1. Manuals
  2. Brands
  3. Blackbox Manuals
  4. Network Hardware
  5. EncrypTight ET0010A
  6. Installation manual

Blackbox EncrypTight ET0010A Installation Manual

Enforcement point
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
EncrypTight Enforcement Point (ETEP) Installation Guide, Version 2.3.x
EncrypT
ight Enforcement Point (ETEP) Installation Guide
The EncrypTight
Guide provides detailed information on how to
install and configure EncrypTight Enforcement
Points.
Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500)
Customer
FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746
Support
Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018
Information
Web site: www.blackbox.com • E-mail: info@blackbox.com
Enforcement Point Installation
™
BLACK BOX
ET0010A
ET0100A
ET1000A
ET10000A
®

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the EncrypTight ET0010A and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Blackbox EncrypTight ET0010A

Summary of Contents for Blackbox EncrypTight ET0010A

  • Page 1 Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500) Customer FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746 Support Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018 Information Web site: www.blackbox.com • E-mail: info@blackbox.com...

  • Page 3: Table Of Contents

    Table of Contents About This Document .......................7 Contacting Customer Support ....................8 Product Overview ........................9 ETEP Introduction ........................9 ET0005A Physical Description ....................10 ET0005A Indicators and Connectors ................10 ET0010A Physical Description ....................12 ET0010A-402 Physical Description ................12 Front Panel Connectors .....................12 Status Indicators ......................12 Rear Panel .........................13 ET0010A-602 Physical Description ................14 Front Panel Connectors .....................14...
  • Page 4 Installation ..........................37 Safety Guidelines ......................37 Software Requirements ....................37 ETEP Site Preparation ....................38 Firewall Ports ........................39 Installing the ET0005A ......................42 Cabling Requirements: ET0005A ...................42 Unpacking the Shipping Carton: ET0005A..............42 Installation Instructions: ET0005A .................43 Rack Mount Installation ....................43 Solid Surface Installation ..................44 Connecting the Cables: ET0005A ..................44 Powering On the ET0005A .....................45 Installing the ET0010A ......................45...
  • Page 5 Connecting the Cables: ET1000A ..................69 Powering on the ET1000A .....................69 Installing the ET10000A .......................70 Cabling Requirements: ET10000A .................71 Unpacking the Shipping Carton: ET10000A ..............72 Rack Mount Installation: ET10000A ................72 Connecting the Cables: ET10000A ................74 Powering on the ET10000A ...................74 Safety Guidelines ......................75 Power-Up Procedure ....................75 Shutting Down the ETEP ......................76 Initial Setup ..........................79...
  • Page 6 ET0005A Regulatory Information ..................100 Safety ........................100 Immunity ........................100 Emissions ........................100 FCC Information (USA) ...................100 Interference-Causing Equipment Standard Compliance Notice (Canada) ....100 European Notice .......................101 ET0010A Regulatory Information ..................101 Safety ........................101 Immunity ........................101 Emissions ........................101 FCC Information (USA) ...................101 Interference-Causing Equipment Standard Compliance Notice (Canada) ....101 European Notice .......................102 ET0100A Regulatory Information ..................102 Safety ........................102...

  • Page 7: About This Document

    About This Document Purpose The ETEP Installation Guide describes how to cable and install the Black Box™ ETEP Enforcement Points. Intended audience This document is intended for use by network technicians and security administrators who are familiar with setting up and maintaining network equipment. Assumptions This document assumes that its readers have an understanding of the following: Basic principles of TCP/IP networking, including IP addressing, switching and routing.

  • Page 8: Contacting Customer Support

    Technical support services are accessible through the Black Box support center. US (toll free) 1-877-877-BBOX International outside U.S. call 724-746-5500 info@blackbox.com Email www.blackbox.com FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746 ETEP Installation Guide...

  • Page 9: Product Overview

    Product Overview ETEP Introduction The Black Box Enforcement Point (ETEP) Variable Speed Encryptors (VSEs) are purpose-built encryption appliances that provide multi-layer data protection. With straightforward setup and configuration, the ETEP has the flexibility to provide Ethernet frame encryption for Layer 2 networks, IP packet encryption for Layer 3 networks, and Layer 4 data payload encryption for MPLS networks.

  • Page 10: Et0005A Physical Description

    Product Overview The ETEP is managed in-line or out-of-band through a dedicated Ethernet management interface. The ETEP can be managed in two ways, depending on the size and complexity of your deployment: Command Line Interface (CLI) • The CLI is all you need to manage a standalone deployment, typically a pair of ETEPs. CLI commands are available to perform initial setup of the ETEP, along with diagnostic and troubleshooting commands.
  • Page 11 ET0005A Physical Description Figure 2 ET0005A Indicators and Connectors The ET0005A has five 10/100/1000 Mbit/s Gigabit Ethernet ports. The five Ethernet ports and the link indicators are depicted in Figure 2 above. Elements of Figure Power Connector Reset Switch (not used) Green bootloader LED Blue power LED DB9 RS232C asynchronous serial port (male)

  • Page 12: Et0010A Physical Description

    Product Overview ET0010A Physical Description The ET0010A can be licensed to run at the following speeds: 3 Mbps, 6 Mbps, 10 Mbps, 25 Mbps, and 50 Mbps. It is available in two form factors: Model 410-032-402 includes an Auxiliary Ethernet port on the front panel in addition to the Remote •...

  • Page 13: Rear Panel

    ET0010A Physical Description Figure 4 ET0010A Status Indicators Elements of Figure Power LED Alarm LED Status indicators Link indicators The following table describes how to interpret the ET0010A status indicators. Table 2 ET0010A Status Indicators Indicator Light State Indication Power (green) Unit is powered off.

  • Page 14: Et0010A-602 Physical Description

    Product Overview Figure 5 ET0010A Rear Panel and External Power Supply Elements of Figure External power supply power connector Rear panel power connector ET0010A Physical Description The ET0010A is a rack-mountable encryptor that can run at speeds ranging from 3-50 Mbps. It has two data ports on the front panel labeled Remote and Local.

  • Page 15: Rear Panel

    ET0010A Physical Description Figure 7 ET0010A Status Indicators Elements of Figure Power LED Alarm LED Status indicators Link indicators The following table describes how to interpret the ET0010A status indicators. Table 3 ET0010A Status Indicators Indicator Light State Indication Power (green) Unit is powered off.

  • Page 16: Et0100A Physical Description

    Product Overview Figure 8 ET0010A Rear Panel and External Power Supply Elements of Figure Rear panel power connector External power supply power connector ET0100A Physical Description The ET0100A is a rack-mountable encryptor that can run at speeds ranging from 100–250 Mbps. The following sections describe the connectors and LED indicators that appear on the front and rear panels of the ET0100A.

  • Page 17: Led Indicators

    ET0100A Physical Description LED Indicators The ET0100A LED indictors are shown in Figure 10. The LED indications are described in Table Figure 10 ET0100A LED Indicators Elements of Figure Diagnostic display Alarm LED Link indicators Power indictor The following table describes how to interpret the LEDs on the ET0100A front panel. Table 4 ET0100A Front Panel LED Indicators Indicator Light...

  • Page 18: Et0100A Physical Description

    Product Overview Figure 11 ET0100A Rear Panel Elements of Figure Power receptacle Product ID label ET0100A Physical Description The ET0100A is a rack-mountable encryptor that can run at speeds ranging from 500 Mbps–1 Gbps. The following sections describe the ET0100A connectors and LED indicators. Front Panel Connectors The ET0100A front panel connectors are shown in Figure...

  • Page 19: Led Indicators

    ET0100A Physical Description LED Indicators The ET0100A LED indicators are shown in Figure 13. The LEDs are described in Table Figure 13 ET0100A LED Indicators Elements of Figure Power LED Alarm LED Diagnostic display Link indicators: Ethernet management port Link indicators: Aux1, Remote and Local ports Table 5 describes how to interpret the LEDs on the ET0100A front panel.

  • Page 20: Rear Panel

    Product Overview Rear Panel The ET0100A rear panel is shown in Figure Figure 14 ET0100A Rear Panel Elements of Figure Power receptacle Product ID label ET1000A Physical Description The ET1000A is a rack-mountable 1 Gbps encryptor with dual power supplies. It can operate at speeds ranging from 500 Mbps–1 Gbps.

  • Page 21: Led Indicators

    ET1000A Physical Description Elements of Figure Aux1 port (not enabled in this release) Remote port (encrypted traffic) Local port (clear traffic) LED Indicators The ET1000A LED indicators are shown in Figure 16. The LEDs are described in Table Figure 16 ET1000A LED Indicators Elements of Figure...

  • Page 22: Rear Panel

    Product Overview Table 6 ET1000A Front Panel LED Indicators Indicator Light State Indication 10/100 link status (green) Loss of signal on the 10/100 link. The 10/100 link is up but no traffic is passing over the interface. Blinking Indicates the presence of traffic on the 10/100 link. Gigabit link status (green) Loss of signal on the Gigabit link.

  • Page 23: Et1000A Physical Description

    ET1000A Physical Description Elements of Figure Release lever for power supply 1 Power supply 1 receptacle ET1000A Physical Description The ET1000A is a rack-mountable 1 Gbps encryptor. It can operate at speeds ranging from 500 Mbps–1 Gbps. The following sections describe the ET1000A connectors and LED indicators. Front Panel Connectors The ET1000A front panel connectors are shown in Figure...

  • Page 24: Led Indicators

    Product Overview LED Indicators The ET1000A LED indicators are shown in Figure 19. The LEDs are described in Table Figure 19 ET1000A LED Indicators Elements of Figure Power LED Alarm LED Diagnostic display Link indicators: 10/100 Ethernet management port Link indicators: Gigabit management port Link indicators: Aux1, Remote and Local ports Table 7 describes how to interpret the LEDs on the ET1000A front panel.

  • Page 25: Rear Panel

    ET10000A Physical Description Rear Panel The ET1000A rear panel is shown in Figure Figure 20 ET1000A Rear Panel Elements of Figure Power receptacle Product ID label ET10000A Physical Description The ET10000A is a rack-mountable 10 Gbps encryptor with dual power supplies. It can operate at speeds ranging from 2.5–10 Gbps.

  • Page 26: Led Indicators

    Product Overview Elements of Figure Remote port (encrypted traffic) Local port (clear traffic) LED Indicators The ET10000A LED indicators are shown in Figure 22. The LEDs are described in Table Figure 22 ET1000A LED Indicators Elements of Figure Alarm LED Power LED Diagnostic display Link indicators: 10/100 Ethernet management port...

  • Page 27: Rear Panel

    ET10000A Physical Description Table 8 ET10000A Front Panel LED Indicators: Indicator Light State Indication Diagnostic code display Displays diagnostic codes during boot up. After boot up, it reflects the operational state of the appliance and error conditions. 10/100 link status (green) Loss of signal on the 10/100 link.

  • Page 28: Features

    Product Overview Elements of Figure Status LED for power supply 1. Green indicates normal operation. Red indicates a power fail state. Features ETEPs share many of the same features and capabilities across hardware models, as shown in Table Hardware differences between the ETEP models are summarized in Table Table 9 ETEP Hardware Comparison...

  • Page 29: Specifications

    Specifications Table 10 ETEP Feature Summary Category Feature Encryption Support • Advanced Encryption Standard (AES): FIPS 197 (256 bit keys) • 3DES: ANSI X9.52 (168 bit keys), standard CBC mode • User-configurable for Layer 2 Ethernet or Layer 3 IP encryption, with option to encrypt only the Layer 4 payload Authentication Methods •...
  • Page 30 Product Overview ET0100A specifications are listed in Table 14 • ET1000A and ET1000A specifications are listed in Table 15 • ET10000A specifications are listed in Table 16 • Table 11 ET0005A Mechanical and Environmental Specifications Category Specification Interfaces • Four 10/100/1000 RJ45 locally switched network interfaces to the local (trusted) network •...
  • Page 31 Specifications Table 12 ET0010A Mechanical and Environmental Specifications Category Specification ET0010A 19 inch rack mount design Electrical/Mechanical Dimensions 1u tamper evident chassis Dimensions: 1.6” H x 8.0” W x 5.8” D Weight (without external power supply),1 pound 4 ounces External power supply: •...
  • Page 32 Product Overview Table 13 ET0100A Mechanical and Environmental Specifications Category Specification Electrical/Mechanical 19 inch rack mount design Dimensions 1U tamper evident chassis Dimensions: 1.75” H x 17” W x 10” D Weight: 6 pounds 100-240 VAC @ 4 amps, 50/60 Hz, auto-sensing Nominal input current: 1.0A Nominal power dissipation: 65 watts Thermal power: In-rush 380 BTU/hour, steady state 140 BTU/hour...
  • Page 33 Specifications Table 15 ET1000A / ET1000A Mechanical and Environmental Specifications Category Specification Interfaces (2) Gigabit Ethernet ports for encrypting and decrypting traffic (single mode, multimode, or copper) 10/100 Mbps auto-sensing Ethernet LAN port for management RS-232C port for management (1) Auxiliary Gigabit port for data traffic (not enabled) (1) Gigabit Ethernet port for management (not enabled) ET1000A 19 inch rack mount design...

  • Page 34: Mib Support

    Product Overview Table 16 ET10000A Mechanical and Environmental Specifications Category Specification Interfaces (2) 10 Gigabit Ethernet ports for encrypting and decrypting traffic (single mode, multimode, or copper) 10/100 Mbps auto-sensing Ethernet LAN port for management RS-232C port for management (3) Auxiliary Gigabit LAN ports (not enabled) (3) Auxiliary 10/100 Ethernet LAN ports (not enabled) (1) Gigabit Ethernet port for management (not enabled) (1) USB port for management (not enabled)
  • Page 35 MIB Support Table 17 ETEP MIBs Module Filename BLACKBOX-SMI BLACKBOX-SMI.txt BLACKBOX-CRYPTO-MIB BLACKBOX-CRYPTO-MIB.txt SNMPv2-CONF SNMPv2-CONF.txt SNMPv2-MIB SNMPv2-MIB.txt SNMPv2-SMI SNMPv2-SMI.txt SNMPv2-TC SNMPv2-TC.txt ETEP Installation Guide...
  • Page 36 Product Overview ETEP Installation Guide...

  • Page 37: Installation

    Installation Safety Guidelines The ETEP does not contain any field-replaceable internal parts. Do not remove the unit’s cover for any reason. The cover is to be removed only by authorized Black Box service personnel. Authorized service personnel should review the following safety information prior to performing service or maintenance procedures on the ETEP.

  • Page 38: Etep Site Preparation

    Installation If you are using EncrypTight Manager to manage your ETEPs, you will need to install the EncrypTight Manager software on the management station to configure the ETEPs for network operation and to create and deploy policies. See the EncrypTight Manager User Guide for more information about using ETEPs with the EncrypTight Manager system.

  • Page 39: Firewall Ports

    Grounding • Maintain reliable grounding of a rack-mounted ETEP. Pay particular attention to supply connections other than direct connections to the branch circuit, such as the use of power strips. Maintenance • Allow at least 19 inches (48.3 cm) of clearance at the front of the rack for maintenance. Use a cable- management system to help keep cables organized, out of the way, and free from kinks or bends that degrade cable performance.
  • Page 40 Installation Table 20 ETEP Inbound Communication Protocol Network Application Protocol Port Port Protocol Src IP Purpose 8443 HTTPS Every ETM management calls ETM Host to the ETEP (2.3) Peer L2 Used for IKE for Point to ETEP Point L2 IKE policies SNMP SNMP SNMP management...
  • Page 41 Table 22 ETM Inbound Communication Protocol Network Application Protocol Port Port Protocol Src IP Purpose ICMP ICMP receiving ping requests SSH access to ETM All ETEPs NTP requests when ETM acts as the NTP server Syslog All ETEPs Syslog publications when ETM acts as the Syslog server All ETEPs...

  • Page 42: Installing The Et0005A

    Installation Installing the ET0005A This section describes how to install ET0005A. To prepare the ET0005A for installation, review the installation steps in Table 23, unpack the shipping carton, and prepare a space for the installation of the appliance. The steps to perform for a typical installation are listed below. Table 23 Installation Steps ET0005A Step...

  • Page 43: Installation Instructions: Et0005A

    Installing the ET0005A 1 ET0005A chassis Firmware and software is factory-installed on the unit. • 2 Accessory Kit (1) Power supply • (1) Shielded null modem cable with a DB-9 female connector at each end. • (1) Unshielded Category 5 straight through cable (UTP) with RJ-45 connectors •...

  • Page 44: Solid Surface Installation

    Installation Figure 24 Single Unit Mounting Bracket Figure 25 Dual Unit Mounting Bracket Solid Surface Installation When installing the ET0005A on a solid surface, have the following tools and materials available to attach the rubber feet to the bottom of the unit: External power supply •...

  • Page 45: Powering On The Et0005A

    Installing the ET0005A Figure 26 ET0005A Cabling Powering On the ET0005A Use the following procedure to power up the ET0005A. To power on the ET0005A: 1 Check that the power supply cable is properly inserted in the power connector on the ET0005A side panel.

  • Page 46: Cabling Requirements: Et0010A

    Installation The steps to perform for a typical installation are listed below. Table 25 Installation Steps Step Action to Perform Description Review the cabling requirements. on page 46 Unpack the shipping package. on page 44 Install the ETEP in a rack or on a solid surface. on page 47 Connect the cables.

  • Page 47: Installation Instructions: Et0010A

    Installing the ET0005A (1) Power cable (US) • (1) Power supply • (1) Shielded null modem cable with an RJ-45 connector at one end and a DB-9 female connector • at the opposite end. (1) Unshielded Category 5 straight through cable (UTP) with RJ-45 connectors •...
  • Page 48 Installation (4) small black screws and (4) large #10-32 screws, supplied in the Accessory Kit • #1 Phillips and #2 Phillips screwdrivers (user-supplied) • To install the ETEP in a rack: 1 Place the unit on a solid surface, with the bottom panel facing up. When looking at the ET0010A from the bottom rear, the bracket that holds the power supply is on the right, as shown in Figure...
  • Page 49 Installing the ET0005A 3 Turn the ETEP face up and locate the external power supply. With the label side facing down, place the power supply in the mounting bracket cradle and snap it into place, as shown in Figure Figure 30 Power supply installed in mounting bracket cradle on the ET0010A 4 Connect the power supply cable to the rear panel connector.

  • Page 50: Solid Surface Installation

    Installation Solid Surface Installation When installing the ET0010A on a solid surface, have the following tools and materials available to attach the rubber feet to the bottom of the unit: External power supply • (4) rubber feet, supplied in the Accessory Kit (item 3 in Figure 27).

  • Page 51: Connecting The Cables: Et0010A

    Installing the ET0005A 4 Repeat step 3 for the remaining feet. 5 Turn the unit over so that it is resting on the rubber feet. 6 Attach the external power supply to the power connector on the rear panel. Figure 35 shows the ET0010A rear panel and power supply.

  • Page 52: Powering On The Et0010A

    Installation Figure 36 ET0010A Cabling NOTE The Aux1 port on the ET0010A is not enabled in this release. Powering On the ET0010A Use the following procedure to power up the ETEP. Figure 37 Attaching the power cables on the ET0010A To power on the ETEP: 1 Check that the power supply cable is properly inserted in the power connector on the ETEP rear panel.

  • Page 53: Installing The Et0100A

    Installing the ET0100A During the boot process the ETEP cycles through its startup tests, and the corresponding status LEDs are illuminated (see “Status Codes: ET0010A”. After the tests execute successfully, the status indicators turn off. NOTE During the boot process the ETEP discards all traffic on its data ports. Once the appliance is operational, the default mode of operation passes all packets in the clear until you deploy security policies.

  • Page 54: Unpacking The Shipping Carton: Et0100A

    Installation connector type required for the other end of the cable. Some cables are supplied by Black Box and others are user-supplied. Table 28 ET0100A Standard Cables ET0100A Port Cabling Supplied by... Power receptacle Power supply cable certified Black Box and approved for use in the country of interest RS-232 Port...

  • Page 55: Connecting The Cables: Et0100A

    Installing the ET0100A Two mounting brackets, supplied in the Accessory Kit • (6) small screws and (4) large screws, supplied in the Accessory Kit • #1 Phillips and #2 Phillips screwdrivers (user-supplied) • To install the ETEP in a rack: 1 Attach a mounting bracket to each side of the ETEP (near the front panel).

  • Page 56: Powering On The Et0100A

    Installation Figure 39 ET0100A Cabling Powering on the ET0100A Use the following procedure to power up the ET0100A. To power on the ET0100A: On the appliance’s rear panel, plug the power cord into the ET0100A power receptacle. Attach the • opposite end to a power source to apply power to the appliance.

  • Page 57: Installing The Et0100A

    Installing the ET0100A When the appliance powers up, all LEDs illuminate (see Figure 42). The Alarm LED illuminates briefly and the diagnostic code LED displays 88 to verify that the diagnostic display segments are functioning. The power LED remains lit until the unit is powered off. During the boot process the ET0100A cycles through its startup tests, and the corresponding diagnostic codes are displayed (see “Diagnostic Codes: ET0100A Models”.

  • Page 58: Cabling Requirements: Et0100A

    Installation Cabling Requirements: ET0100A Table 30 outlines the standard cables used with each port on the ET0100A. The connector type listed indicates only what is required to connect to the ET0100A port, and may or may not be the same connector type required for the other end of the cable.

  • Page 59: Connecting The Cables: Et0100A

    Installing the ET0100A For step-by-step instructions on how to rack mount the ET0100A, see “Rack-Mount Installation: • ET0100A” on page Connecting the Cables: ET0100A Follow the instructions below to connect the ET0100A to the appropriate network devices (see Figure 43). To cable the ET0100A: 1 For initial setup, connect the RS-232 port directly to a PC or workstation using a DB-9 null modem cable.

  • Page 60: Installing The Et1000A

    Installation When the appliance powers up, all LEDs illuminate (see Figure 53). The Alarm LED illuminates briefly and the diagnostic code LED displays 88 to verify that the diagnostic display segments are functioning. The power remains lit until the unit is powered off. During the boot process the ET0100A cycles through its startup tests, and the corresponding diagnostic codes are displayed (see “Diagnostic Codes: ET0100A Models”).

  • Page 61: Cabling Requirements: Et1000A

    Installing the ET1000A Cabling Requirements: ET1000A Table 32 outlines the standard cables used with each port on the ET1000A. The connector type listed indicates only what is required to connect to the ET1000A port, and may or may not be the same connector type required for the other end of the cable.

  • Page 62: Rack Mount Installation: Et1000A

    Installation The ET1000A is packaged with the standard items listed below. Additional cables, country-specific power cords, SFPs, and other accessories can be ordered separately. A list of approved transceivers is included in the ETEP Release Note. 1 ET1000A chassis Firmware and software is factory-installed on the unit. •...

  • Page 63: Grounding Of Dc Power Supply: Et1000A

    Installing the ET1000A 2 Attach the mounting brackets to each side of the unit using the 8 small black screws provided in the accessory kit, and a #1 Phillips screwdriver, as shown in Figure Figure 46 Each bracket is attached to the side of the ET1000A using four screws 3 Attach the mounting brackets to the rack’s front support with the large #10-32 screws, using a #2 Phillips screwdriver.

  • Page 64: Connecting The Cables: Et1000A

    Installation WARNING 1 At first, before powering on, connect the frame of the switch to earth. 2 Proper earthing (connection to earth) is very important to protect the switch from the negative effects of external noise or to reduce the risk to the user of electrocution in the case of a lightning strike. 3 To uninstall, power off device and then disconnect the earthing wire.

  • Page 65: Powering On The Et1000A

    Installing the ET1000A Figure 48 ET1000A Cabling NOTE The Gigabit management and Aux1 ports are not enabled in this release. Powering on the ET1000A Review the following guidelines prior to powering up the ET1000A: The ET1000A has two power supplies. We recommend that you connect the power cords to separate •...
  • Page 66 Installation Power receptacle for power supply 2 Power receptacle for power supply 1 Status LED for power supply 1 To power on the ET1000A: 1 On the appliance’s rear panel, plug the power cords into the power receptacles for each power supply. 2 Attach the opposite end of the first power cord to a power source.

  • Page 67: Installing The Et1000A

    Installing the ET1000A Diagnostic display Power indicator Power supply LEDs Installing the ET1000A To prepare the ET1000A for installation, review the installation steps in Table 33, unpack the shipping carton, and prepare a space for the installation of the appliance. The steps to perform for a typical installation are listed below.

  • Page 68: Unpacking The Shipping Carton: Et1000A

    Installation Table 34 ET1000A Standard Cables ET1000A Port Cabling Supplied by... Local and Remote Gigabit • 1000Base-LX SFPs Available as accessory options Ethernet ports 9/125m single-mode duplex fiber or simplex fiber pair (1 • Optical SFP transceivers transmit, 1 receive), 1310 nm nominal wavelength, LC connector •...

  • Page 69: Connecting The Cables: Et1000A

    Installing the ET1000A Connecting the Cables: ET1000A Follow the instructions below to connect the ET1000A to the appropriate network devices (see Figure 52). To cable the ET1000A: 1 For initial setup, connect the RS-232 port directly to a PC or workstation using a DB-9 null modem cable.

  • Page 70: Installing The Et10000A

    Installation When the appliance powers up, all LEDs illuminate (see Figure 53). The Alarm LED illuminates briefly and the diagnostic code LED displays 88 to verify that the diagnostic display segments are functioning. The power LED remains lit until the unit is powered off. During the boot process the ET1000A cycles through its startup tests, and the corresponding diagnostic codes are displayed (see “Diagnostic Codes: ET0100A Models”).

  • Page 71: Cabling Requirements: Et10000A

    Installing the ET10000A Cabling Requirements: ET10000A Table 36 outlines the standard cables used with each port on the ET10000A. The connector type listed indicates only what is required to connect to the ET10000A port, and may or may not be the same connector type required for the other end of the cable.

  • Page 72: Unpacking The Shipping Carton: Et10000A

    Installation NOTE The polarity of the ET10000AET10000A DC power cable is indicated via color coding with Yellow being + (plus), Black being - (minus), and Green being (Ground) Unpacking the Shipping Carton: ET10000A Remove all product components from the shipping carton and compare the contents to the packing list. Keep all packaging in case it is necessary to return the unit.
  • Page 73 Installing the ET10000A 16 small black screws, and 4 large silver screws (#10-32), supplied in the Accessory Kit • #1 Phillips and #2 Phillips screwdrivers (user-supplied) • CAUTION In order to safely and securely and install the ET10000A in a rack, you must use the mounting rails supplied in the Accessory Kit.

  • Page 74: Connecting The Cables: Et10000A

    Installation Connecting the Cables: ET10000A Follow the instructions below to connect the ET10000A to the appropriate network devices (see Figure 57). To cable the ET10000A: 1 For initial setup, connect the RS-232 port directly to a PC or workstation. Using the null modem cable supplied by Black Box, insert the RJ-45 connector in the RS-232 port and connect the DB-9 female connector to your PC.

  • Page 75: Safety Guidelines

    Installing the ET10000A Safety Guidelines Review the following guidelines prior to powering up the ET10000A: The ET10000A has two power supplies. We recommend that you connect the power cords to separate • live circuits to provide redundancy in the case of a power outage on one of the circuits. When manually cycling the power, remove power on both circuits, wait five seconds, and then •...

  • Page 76: Shutting Down The Etep

    Installation NOTE During the boot process the ET10000A discards all traffic on its data ports. Once the appliance is operational, the default mode of operation passes all packets in the clear until you deploy security policies. Figure 59 ET10000A Front Panel Status Indicators Elements of Figure Alarm LED...
  • Page 77 Shutting Down the ETEP Example In the following example the user logs in as admin and shuts down the ETEP. pep login: admin Password: Last login: Tue Apr 8 15:12:21 2008 on ttyS0 Welcome admin it is Tue Apr 8 15:17:57 UTC 2008 admin>...
  • Page 78 Installation ETEP Installation Guide...

  • Page 79: Initial Setup

    Initial Setup Overview The following steps are required for initial setup of the ETEP: 1 Log in through a serial link. 2 Configure the management port. 3 Set the date and time. 4 Enter the throughput license. Logging In Through a Serial Link Initial setup is performed through a serial link to the RS-232 port.

  • Page 80: Configuring The Management Port

    Initial Setup 6 When you are successfully logged in, the command line prompt displays as shown below (password text is not displayed). pep login: admin Password: Last login: Tue Jan 29 19:18:59 2008 on ttyS0 Welcome admin it is Tue Jan 29 19:37:12 UTC 2008 admin>...
  • Page 81 Configuring the Management Port Figure 60 Management Port Default Gateway Elements of Figure ETEP Router Management workstation About auto-negotiation The default setting for the ETEP enables auto-negotiation, which negotiates the link speed, duplex setting, and flow control. Use the autoneg command if the device that the ETEP connects to from a particular port does not support auto-negotiation or flow control.
  • Page 82 Initial Setup To configure the management port: 1 At the command prompt, type configure to enter configuration mode. 2 At the prompt, type management-interface . config> 3 Assigning an IPv4 address to the management port is mandatory. To set the management port IPv4 address, mask, and gateway, type ip <ip address>...

  • Page 83: Setting The Date And Time

    Setting the Date and Time Table 39 Management port autoneg command description Attribute Description duplex [half/full] When auto-negotiation is disabled, the duplex attribute specifies the duplex setting. The duplex setting defaults to full. flow control [on | off] When auto-negotiation is disabled, this attribute configures the flow control setting to be on or off.

  • Page 84: Entering A Throughput License

    Initial Setup New Delhi, India: UTC+5:30; 17:30 • To set the date and time: 1 At the command prompt, type configure to enter configuration mode. 2 At the prompt, type date <year> <month> <day> <hour> <minutes> config> <seconds> year 2008-2037 month 01-12 01-31...

  • Page 85: Configuration Example

    Configuration Example If you upgrade from a command line-only installation to a full EncrypTight Manager deployment, you can no longer use the command line-only license and must acquire a license for EncrypTight Manager. To add a license from the command line: 1 At the command prompt, type configure to enter configuration mode.
  • Page 86 Initial Setup 1 Assign passwords 2 Configure the ETEP 3 Define security policies If you plan to operate the ETEP in FIPS mode, we recommend enabling FIPS mode as your first configuration task. Entering FIPS mode resets many configuration items, such as passwords, policies, and certificates.

  • Page 87: Maintenance

    Maintenance Preventative Maintenance Periodically perform maintenance on your ETEP. Keep components free of dust and other particulate matter. Examine cables for damage and ensure that airflow requirements have been met. On ETEP models that have fans, check the fans for reduced airflow caused by dust build-up and clean as necessary. No special maintenance is required.

  • Page 88: Obtaining A License For Replacement Units

    Maintenance Obtaining a License for Replacement Units When replacing the ETEP with a spare, the replacement ETEP will run at full throughput for a grace period. During the grace period, contact customer support to report the RMA unit and to receive a new license for the replacement.

  • Page 89: Replacing The Et10000A Power Supply

    What To Do If an Appliance Fails Figure 62 Release lever on power supply # 2 4 On the replacement power supply, press the release lever toward the metal support and insert the new power supply until it latches (Figure 63).
  • Page 90 Maintenance Figure 64 The power supply bracket is secured with two screws 3 Locate the release lever at the top of the power supply (Figure 65). Press the release lever downward toward the black support support to release the power supply latch. Figure 65 Press the release lever downward to unlatch the power supply 4 Keeping the lever in the release position, pull the power supply outward to remove it from the chassis.

  • Page 91: Tamper Switch And Zeroization

    Tamper Switch and Zeroization Figure 67 Correctly inserted and latched power supply is shown on the left. Note the position of the release levers. 6 Replace the power supply bracket (Figure 64). 7 Insert the power cord in the replacement power supply. 8 Reconnect power supplies 1 and 2 to their respective power sources.

  • Page 92: Cable Pinouts

    Maintenance To recover the ETEP following zeroization: Wait approximately 20 minutes for the zeroization process to complete. If you are connected to the ETEP through the serial port, you will see the following message: Power cycle required to reboot appliance After cycling the power, you will be able to configure and manage the ETEP from its factory default settings.

  • Page 93: Serial Cable: Et0100A Models

    Cable Pinouts RS-232 Serial Cable: ETEP100x Models The RS-232 serial cable on the ET0100A, ET0100A, ET1000A, and ET1000A is a null modem cable with DB-9 connectors (female to male). Figure 69 ETEP100x Null Modem Serial Cable Table 42 ETEP100x Null Modem Pin Connection 2 Receive Data 3 Transmit Data 3 Transmit Data...
  • Page 94 Maintenance NOTE The polarity of the ET10000A DC power cable is indicated via color coding with Yellow being + (plus), Black being - (minus), and Green being (Ground). ETEP Installation Guide...

  • Page 95: Troubleshooting

    Troubleshooting Symptoms and Solutions The following tables provide some solutions to common problems that may occur with your ETEP. LED Indicators Table 43 LED Indicators Symptom Explanation and Possible Solution No power light. • Make sure the power cable is attached and plugged in to both the device and the power outlet.

  • Page 96: Error State

    Troubleshooting Error State Table 44 Error State Symptoms and Solutions Symptom Explanation and Possible Solutions The Alarm LED is illuminated The ETEP enters an error state when a boot test fails, the operating temperature threshold is exceeded, signature errors are detected on critical files pertaining to policies and keys.

  • Page 97: Diagnostic Code Display

    Diagnostic Code Display Diagnostic Code Display ETEPs display self-test codes during boot up, in addition to operational status and error conditions. See the following sections for information about your appliance model. Status Codes: ET0010A The ET0010A status LEDs display self-test codes during boot up. After the ET0010A boots, the status LEDs reflect the operational state of the appliance.

  • Page 98: Diagnostic Codes: Et0100A Models

    Troubleshooting Table 46 ET0010A Operational Codes Code Description All status LEDs off Up and operational. 2, 3, 4 The ET0010A is in a shutdown state. Diagnostic Codes: ETEP100x Models The 7-segment diagnostic display on the front panel of the following models displays self-test codes during boot up: ET0100A, ET0100A, ET1000A, ET1000A, and ET10000A.

  • Page 99: Environmental And Regulatory Information

    Send all requests for recycling to info@blackbox.com. Black Box will arrange for pick up and transport to a recycling location that complies in an environmentally responsible manner with the EU WEEE Directive.

  • Page 100: Et0005A Regulatory Information

    Environmental and Regulatory Information ET0005A • ET0010A • ET0100A • ET0100A • ET1000A • ET1000A • ET10000A • ET0005A Regulatory Information The ET0005A (part number 410-032-402), and ET0010A-Desktop (part number 410-032-602), have received a statement of compliance for the items listed in the following sections: Application of Regulations: FCC Title 47, Part 15, Subpart B, EMC Directive 2004/108/EC •...

  • Page 101: European Notice

    Regulatory Information “Cet appareil numerique de la class A est conforme a la norme NMB-003 du Canada.” European Notice Products with the CE Marking comply with both the EMC Directive (2004/108/EC) and the Low Voltage Directive (2006/95/EC) issued by the Commission of the European Community. ET0010A Regulatory Information The ET0010A (part number 410-032-402), and ET0010A-Desktop (part number 410-032-602), have received a statement of compliance for the items listed in the following sections:...

  • Page 102: European Notice

    Environmental and Regulatory Information European Notice Products with the CE Marking comply with both the EMC Directive (2004/108/EC) and the Low Voltage Directive (2006/95/EC) issued by the Commission of the European Community. ET0100A Regulatory Information The ET0100A, part number 410-032-002, has received a statement of compliance for the items listed in the following sections.

  • Page 103: European Notice

    Regulatory Information European Notice Products with the CE Marking comply with both the EMC Directive (2004/108/EC) and the Low Voltage Directive (2006/95/EC) issued by the Commission of the European Community. ET0100A Cabling WARNING Use only shielded cables to connect I/O devices to this equipment. You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment.

  • Page 104: Interference-Causing Equipment Standard Compliance Notice (Canada)

    Environmental and Regulatory Information Interference-Causing Equipment Standard Compliance Notice (Canada) “The Class A digital apparatus complies with Canadian ICES-003.” “Cet appareil numerique de la class A est conforme a la norme NMB-003 du Canada.” European Notice Products with the CE Marking comply with the European Council Directive 2004/108/EC. ET1000A Regulatory Information The ET1000A, part number 410-032-103, has received statements of compliance for the items listed in the following sections:...

  • Page 105: Interference-Causing Equipment Standard Compliance Notice (Canada)

    Regulatory Information Interference-Causing Equipment Standard Compliance Notice (Canada) “The Class B digital apparatus complies with Canadian ICES-003.” “Cet appareil numerique de la class B est conforme a la norme NMB-003 du Canada.” European Notice Products with the CE Marking comply with the European Council Directive 2004/108/EC. ET10000A Regulatory Information The ET10000A, part number 410-032-702, has received statements of compliance for the items listed in the following sections:...

  • Page 106: 6 Etep Installation Guide

    Environmental and Regulatory Information ETEP Installation Guide...

  • Page 107: Index

    Index ET0005A 10 alarm LED ET0005A Cabling Requirements 40 ET0100A 11, 17 ET0005A Indicators and Connectors 10 ET1000A 24 ET0005A Installation 39, 41 ET1000A 21 command line interface ET0100A 19 logging in 79 ET0010A-402 13 Connecting the Cables ET0010A-602 15 ET0005A 42 ET10000A 26 Connecting the cables on the ET0005A 42...
  • Page 108 Index ET1000A applying power 43, 51 front panel connectors 20 connecting the cables 50 front panel LEDs 21 rack mounting 46 rear panel 22 table top installation 42, 48 ET0100A unpacking the shipping carton 40, 44 front panel connectors 18 ET0100A front panel LEDs 19 applying power 55...
  • Page 109 Index ET0100A indicator description 19 ET1000A 24 ET0010A-402 indicator description 13 ET1000A 21 ET0010A-602 indicator description 15 ET0100A 19 ET10000A indicator description 26 ET0010A-402 13 ET0005A indicator description 11 ET0010A0-602 15 troubleshooting 95 ET10000A 26 license power supply entering 84 replacing on the ET1000A 88 for replacement units 88 replacing on the ET10000A 89...
  • Page 110 Index ET10000A cables 71 power up codes safety guidelines 37 ET0010AE 97 software 37 ET0100A models 98 RoHS directive 99 unpacking the shipping carton safety guidelines 37 ET0010A 40, 44 self-tests ET0100AE 53 ET0010A 97 ET1000A0 69 ET0100A models 98 ET1000A 61 serial port, logging in to the CLI 79 ET0100A 57...
  • Page 112 Tech support the way it should be. Great tech support is just 30 seconds away at 724-746-5500 or blackbox.com. About Black Box Black Box Network Services is your source for an extensive range of networking and infrastructure products. You’ll find everything from cabinets and racks and power and surge protection products to media converters and Ethernet switches all supported by free, live 24/7 Tech support available in 30 seconds or less.

This manual is also suitable for:

Encryptight et0100aEncryptight et10000aEncryptight et1000a

Table of Contents