Black Box EncrypTight Enforcement Point (ETEP) Installation Guide manual

B L A C K B O X ® E n c ryp T ig h t a cts as a t r a ns pa re n t o v e r l a y t h a t i n t eg r a t es e as i l y i n t o an y e x i s ti n g n etw o r k arc hitec ture, p ro vidin g enc r ypt ion rule s and k eys to Enc r yp T ig ht E nforc em ent Point s . E nc r yp Tigh t con si sts of a s ui te o f t ools t ha t perfo rms v ar iou s tas k [...]

T able of Content s About This Document..................................................................... ....................................... ..... 7 Contacting Black Box Technical S upport ... ......... .......... ....................... ...................... ............................ 7 Chapter 1: Product Overview.......................[...]

4 ETEP Installation Guide Table of Contents Connecting the Cables: ET1000A ................ .......................... ....................... .......................... ...... 42 Powering on the ET1000A ................ ...................... .......................... .......................... .............. ..... 43 Shutting Down the ETEP .....[...]

Table of Contents ETEP Installation Guide 5 ET0100A Cabling ............. ...................... ....................... ....................... ......................... ...... .... 68 ET1000A Regulatory Information .............. ....................... .......................... ...................... ............ .6 8 Safety ........... .......[...]

6 ETEP Installation Guide Table of Contents[...]

ETEP Installation Guide 7 About This Document Purpose The ET VSE-series Installation Guide describes how to cable and install the Black Box™ ETEP EncrypT ight Enforcement Points. Intended audience This document is intended for use by net work tech nicians and security admini strators who are familiar with setting up and mai ntaining network equip[...]

About This Document 8 ETEP Installation Guide[...]

ETEP Installation Guide 9 1 Product Overview This section includes the fo llowing topics: ● ETEP Introduction ● ET0010A Physical Description ● ET0100A Physical Description ● ET1000A Physical Description ● Features ● Specifications ETEP Introduction The EncrypT ight Enforcement Point (ETEP) V ari able Spe ed Encryptors (VSEs) are purpose[...]

Product Overview 10 ETEP Installation Guide Figure 1 Multipoint Ethernet Encryption using EncrypT ight The ETEP interfaces with ne twork equipment thro ugh two data ports, the local port and the remote port. Unencrypted traffic that or iginates from a trusted, local network is received on the local port, where the ETEP applies security processing t[...]

ET0010A Physical Description ETEP Installation Guide 11 ET0010A Physical Description The ET0010A is a rack-moun table encryptor that can run at speeds ranging from 3-50 Mbps. It has three data ports on the front panel labeled Remote, Local, and Aux1. The following sections describe the ET0010A connectors and LED indicators. Front Panel Connectors T[...]

Product Overview 12 ETEP Installation Guide S t atus Indicators The ET0010A status indictors are show n in Figure 3 . The status indications are described in T able 1 . Figure 3 ET0010A S tatu s Indicators The following table describ es how to interpret the ET0010A status indicators. Elements of F igure 3 : 1) Power LED 2) Alarm LED 3) S tatus indi[...]

ET0100A Physical Description ETEP Installation Guide 13 Rear Panel The ET0010A rear panel and extern al power supply are shown in Figure 4 . Figure 4 ET0010A Rear Pa nel and External Power Supply ET0100A Physical Description The ET0100A is a rack-mountable encry ptor that can run at speeds ranging from 100–250 Mbps. The following sections describ[...]

Product Overview 14 ETEP Installation Guide Front Panel Connectors The ET0100A front panel connect ors are shown in Figure 5 . Figure 5 ET0100A Front Pan el Connectors LED Indicators The ET0100A LED indi ctors are shown in Figure 6 . The LED indications are described in T able 2 . Figure 6 ET0100A LED Indicat ors Elements of F igure 5 : 1) 10/100 E[...]

ET0100A Physical Description ETEP Installation Guide 15 The following table describ es how to interpret the LEDs on the ET0100A front panel. Rear Panel The ET0100A rear panel is shown in Figure 7 . Figure 7 ET0100A Rear Pa nel T able 2 ET0100A Front Panel LED Indicators Indicator Ligh t State Indication Power (green) Off Unit is powered off. On Uni[...]

Product Overview 16 ETEP Installation Guide ET1000A Physical Description The ET1000A is a rack-mountable 1 Gb ps encryptor with dual power supplies. It can operate at speeds ranging from 500 Mbps–1 Gbp s. The following sections describe the ET1000A connect ors and LED indicators. Front Panel Connectors The ET1000A front panel connect ors are show[...]

ET1000A Physical Description ETEP Installation Guide 17 Figure 9 ET1000A LED Indicat ors T able 3 descri bes how to interpret the LEDs on the ET1000A front panel. Elements of F igure 9 : 1) Power LED 2) Alarm LED 3) Diagnostic display 4) Link indicato rs: 10/100 Ethernet management port 5) Link indicators: Gig abit management port 6) Link indicator[...]

Product Overview 18 ETEP Installation Guide Rear Panel The ET1000A rear panel is shown in Figure 10 . Figure 10 ET1000A Rear Panel Elements of F igure 10 : Power Supply # 2 1) Release lever for power supply 2 2) Power supply 2 receptacle 3) Power cord clip for power supply 2 4) S tatus LED for power s upply 2. Green indicat es normal operation. Re [...]

Features ETEP Installation Guide 19 Features ETEPs share many of the same features and cap abilities across hardware models, as shown in T able 5 . Hardware differe nces between the ETEP models are summarized in T able 4 . The ETEP features are summarized in T able 5 . T able 4 ETEP Hardware Comp arison Model Form Factor Data Port Speed Data Port I[...]

Product Overview 20 ETEP Installation Guide S pecifications This section lists the mechanical and environmental specifications fo r the following ETEP models: ● ET0010A specifications are listed in Ta b l e 6 ● ET0100A specifications are listed in T able 7 ● ET1000A specifications are listed in Ta b l e 8 Network Support • Ethernet • VLAN[...]

Specifications ETEP Installation Guide 21 ET0010A Electrical/Mechan ical Dimensions 19 inch rack mount design 1u tamper evident chassis Dimensions: 1.6” H x 8.0” W x 5.8” D Weight (without external power su pply),1 pound 4 ounces External powe r supply: • Weight: 11 ounces • Input voltage: 100-240 VAC @ 1.5 amps, 50/60 Hz, auto- sensing ?[...]

Product Overview 22 ETEP Installation Guide T able 8 ET10 00A Mechanical an d Environmental Specifications Category Specification Interfaces (2) Gigabit Ethernet p orts for encrypting and decrypting traffic (single mode, multimode, or copper) 10/100 Mbps auto-sensing Ethe rnet LAN port for management RS-232C port for ma nagement (1) Auxiliary Gigab[...]

ETEP Installation Guide 23 2 Inst allation This section includes the fo llowing topics: ● Before Y ou Start ● Installing the ET0 010A ● Installing the ET0 100A ● Installing the ET1 000A ● Shutting Down the ETEP Before Y ou S t art Before you prepare the ETEP for installa tion, review the fo llowing information: ● “Safety Guidelines”[...]

Installation 24 ETEP Installation Guide W ARNING The ETEP contains a lithium battery , which user s should not attempt to replace. Battery replacement must be performed by qualified Black Bo x personnel. Risk of explosion if battery is replace d by an incorrect type. Used batteries should be disp osed of ac cording to the manufa cturer’s instruct[...]

Before You Start ETEP Installation Guide 25 ETEP Site Prep aration Most ETEP models can be mounted in a standard 19-in ch rack using the supplied mounting kit, or simply placed on a rack shelf or solid surface. Before inst alling the ETEP in a 19-inch rack, consider the following guidelin es: ● Ambient temperature Install the ETEP in an environm [...]

Installation 26 ETEP Installation Guide Firewall Port s T able 10 lists the protocols that are used by the ETEPs and the EncrypT ight system. Make sure that any firewalls in your system are config ured to allow for th e protocols that are required for your deploym ent: standalone ETEPs used for point-t o-point encryptio n or ETEPs used in an Encr y[...]

Installing the ET0010A ETEP Installation Guide 27 The steps to perform for a typical installa tion ar e listed below . Cabling Requirement s: ET0010A T able 12 outlines the standard cables us ed with each port on the ETEP . The connector type listed indicates only what is required to connect to the ETEP port, and may or m ay not be the same connect[...]

Installation 28 ETEP Installation Guide ● (1) Shielded null mode m cable with an RJ-45 conn ector at one end and a DB-9 female connector at the opposite end. ● (1) Unshielded Categ ory 5 straight through cable (UTP) with RJ-45 connectors ● Rack mount kit includes 2 mounting brackets, 4 la rge screws (#10-32), and 4 small black screw s. The ki[...]

Installing the ET0010A ETEP Installation Guide 29 ● External power supply ● T wo mounting brackets, supplied in the Accessory Kit ● (4) small black screw s and (4) large #10- 32 screws, supplied in the Accessory Kit ● #1 Phillips and #2 Phillips screwdrivers (user-supplied) T o inst all the ETEP in a rack: 1 Place the unit on a solid surfac[...]

Installation 30 ETEP Installation Guide Figure 13 Att ach mounting bracket s to the bottom p anel. ET0010A is shown below . 3 T urn the ETEP face up and locate the external power supply . W ith the label side facing down, place the power supply in the mounting bracket cradle and snap it in to place, as shown in Figure 14 . Figure 14 Power supply in[...]

Installing the ET0010A ETEP Installation Guide 31 Figure 15 Insert the power supply cable into the connector on the rear p anel 5 Attach the mounting bracket s to the rack’ s front su pports with the large #10-32 screws (item 1 in Figure 1 1 ), using a # 2 Phillips screwdriver . Insert two screws in each bracket, using the top and bottom holes. F[...]

Installation 32 ETEP Installation Guide Figure 17 Screw holes for rubbe r feet inst allation on bottom of unit 3 Place one of the rubber feet over the hol e and insert a screw into the opening ( Figure 18 ). Tighten the screw . Figure 18 Rubber feet inst alled 4 Repeat step 3 for the remaining feet. 5 T urn the unit over so th at it is resting on t[...]

Installing the ET0010A ETEP Installation Guide 33 Figure 19 ET0010A rear p anel connect or for external power supply . Connecting the Cables: ET0010A Follow the instructions bel ow to connect the ET0010A to the appropriat e network devices (see Figure 20 ). T o cable the ET0010A: 1 For initial setup, connect the RS -232 serial port directly to a PC[...]

Installation 34 ETEP Installation Guide Figure 20 ET0010A Ca bling NOTE The Aux1 port on the ET0010A is n ot enabled in this release. Powering On the ET0010A Use the following p rocedure to power up the ETEP. Figure 21 Att aching the power cable s on the ET0010A[...]

Installing the ET0100A ETEP Installation Guide 35 T o power on the ETEP: 1 Check that the power supply cab le is properly inserted in th e power connector on the ETEP rear panel. The ET0010A is shown in Figu re 21 . 2 Plug the power cord into the ETEP power supply . Attach the opposite end to a power source to apply power to the appliance. When the[...]

Installation 36 ETEP Installation Guide connector type required for the other end of the cab le. Som e cables are supplied by Black Box and others are user -supplied. NOTE T o meet the requirements of FCC Part 15 and the EU EMC Directive 2004/10 8/EC, use only shielded cables with the ET0100A (DB-9 null mod em cables and Category 5 STP cables). Unp[...]

Installing the ET0100A ETEP Installation Guide 37 T o mount the ETEP in a st andard 19-inch equipment rack, have the following tools and m aterials available: ● T wo mounting brackets, supplied in the Accessory Kit ● (6) small screws and ( 4) lar ge scre ws, supplied in the Accessory Kit ● #1 Phillips and #2 Phillips screwdrivers (user-suppli[...]

Installation 38 ETEP Installation Guide Figure 23 ET0100A Ca bling Powering on the ET0100A Use the following p rocedure to power up the ET0100A. T o power on the ET0100A: ● On the appliance’ s rear panel, plug the power cord into the ET0100A power receptacle. Attach the opposite end to a power source to apply power to the appliance. Due to the [...]

Installing the ET1000A ETEP Installation Guide 39 Figure 25 Improperly seated ET01 00A power cable When the appliance powers up, all LEDs illuminate (see Figure 26 ). The Alarm LED illuminates briefly and the diagnostic code LED displays 88 to verify th at the diagnostic display segm ents are functioning. The power LED remains lit until the uni t i[...]

Installation 40 ETEP Installation Guide The steps to perform for a typical installa tion ar e listed below . Cabling Requirement s: ET1000A T able 16 ou tlines the standard cables used with each po rt on the ET1000A . The connector type listed indicates only what is required to connect to the ET1000A port, and may or may not be the same connector t[...]

Installing the ET1000A ETEP Installation Guide 41 NOTE T o meet the requirements of FCC Part 15 and the EU EMC Directive 2004/10 8/EC, use only shielded Category 5 cables with the ET 1000A Ethernet management port . Unp acking the Shipping Carton: ET1000A Remove all product componen ts from the shipping carton and compare the contents to the pack i[...]

Installation 42 ETEP Installation Guide T o inst all the ET1000A in a rack: 1 Place the unit on a solid surface, with the top faci ng up. Position the mounting brackets on each side of the appliance, as shown in Figure 27 . Figure 27 Mounting bracke t orient ation 2 Attach the mounting brackets to each side of the unit using the 8 sma ll black scre[...]

Installing the ET1000A ETEP Installation Guide 43 T o cable the ET1000A: 1 For initial setup, connect the RS-2 32 port directly to a PC or workstation using a DB-9 nu ll modem cable. This cable can be removed after initial setu p is complete. 2 Connect the Ethernet manageme nt port to a LAN using a Category 5 shiel ded twisted pair (STP) cable with[...]

Installation 44 ETEP Installation Guide Figure 31 Dual power supplies on the ET1000A rear p anel T o power on the ET1000A: 1 On the appliance’ s rear panel, plug the power cord s into the power receptacl es for each power supply . 2 Attach the opposite end of the first pow er cord to a power source. Attach the second power cord t o a a power sour[...]

Shutting Down the ETEP ETEP Installation Guide 45 When the appliance powers up, all of the front panel LEDs illuminate (see Figure 33 ). The Alarm LED illuminates briefly and th e diagnostic code LED displays 88 to verify that t he diagnostic display segments are functioning. The power LED remains lit until the unit is powered off. The Power Supply[...]

Installation 46 ETEP Installation Guide Y ou can perform a shutdown using a CLI command or ETEMS. The following procedure describes the CLI command. T o shut down the ETEP fr om the CLI: 1 Log in as Administrator (user name admi n ) or O ps (user name ops ). 2 At the command prompt, type shutdown . After the system shutdow n is complete, the follow[...]

ETEP Installation Guide 47 3 Initial Setup This section includes the fo llowing topics: ● Overview ● Logging In Through a Serial Link ● Configuring the Manag ement Port ● Setting the Date and Time ● Entering a Throughput Licen se ● Configurati on Example ● Managing the ETEP Overview The following steps are required for initial setup o[...]

Initial Setup 48 ETEP Installation Guide T o log in to the CLI via a serial link: 1 Connect the RS-232 serial port di rectly to a PC or workstation, as described in Chapter 2 . 2 Open a terminal session t hrough a VT -100 termin al emulation program such as HyperT erm inal. Enter the connection name, the appropriate serial po rt (usually COM1 or CO[...]

Configuring the Management Port ETEP Installation Guide 49 The Ethernet management port IP address identifies the ETEP to the management workstation. The subnet mask is the portion of the IP address that identi fies the network or subnetwork for routin g purposes. When the ETEP management port and the management workstation are on dif ferent subnet[...]

Initial Setup 50 ETEP Installation Guide T o configure the manag ement port: 1 At the command prompt, type configure to enter conf iguration mode. 2A t t h e config> prompt, type management-interface . 3 Assigning an IPv4 address to the manag ement port is mandatory . T o set the management port IPv4 address, mask, and gate way , type ip <ip [...]

Setting the Date and Time ETEP Installation Guide 51 Example The following example sets th e management port IPv4 address, subnet mask, and gateway for the ETEP as shown in Figur e 34 . Auto-negotiatio n is left at its default setting of enabled. admin> configure config> management-interface man-if> ip 192.168.10.10 255.255.255.0 192.168.1[...]

Initial Setup 52 ETEP Installation Guide the local time relative t o UTC, add or subtract the of fset hours from UTC for th e local time zone (UTC ± n) . The following exam ples give the local time at various lo cations at 12:00 UTC when daylight saving time is not in effect: ● New Y ork City , Un ited S tates: UTC-5; 07:00 ● New Delhi, India:[...]

Configuration Example ETEP Installation Guide 53 Y ou need to install a license on each ETEP that you use. Licenses are linked to the serial number of the ETEP on which they are installed. Y ou cannot install a license intended for one ETEP on a dif ferent ETEP. If you upgrade from a comm and line-only installation to a full En crypT ight deploymen[...]

Initial Setup 54 ETEP Installation Guide includes tools for appliance configu ration, policy definition and deployment , and key generation and distribution. T o prepare the ETEP for operation in the network, you will need to perform the following tasks: 1 Assign passwords 2 Configure the ETEP 3 Define security policies If you plan to operate the E[...]

ETEP Installation Guide 55 4 Maintenance This section includes the fo llowing topics: ● Preventative Maintenance ● What T o Do If an Appliance Fails ● T amper Switch and Zeroiz ation ● Cable Pinouts Prevent ative Maintenance Periodically perform maintenan ce on your ETEP. Ke ep componen ts free of dust and other particulate matter . Examine[...]

Maintenance 56 ETEP Installation Guide What T o Do If an Appliance Fails Most ETEP models do not contain a ny field-replaceable parts. If you experience an appliance failure, contact Customer Support for a repl acement ETEP and throug hput license. The ET1000A has field-replaceable power supplies. C ontact Customer Support to obtain a replacement p[...]

What To Do If an Appliance Fails ETEP Installation Guide 57 Figure 35 Power cord is re moved from power supply # 2 3 Locate the release lever on th e left of the power supply ( Figur e 36 ). Press the release lever inward toward the metal support to release the power supply latch. Pull the power suppl y outward to remove it from the chassis. Figure[...]

Maintenance 58 ETEP Installation Guide Figure 37 Slide the replacement power supply into the slot on t he rear pane l 5 Insert the power cord in the replacement pow er supply and secure it with the clip. 6 Reconnect power supplies 1 and 2 to their respective power sources. 7 Return the failed power suppl y to Black Box as directed by Customer Supp [...]

Cable Pinouts ETEP Installation Guide 59 T o recover the ETEP following zeroization: W ait approximately 20 minutes for the zeroization proce ss to complete. If you ar e connected to the ETEP through the serial port, you will see the foll owing message: Power cycle required to reboot appliance After cycling the power , you will be able to conf igur[...]

Maintenance 60 ETEP Installation Guide RS-232 Serial Cable: ET0100A/ET1000A The RS-232 serial cable on the ET0 100A and ET1000A is a null modem cable with D B-9 connectors (female to male). Figure 39 ET0100A/ET1000A Nu ll Modem Serial Cable T able 22 ET0100A/ET1000A Null Modem Pin Connect ion Pin Pin 2 Receive Data 3 Transmit Data 3 Transmit Data 2[...]

ETEP Installation Guide 61 5 T roubleshooting This section includes the fo llowing topics: ● Symptoms and Sol utions ● Diagnostic Code Display Symptoms and Solutions The following tables provide some solutions to common problems that may occur with your ETEP. LED Indicators T able 23 LED Indicators Symptom Explanation and Possible Solutio n No [...]

Troubleshooting 62 ETEP Installation Guide Error S t ate T emperature Threshold and Discarded T raffic When the ETEP enters an alarm state due to a temp erature failure, the Alarm indicator illuminates and the ETEP discards traffic. The ETEP remains in an error state until it is rebooted. However, once the temperature drops below the critical thres[...]

Diagnostic Code Display ETEP Installation Guide 63 If the ETEP is discarding traf fic, check the system log for temperature warning notices to confirm that a temperature error occurred . Reboot the ETEP to resume n ormal operation. Diagnostic Code Display ETEPs display self-test codes during boot up , in add ition to operational status and erro r c[...]

Troubleshooting 64 ETEP Installation Guide Diagnostic Codes: ET0100A and ET1000A The 7-segment diagnostic display on the front panel of the following models displ ays self-test codes during boot up: ET0100A and ET1000A. After the ETEP boot s, the display reflects the operational state of the appliance and error conditions. When the appliance powers[...]

ETEP Installation Guide 65 Appendix A Environment al and Regulatory Information This section includes the fo llowing topics: ● WEEE Directive ● RoHS Directive ● Regulatory Information WEEE Directive Black Box is committed to environmentally responsible behavior . As part of this commitm ent, we have put in place a product end-of-life manageme[...]

Environmental and Regulatory Information 66 ETEP Installation Guide For more information o n the status of our RoHS efforts or product-specific en vironmental questions, please e-mail us at info@blackbox.com. Regulatory Information This section contains regulatory information for the following Black Box appliances: ● ET0010A ● ET0100A ● ET100[...]

Regulatory Information ETEP Installation Guide 67 Interference-Causing Equipment St andard Compliance Notice (Canada) “The Class A digital apparatus co mplies with Canadian ICES-003.” “Cet appareil numerique de la class A es t conforme a la norme NMB-003 du Canada.” European Notice Products with the CE Marking compl y with both the EMC Dire[...]

Environmental and Regulatory Information 68 ETEP Installation Guide Interference-Causing Equipment St andard Compliance Notice (Canada) “The Class B digital apparatus complies with Can adian ICES-003.” “Cet appareil numerique d e la class B est conforme a la norme NMB-003 du Canada.” European Notice Products with the CE Marking compl y with[...]

Regulatory Information ETEP Installation Guide 69 ● EN 55024:1998/A1:2 001/A2:2003 (IEC 61000-4-2:199 5/A2:2000, IEC 61000-4-3:2002, IEC 61000-4- 4:2004, IEC 61000-4-5:19 95/A1:2000, IEC 61000-4-6:19 96/A1:2000, IEC 61000-4-8:199 3/A1:2000, IEC 61000-4-1 1: 1994/A1:2000) ● Australian Standard AS/NZS CISPR 22:2006 Class B FCC Information (USA) T[...]

Environmental and Regulatory Information 70 ETEP Installation Guide 12 Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada. 13 Los cables de la fuente de poder deben ser guiados de tal manera que no sean pisados ni pellizcados por objetos colocados sobre o co ntra ellos, poniendo particular [...]

ETEP Installation Guide 71 Index A alarm LED ET0010A, 12 ET0100A, 15 ET1000A, 17 autoneg command, 50 B battery replacement, 24 booting the applian ce ET0010A, 34 ET0100A, 38 ET1000A, 43 C cables connecting the cables ET0010A, 33 ET0100A, 37 ET1000A, 42 pinouts, 59 requirements ET0010A, 27 ET0100A, 35 ET1000A, 40 command line interface logging in, 4[...]

Index 72 ETEP Installation Guide ET0010A applying power, 34 connecting the cables, 33 rack mounting , 28 table top installation, 31 unpacking the sh ipping carton, 27 ET0100A applying power, 38 connecting the cables, 37 rack mounting , 25 unpacking the sh ipping carton, 36 ET1000A applying power, 43 cabling requirements, 40 connecting the cables, 4[...]

ETEP Installation Guide 73 Index ET1000A, 22 status LEDs ET0010A self -tests, 63 ET0100A/ET1000A self- tests, 64 T tamper-evident seal, 55 technical support, 7 throughput lice nse See also license entering, 52 licensed ETEP speeds, 52 traffic status LED ET0010A, 12 ET0100A, 15 ET1000A, 17 troubleshooting diagnostic code display ET0010A, 63 ET0100A/[...]

Index 74 ETEP Installation Guide[...]

72 4 - 7 4 6 -5 500 | blackbo x.c om About Bl ack Bo x Bl ac k Box Networ k Servic es i s yo ur so ur ce f or mo re t han 1 1 8, 00 0 ne twor ki ng an d in fr ast ruct ur e pr odu c ts. Y ou ’l l fi nd ev erythi ng from cabinet s and racks and power and surge pro tec tion produc ts to media con ver ters and Ethernet sw it ches all suppor ted by f[...]