
Configuring Data Encryption Services
2-4 117386-A Rev. A
Using Floppy Disks to Store Key Files
For security reasons, Bay Networks recommends that you use removable media
such as floppy disks to store key files. You can use the same floppy disks on both
PCs and UNIX platforms if you have UNIX personal computer file system (pcfs)
compatibility, which allows UNIX platforms to access data on floppy disks
formatted for PCs. Issue the following series of commands:
1. Log on as superuser.
%
su
2.
Enter the superuser password.
password
<password>
3.
Move to the root file system.
$
cd /
4. Make a mount point directory.
$
mkdir <
directory_name
>
5.
Mount the floppy disk.
$
mount -t pcfs /dev/fd0 <
directory_name
>
Configuring Encryption with Dial Backup
You can configure a Frame Relay PVC that uses encryption with a PPP dial
backup circuit. If the primary line fails, traffic travels unencrypted over the PPP
backup circuit.
PPP dial backup does not work with PPP circuits that you configure for
encryption. Further, if a PPP primary circuit includes values in any PPP
encryption parameters, whether or not the circuit uses encryption, PPP dial
backup does not work.
Frame Relay dial backup does not work with Frame Relay circuits that you
configure for encryption.
Commentaires sur ces manuels