Comtech EF Data CDM-570 - Manual (Page 299)

CDM-570/570L Satellite Modem with Optional IP Module Revision 12
Ethernet IP Module - CLI and Telnet Operation MN/CDM570L.IOM
14–29
Selecting Per Route displays the following submenu page:
Header Compression, Payload Compression or 3xDES Encryption can be configured on a per
Route basis by selecting the route number.
DES key select <Choose [1-8] for [key1-key8] 0=Clear 9=Random Enter= Clear>:
The value of 0 [CLEAR] will force the IP Module to not encrypt any traffic destined for the
route.
The value of Key[1-8] will use the key specified in the 3xDES Encrypt/Decrypt Configuration
page to encrypt the traffic destined for the route.
The value of Random will cause the IP Module to randomly use any of the 8 TX Keys to encrypt
the traffic destined for the route.
3xDES Encryption:
Managed Switch Mode – By definition, there are no routes in Managed Switch
operation, so there is no way to assign different keys to traffic. When TX
3xDES encryption is enabled in Managed Switch Mode, all traffic (IP and non-
IP) is encrypted and TX Key1 is always used.
Router Mode – Different TX keys can be assigned to different routes and some
routes can be sent unencrypted [Clear]. If Random is selected, then all TX Keys
must be configured with different keys and the receiving IP modem must have
identical corresponding RX Keys. The IP Module will randomly utilize all 8 Keys
for encryption.