Avaya Configuring Data Encryption Services Manuel d'utilisateur télécharger pdf (Page 28)

Configuring Data Encryption Services

2-2

308618-14.00 Rev 00

Synchronizing Router Clocks

The Master Encryption Key (MEK) must be the same at both ends of a link.

Therefore, the MEK Change parameter value, which sets the amount of time

between changes in the value of the MEK, must also be the same. For these values

to be the same routinely, the MEK changes must occur at approximately the same

time, which requires that the routers use the same date and time. If the routers’

clocks differ by more than the MEK Change value, WEP drops all packets.

To synchronize the routers, you can use either or both of these options:

• Network Time Protocol (NTP).

• MEK Change parameter. Set to a value large enough to accommodate

differences between the routers’ clocks.

Using Encryption with AN Routers

AN router models earlier than Version 8.12/2.12 lose both date and time if they

are powered off. To use encryption with these older ANs, you must synchronize

the router clocks before you configure encryption.

Newer models have a battery that maintains the router clock. If your AN has a

model number in the format AE xxxxxxx, it is a new, BayStack

™

AN, and it has the

battery.

Encryption and Performance

Using encryption requires substantial resources, and reduces router throughput.

Consider this when you select the interfaces on which to use encryption. You can,

however, lower the cost of using encryption by using data compression with

encryption. You can configure both hardware- and software-based data

compression over PPP and frame relay networks running encryption.

Caution:

You should disable TELNET access of any kind between secure

routers. If anyone changes the date on either of the routers, traffic stops.

1 2 ... 23 24 25 26 27 28 29 30 31 32 33 ... 69 70

Pas de commentaire

Avaya Configuring Data Encryption Services Manuel d'utilisateur Page 28