User's Manual

Configuring GRE, NAT, RIPSO, and BFE Services
3-8
308625-14.00 Rev 00
Specifying the Outbound Datagram Type Requiring Security
Labels
Use Site Manager to specify the type of outbound datagrams that require IP
security labels. Options are:
• None. The router forwards unlabeled IP datagrams unchanged on this
interface. In addition, those IP datagrams that it originates and transmits do
not require labels.
• Forwarded. All IP datagrams that the router forwards on this interface (not
those it originates) must contain basic IP security options. If the datagram
already contains an IP security label, the router forwards the datagram
unchanged. If the datagram is unlabeled, the router adds the implicit or default
label to the datagram before forwarding it.
• Originated. The router specifies basic IP security options for all IP datagrams
that it originates and transmits on this interface. The router adds the default
label to IP datagrams that it originates and transmits on this interface.
• All. All datagrams (both those that the router forwards and those it originates)
on this interface must contain basic IP security options. RIPSO supplies the
implicit or default label for those datagrams that do not already contain one.
Site Manager Procedure
You do this System responds
1. In the Configuration Manager window,
choose
Protocols
.
The Protocols menu opens.
2. Choose
IP
. The IP menu opens.
3. Choose
Interfaces
. The IP Interface List window opens.
4. Click on the interface that you want to edit. Site Manager displays the parameter
values for that interface.
5. Set the
Require Out Security
parameter.
Click on
Help
or see the parameter
description on page A-26.
6. Click on
Apply
, and then click on
Done
. You return to the Configuration Manager
window.