
Configuring IP Services
10-2 117356-A Rev. A
By default, RIPSO is disabled on IP interfaces. You can use Site Manager to
enable RIPSO on an IP interface, and specify
• A range of acceptable security levels for IP datagrams the interface receives
and transmits
• A set of required and allowed authority values for IP datagrams the interface
receives and transmits
• Whether inbound datagrams received on this interface require security labels
• Whether outbound datagrams transmitted on this interface (either forwarded
or originated by the router) require security labels
• Whether datagrams received or transmitted on this interface should have their
labels stripped
You also specify whether the router creates the following types of labels:
• An implicit label, which the router uses to label unlabeled inbound datagrams,
when required
• A default label, which the router uses to label unlabeled outbound datagrams,
when required
• An error label, which the router uses to label ICMP error messages associated
with processing security options
Comentarios a estos manuales