Allied Telesis x900-48FE Manual do Utilizador descarregar pdf

Chapter 31

Compression and Encryption Services for

x900-48FE and AT-9900 Switches

Introduction ................................................................................................. 31-2

Data Compression ....................................................................................... 31-2

Data Encryption ........................................................................................... 31-4

Symmetrical Encryption ......................................................................... 31-4

Asymmetrical (Public Key) Encryption ..................................................... 31-5

Network Encryption ............................................................................... 31-6

Data Authentication .................................................................................... 31-7

Key Exchange Algorithms ............................................................................ 31-8

ENCO on the Switch .................................................................................... 31-8

Compression ......................................................................................... 31-9

Encryption ............................................................................................. 31-9

Authentication ...................................................................................... 31-9

Key Creation and Storage .................................................................... 31-10

Key Exchange ...................................................................................... 31-11

Access Control ........................................................................................... 31-12

User Applications ....................................................................................... 31-13

Command Reference ................................................................................. 31-14

create enco key ................................................................................... 31-14

destroy enco key ................................................................................. 31-17

disable enco compstatistics .................................................................. 31-17

disable enco debugging ...................................................................... 31-18

enable enco compstatistics .................................................................. 31-18

enable enco debugging ....................................................................... 31-19

reset enco counters ............................................................................. 31-20

set enco dhpadding ............................................................................. 31-21

set enco dhpriority .............................................................................. 31-21

set enco key ........................................................................................ 31-22

set enco sw ......................................................................................... 31-23

show enco .......................................................................................... 31-24

show enco channel ............................................................................. 31-26

show enco counters ............................................................................ 31-31

show enco debug ................................................................................ 31-45

show enco key .................................................................................... 31-45

1 2 3 4 5 6 ... 45 46

Resumo do Conteúdo

Página 1 - Chapter 31

Chapter 31Compression and Encryption Services for x900-48FE and AT-9900 SwitchesIntroduction ...

Página 2 - Introduction

31-10 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AKey Creation and StorageENCO creates and stores keys the switch r

Página 3

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-11Software Version 2.9.1/3.2.1C613-03130-00 REV AThe switch recognises the f

Página 4 - Data Encryption

31-12 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Aoperation, this time using the random number and the exchanged va

Página 5

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-13Software Version 2.9.1/3.2.1C613-03130-00 REV AUser ApplicationsIP payload

Página 6 - Network Encryption

31-14 create enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV ACommand ReferenceThis section describes the comma

Página 7 - Data Authentication

Compression and Encryption Services for x900-48FE and AT-9900 Switches create enco key 31-15Software Version 2.9.1/3.2.1C613-03130-00 REV ADescription

Página 8 - ENCO on the Switch

31-16 create enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AThe module parameter can be used to link a key to

Página 9 - Authentication

Compression and Encryption Services for x900-48FE and AT-9900 Switches disable enco compstatistics 31-17Software Version 2.9.1/3.2.1C613-03130-00 REV

Página 10 - Key Creation and Storage

31-18 disable enco debugging AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Adisable enco debuggingSyntax DISable ENCo

Página 11 - Key Exchange

Compression and Encryption Services for x900-48FE and AT-9900 Switches enable enco debugging 31-19Software Version 2.9.1/3.2.1C613-03130-00 REV Aenabl

Página 12 - Access Control

31-2 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AIntroductionThis chapter describes the data compression and data s

Página 13 - User Applications

31-20 reset enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Areset enco countersSyntax RESET ENCo COUnters

Página 14 - Command Reference

Compression and Encryption Services for x900-48FE and AT-9900 Switches set enco dhpriority 31-21Software Version 2.9.1/3.2.1C613-03130-00 REV Aset enc

Página 15 - C613-03130-00 REV A

31-22 set enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Aset enco keySyntax SET ENCo KEY=key-id [DESCription=

Página 16

Compression and Encryption Services for x900-48FE and AT-9900 Switches set enco sw 31-23Software Version 2.9.1/3.2.1C613-03130-00 REV Aset enco swSynt

Página 17

31-24 show enco AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Ashow encoSyntax SHow ENCoDescription This command displ

Página 18

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco 31-25Software Version 2.9.1/3.2.1C613-03130-00 REV ARelated Commands

Página 19

31-26 show enco channel AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Ashow enco channelSyntax SHow ENCo CHannel[=chan

Página 20

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco channel 31-27Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31

Página 21

31-28 show enco channel AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AMax Data Length Maximum allowed length of data

Página 22

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco channel 31-29Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31

Página 23

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-3Software Version 2.9.1/3.2.1C613-03130-00 REV Aparticular compression algor

Página 24 - Syntax SHow ENCo

31-30 show enco channel AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AExamples To show a summary of all active ENCO c

Página 25

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-31Software Version 2.9.1/3.2.1C613-03130-00 REV Ashow enc

Página 26

31-32 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-8: Example output from the show enco

Página 27

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-33Software Version 2.9.1/3.2.1C613-03130-00 REV AbadDesTy

Página 28

31-34 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-9: Example output from the show enco

Página 29

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-35Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 3

Página 30

31-36 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-13: Example output from the show enc

Página 31

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-37Software Version 2.9.1/3.2.1C613-03130-00 REV ATable 31

Página 32

31-38 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AgenCKENoKey Number of unsuccessful CKE message

Página 33

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-39Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 3

Página 34

31-4 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AData EncryptionData encryption for switches is driven by the need

Página 35

31-40 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AprocHandHwDecompFail Number of times the STAC

Página 36

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-41Software Version 2.9.1/3.2.1C613-03130-00 REV AdecompPa

Página 37

31-42 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-16: Example output from the show enc

Página 38

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco counters 31-43Software Version 2.9.1/3.2.1C613-03130-00 REV AFigure 3

Página 39

31-44 show enco counters AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV A Table 31-14: Parameters in output of the show

Página 40

Compression and Encryption Services for x900-48FE and AT-9900 Switches show enco key 31-45Software Version 2.9.1/3.2.1C613-03130-00 REV Ashow enco deb

Página 41

31-46 show enco key AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AFigure 31-18: Example output from the show enco key

Página 42

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-5Software Version 2.9.1/3.2.1C613-03130-00 REV AThe following table describe

Página 43

31-6 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV Adistribution need not be kept secret, but must be protected agains

Página 44

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-7Software Version 2.9.1/3.2.1C613-03130-00 REV Aalgorithm or have any knowle

Página 45 - ■ show enco channel

31-8 AlliedWare OS Software ReferenceSoftware Version 2.9.1/3.2.1C613-03130-00 REV AKey Exchange AlgorithmsKey exchange algorithms are used by switche

Página 46

Compression and Encryption Services for x900-48FE and AT-9900 Switches 31-9Software Version 2.9.1/3.2.1C613-03130-00 REV AA user application that requ