Allied Telesis x900-48FE Instrukcja Użytkownika Pobierz pdf

Chapter 31

Compression and Encryption Services for

x900-48FE and AT-9900 Switches

Introduction ................................................................................................. 31-2

Data Compression ....................................................................................... 31-2

Data Encryption ........................................................................................... 31-4

Symmetrical Encryption ......................................................................... 31-4

Asymmetrical (Public Key) Encryption ..................................................... 31-5

Network Encryption ............................................................................... 31-6

Data Authentication .................................................................................... 31-7

Key Exchange Algorithms ............................................................................ 31-8

ENCO on the Switch .................................................................................... 31-8

Compression ......................................................................................... 31-9

Encryption ............................................................................................. 31-9

Authentication ...................................................................................... 31-9

Key Creation and Storage .................................................................... 31-10

Key Exchange ...................................................................................... 31-11

Access Control ........................................................................................... 31-12

User Applications ....................................................................................... 31-13

Command Reference ................................................................................. 31-14

create enco key ................................................................................... 31-14

destroy enco key ................................................................................. 31-17

disable enco compstatistics .................................................................. 31-17

disable enco debugging ...................................................................... 31-18

enable enco compstatistics .................................................................. 31-18

enable enco debugging ....................................................................... 31-19

reset enco counters ............................................................................. 31-20

set enco dhpadding ............................................................................. 31-21

set enco dhpriority .............................................................................. 31-21

set enco key ........................................................................................ 31-22

set enco sw ......................................................................................... 31-23

show enco .......................................................................................... 31-24

show enco channel ............................................................................. 31-26

show enco counters ............................................................................ 31-31

show enco debug ................................................................................ 31-45

show enco key .................................................................................... 31-45

1 2 3 4 5 6 ... 45 46

Podsumowanie treści

Strona 1 - Chapter 31

Chapter 31Compression and Encryption Services for x900-48FE and AT-9900 SwitchesIntroduction ...

Strona 2 - Introduction

31-10 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AKey Creation and StorageENCO creates and stores keys the switch r

Strona 3

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-11Software Version 2.9.1/3.2.1C613-03130-00 REV AThe switch recognises the f

Strona 4 - Data Encryption

31-12 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Aoperation, this time using the random number and the exchanged va

Strona 5

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-13Software Version 2.9.1/3.2.1C613-03130-00 REV AUser ApplicationsIP payload

Strona 6 - Network Encryption

31-14 create enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV ACommand ReferenceThis section describes the comma

Strona 7 - Data Authentication

Compression and Encryption Services for x900-48FE and AT-9900 Switches create enco key 31-15Software Version 2.9.1/3.2.1C613-03130-00 REV ADescription

Strona 8 - ENCO on the Switch

31-16 create enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AThe module parameter can be used to link a key to

Strona 9 - Authentication

Compression and Encryption Services for x900-48FE and AT-9900 Switches disable enco compstatistics 31-17Software Version 2.9.1/3.2.1C613-03130-00 REV

Strona 10 - Key Creation and Storage

31-18 disable enco debugging AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Adisable enco debuggingSyntax DISable ENCo

Strona 11 - Key Exchange

Compression and Encryption Services for x900-48FE and AT-9900 Switches enable enco debugging 31-19Software Version 2.9.1/3.2.1C613-03130-00 REV Aenabl

Strona 12 - Access Control

31-2 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AIntroductionThis chapter describes the data compression and data s

Strona 13 - User Applications

31-20 reset enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Areset enco countersSyntax RESET ENCo COUnters

Strona 14 - Command Reference

Compression and Encryption Services for x900-48FE and AT-9900 Switches set enco dhpriority 31-21Software Version 2.9.1/3.2.1C613-03130-00 REV Aset enc

Strona 15 - C613-03130-00 REV A

31-22 set enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Aset enco keySyntax SET ENCo KEY=key-id [DESCription=

Strona 16

Compression and Encryption Services for x900-48FE and AT-9900 Switches set enco sw 31-23Software Version 2.9.1/3.2.1C613-03130-00 REV Aset enco swSynt

Strona 17

31-24 show enco AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Ashow encoSyntax SHow ENCoDescription This command displ

Strona 18

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco 31-25Software Version 2.9.1/3.2.1C613-03130-00 REV ARelated Commands

Strona 19

31-26 show enco channel AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Ashow enco channelSyntax SHow ENCo CHannel[=chan

Strona 20

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco channel 31-27Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31

Strona 21

31-28 show enco channel AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AMax Data Length Maximum allowed length of data

Strona 22

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco channel 31-29Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31

Strona 23

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-3Software Version 2.9.1/3.2.1C613-03130-00 REV Aparticular compression algor

Strona 24 - Syntax SHow ENCo

31-30 show enco channel AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AExamples To show a summary of all active ENCO c

Strona 25

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-31Software Version 2.9.1/3.2.1C613-03130-00 REV Ashow enc

Strona 26

31-32 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-8: Example output from the show enco

Strona 27

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-33Software Version 2.9.1/3.2.1C613-03130-00 REV AbadDesTy

Strona 28

31-34 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-9: Example output from the show enco

Strona 29

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-35Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 3

Strona 30

31-36 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-13: Example output from the show enc

Strona 31

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-37Software Version 2.9.1/3.2.1C613-03130-00 REV ATable 31

Strona 32

31-38 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AgenCKENoKey Number of unsuccessful CKE message

Strona 33

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-39Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 3

Strona 34

31-4 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AData EncryptionData encryption for switches is driven by the need

Strona 35

31-40 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AprocHandHwDecompFail Number of times the STAC

Strona 36

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-41Software Version 2.9.1/3.2.1C613-03130-00 REV AdecompPa

Strona 37

31-42 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-16: Example output from the show enc

Strona 38

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-43Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 3

Strona 39

31-44 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV A Table 31-14: Parameters in output of the show

Strona 40

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco key 31-45Software Version 2.9.1/3.2.1C613-03130-00 REV Ashow enco deb

Strona 41

31-46 show enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-18: Example output from the show enco key

Strona 42

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-5Software Version 2.9.1/3.2.1C613-03130-00 REV AThe following table describe

Strona 43

31-6 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Adistribution need not be kept secret, but must be protected agains

Strona 44

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-7Software Version 2.9.1/3.2.1C613-03130-00 REV Aalgorithm or have any knowle

Strona 45 - ■ show enco channel

31-8 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AKey Exchange AlgorithmsKey exchange algorithms are used by switche

Strona 46

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-9Software Version 2.9.1/3.2.1C613-03130-00 REV AA user application that requ