Comtech EF Data CDM-425, Installation And Operation Manual

Page: 282 / 744

CDM-425 Advanced Satellite Modem
Revision 0
Ethernet-based Remote Product Management 7–58 MN-CDM-425
Encryption Status Section
This section displays the active state of the AES Encryption option:
•
Per the example shown in Figure 7-28, when the AES Encryption FAST feature is
enabled, this section displays the message “
Encryption is available. ” All functionality of
this page is operable – you can encrypt a specific route. Route encryption is set using the
‘
Configuration | Routing | Routes ’ page (see Sect. 7.5.4.3.3.1 ) when the modem is in a
router mode, or the ‘ Configuration | Managed Switch ’ page (see Sect. 7.5.4.3.4 ) when
the modem is in Managed Switch Mode.
•
When the AES Encryption FAST feature has not been purchased and is therefore
disabled, the
Encryption section of this page appears as follows:
While the AES Encryption FAST feature itself is disabled, the this page may still be used to
program the Encryption and Decryption keys in anticipation of future use.
For situations where, for example, export restrictions prohibit the availability of the AES
Encryption option, the modem runs an FPGA chipset that does not allow encryption operations.
The ‘
Configuration | WAN | Encryption ’ page is therefore disabled: The page, when accessed,
notes the operational restriction by hiding the Encryption Key and Decryption Key
programming sections and displaying the following message in the Encryption section:
Encryption – Unencrypted Rx Traffic
Use the drop-down list to select Allow (default) or Drop . Note the following:
•
Under the default Allow setting, the local modem allows receipt of unencrypted (plain
text) packets from the remote modem over the WAN, even when encryption is enabled.
•
Under the Drop setting, the modem drops all unencrypted traffic received over the WAN
interface when encryption is enabled. The remote modem may therefore transmit only
encrypted data.