide15
Product Overview
ET1000A Physical Description
The ET1000A is a rack-mountable 1 Gbps encryptor with dual power supplies. It can operate at speeds
ranging from 500 Mbps–1 Gbps. The following sections describe the ET1000A connectors and LED
indicators.
Front Panel Connectors
The ET1000A front panel connectors are shown in Figure 8.
Figure 8ET1000AFront Panel Connectors
Elements of Figure 8:
1)RS-232 serial port
2)10/100 Ethernet management port
3)Gigabit Ethernet management port (not enabled in this release)
4)Aux1 port (not enabled in this release)
5)Remote port (encrypted traffic)
6)Local port (clear traffic)
LED Indicators
The ET1000A LED indicators are shown in Figure 9. The LEDs are described in Tab l e 3.
16ETEP Installation Guide
Figure 9ET1000A LED Indicators
Elements of Figure 9:
1)Power LED
2)Alarm LED
3)Diagnostic display
4)Link indicators: 10/100 Ethernet management port
ET1000A Physical Description
5)Link indicators: Gigabit management port
6)Link indicators: Aux1, Remote and Local ports
7)Power supply status LEDs
Table 3 describes how to interpret the LEDs on the ET1000A front panel.
Table 3 ET1000A Front Panel LED Indicators
Indicator LightStateIndication
Power (green)OffUnit is powered off.
OnUnit is powered on.
Alarm (green)OffNormal operation.
On The unit is in an error state. This occurs when the
diagnostics detect a boot failure, a critical error threshold is
exceeded, or a FIPS test fails.
Diagnostic code displayOnDisplays diagnostic codes during boot up. After boot up, it
10/100 link status (green)OffLoss of signal on the 10/100 link.
OnThe 10/100 link is up but no traffic is passing over the link.
BlinkingIndicates the presence of traffic on the 10/100 link.
Gigabit link status (green)
Power supply statusOffPower supply is not operational. Possible causes include
a
OffLoss of signal on the Gigabit link.
On The Gigabit link is up but no traffic is passing over the link.
BlinkingIndicates the presence of traffic on the Gigabit link.
OnPower supply is operational.
reflects the operational state of the appliance and error
conditions.
power supply unplugged, power supply removed from
chassis, or a malfunction.
a. Gigabit links include the remote and local data ports, gigabit Ethernet management port, and Aux1 port.
ETEP Installation Guide17
Product Overview
Rear Panel
The ET1000A rear panel is shown in Figure 10.
Figure 10ET1000ARear Panel
Elements of Figure 10:
Power Supply # 2
1)Release lever for power supply 2
2)Power supply 2 receptacle
3)Power cord clip for power supply 2
4)Status LED for power supply 2. Green indicates normal operation. Red indicates a
power fail state.
Power Supply # 1
5)Power cord clip for power supply 1
6)Status LED for power supply 1. Green indicates normal operation. Red indicates a
power fail state.
7)Release lever for power supply 1
8)Power supply 1 receptacle
18ETEP Installation Guide
Features
ETEPs share many of the same features and capabilities across hardware models, as shown in Table 5.
Hardware differences between the ETEP models are summarized in Table 4.
Thermal power: In-rush 102 BTU/hour, steady state 102 BTU/
hour
Operating humidity: Up to 90% (non-condensing)
Operating altitude: -200 to 10,000 feet AMSL
Table 7 ET0100A Mechanical and Environmental Specifications
CategorySpecification
Interfaces(2) 10/100/1000 Mbps Ethernet ports for encrypting and decrypting
traffic
10/100 Mbps auto-sensing Ethernet LAN port for management
RS-232C port for management
Electrical/Mechanical
Dimensions
EnvironmentalOperating temperature: 0 to 40 degrees C (32 to 104 degrees F)
RegulatorySee “ET0100A Regulatory Information” on page 67.
19 inch rack mount design
1U tamper evident chassis
Dimensions: 1.75” H x 17” W x 10” D
Weight: 6 pounds
100-240 VAC @ 4 amps, 50/60 Hz, auto-sensing
Nominal input current: 1.0A
Nominal power dissipation: 65 watts
Thermal power: In-rush 380 BTU/hour, steady state 140 BTU/hour
Operating humidity: Up to 90% (non-condensing)
Operating altitude: -200 to 10,000 feet AMSL
ETEP Installation Guide21
Product Overview
Table 8 ET1000A Mechanical and Environmental Specifications
CategorySpecification
Interfaces(2) Gigabit Ethernet ports for encrypting and decrypting traffic
ET1000A
Electrical/Mechanical
Dimensions
EnvironmentalOperating temperature: 0 to 40 degrees C (32 to 104 degrees F)
RegulatorySee “ET1000A Regulatory Information” on page 68.
(single mode, multimode, or copper)
10/100 Mbps auto-sensing Ethernet LAN port for management
RS-232C port for management
(1) Auxiliary Gigabit port for data traffic (not enabled)
(1) Gigabit Ethernet port for management (not enabled)
19 inch rack mount design
1U tamper evident chassis
Dimensions: 1.75” H x 17” W x 15.5” D
Weight: 10 pounds
100-240 VAC @ 3-1.5A, 47-63 Hz, auto-sensing
Nominal input power: 72 watts
Maximum power: 90 watts
Nominal input current: 0.65 A @ 110V
Thermal power, single power supply: In-rush 266 BTU/hour, steady
state 222 BTU/hour
Thermal power, dual power supplies: In-rush 440 BTU/hour, steady
state 263 BTU/hour
Operating humidity: Up to 90% (non-condensing)
Operating altitude: -200 to 10,000 feet AMSL
22ETEP Installation Guide
2Installation
CAUTION
This section includes the following topics:
● Before You Start
● Installing the ET0010A
● Installing the ET0100A
● Installing the ET1000A
● Shutting Down the ETEP
Before You Start
Before you prepare the ETEP for installation, review the following information:
● “Safety Guidelines” on page 23
● “Software Requirements” on page 24
● “ETEP Site Preparation” on page 25
● “Firewall Ports” on page 26
Safety Guidelines
The ETEP does not contain any field-replaceable internal parts. Do not remove the unit’s cover for any
reason. The cover is to be removed only by authorized Black Box service personnel.
Authorized service personnel should review the following safety information prior to performing service
or maintenance procedures on the ETEP.
Disconnect all power cords before servicing.
ETEP Installation Guide23
Installation
WARNING
CAUTION
The ETEP contains a lithium battery, which users should not attempt to replace. Battery replacement must
be performed by qualified Black Box personnel. Risk of explosion if battery is replaced by an incorrect
type. Used batteries should be disposed of according to the manufacturer’s instructions.
Electrostatic discharge (ESD) can damage electronic components and equipment. ESD occurs when
electronic components are improperly handled and can result in complete or intermittent failures. Always
follow ESD-prevention procedures when removing and replacing components.
Qualified service personnel should use the following guidelines to prevent ESD damage:
● Always use an ESD wrist or ankle strap and ensure that it makes skin contact.
● Connect the equipment end of the strap to an unpainted metal chassis surface.
● If no wrist strap is available, ground yourself by touching the metal chassis.
Software Requirements
ETEP software is factory installed on the appliance. A backup copy of the software is provided on the
ETEP CD. To learn how to reinstall your software or install an update, refer to the user guide for your
management software.
If you are using EncrypTight to manage your ETEPs, you will need to install the EncrypTight software
on the management station to configure the ETEPs for network operation and to create and deploy
policies. See the EncrypTight User Guide for more information about using ETEPs in a EncrypTight
deployment.
The third party software listed in Table 9 is used when managing the ETEP in a standalone deployment.
See the EncrypTight User Guide for additional third party software you may want to install when using in
EncrypTight to manage EncrypTight appliances.
Table 9 Third party management station software
SoftwareHow it’s usedVendor
FTP server Copies files to and from
SFTP server (optional: available
with ETEP 1.6 and later)
PDF readerOpens the user documentation
SSH client (ETEPs)Securely connects to the ETEP
EncrypTight appliances,
including log files and new
firmware
Secures file transfers to and
from EncrypTight appliances
files on the product CD
CLI
Microsoft FTP server, included
with Windows XP
Cerberus FTP Server 4 –
Professional Edition
Adobe Acrobat Reader version
6.0 or higher. Free download
available from www.adobe.com.
PuTTY, included with the
ETEMS installation
24ETEP Installation Guide
Loading...
+ 51 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.