Filter
Top Products
Adding Layer 3 IP Policies
EncrypTight User Guide 197
Addressing
Mode Override
Overrides the Network addressing setting for the network sets.
• Preserve internal network addresses - This setting overrides the network
set’s network addressing mode and preserves the network addressing of the
protected networks. The IP header contains the source address of the
originating network.
If this setting is disabled and the addressing mode of the network set uses
the PEP’s remote IP address or a Virtual IP address, the IP header contains
the source address as specified in the network set. If the addressing mode
of the network set preserves the network IP address, disabling this setting
has no effect.
• Preserve address, protocol and port - This setting overrides the network
set’s addressing mode and preserves the network addressing of the
protected networks, as well as the specified protocol and port numbers. The
IP header includes the source address, protocol, and port of the originating
network. This allows you to send the Layer 4 header information in the clear
for traffic engineering and Service Level Agreement (SLA) management (for
example, Quality of Service controls).
Minimize Policy
Size
Specifies a method for reducing the policy size.
• Ignore source IP address - Reduces policy size by ignoring the network
addresses on the local port of the PEP. This limits the amount of network
traffic needed to renew keys and refresh policy lifetimes. If you select this
option, the source network address for outbound traffic and the destination
network address for inbound traffic are replaced with all networks wildcard
addresses (0.0.0.0/0).
• Apply to all traffic - Reduces the policy size by applying the policy to all
traffic, inbound and outbound, regardless of the source and destination
address and ports. If the policy specifies encryption, all
PEPs associated
with the policy use the same key set. This option reduces the number of
policy entries and SAs on each PEP.
For more information, see “Minimizing Policy Size” on page 187.
Network Sets Identifies the network sets included in this policy.
Click the Network Sets tab of the EncrypTight Components view and drag the
appropriate network sets to Mesh Network Sets.
Protocol Specifies the Layer 3 protocol affected by this policy. The action selected for
the policy is only applied to the traffic with the specified protocol.
•Any - specifies all protocols.
•Only - specifies a particular protocol. Click to select and then enter the
required protocol in the range 0 to 255.
Table 49 Mesh policy entries (continued)
Field Description