Black Box ET0010A, Руководство пользователя CLI

Страница: 51 / 212

Configuring the ETEP
52 ETEP CLI User Guide
config>
local-interface
loc-if>
dhcprelay enable 10.168.67.55
Related topics:
●
“Assigning Remote and Local Port IP Addresses” on page 52
●
“Configuring Transparent Mode” on page 53
●
“dhcprelay” on page 139
Configuring Transparent Mode for Layer 3 Policies
Transparent mode is the ETEP’s default mode of operation on the local and remote ports. It is required
for Layer 2 policies and is appropriate for most Layer 3 distributed key policies. In transparent mode, the
ETEP is not viewable from a network standpoint. The local and remote ports do not utilize user-assigned
IP addresses.
If you want to conceal the original source IP address when sending encrypted traffic, configure the ETEP
to operate in
non-transparent mode . Non-transparent mode is also used when sending traffic over the
internet. Since private IP addresses cannot be routed over the internet, any traffic between private
networks transmitted over the internet must use public IP addresses. See the
EncrypTight User Guide for
more information about addressing options and creating policies using virtual IP addresses.
To configure the ETEP for non-transparent mode, do the following:
●
Assign IP addresses to the local and remote ports ( on page 52 )
●
Disable transparent mode, thereby allowing the ETEP to use the data port IP addresses in a Layer 3
policy (
on page 53 )
Assigning Remote and Local Port IP Addresses
The ip command sets an IPv4 IP address, subnet mask, and default gateway for the interface being
configured. The remote port connects the ETEP to an untrusted network, which is typically a WAN,
campus LAN, or MAN. The local port IP address identifies the ETEP to the device on the local side of
the network, such as a server or a switch.
On the local and remote interfaces, the ip command is used when the transparent-mode-enable command
is disabled. When operating in non-transparent mode, first configure the ip command on the local and
remote interfaces, and then set the transparent-mode-enable command to
false .
If you change the remote IP address on an ETEP that is already deployed in a policy, you must redeploy
your policies after the new configuration is pushed to the appliance.
To configure the local and remote ports:
1 Enter remote or local configuration mode.
admin> configure
config> {local-interface | remote-interface}
2 Configure the ip command. Attributes are described in Table 25 .
ip {<ip address> <subnet mask>} [gateway]