Layer 2 Ethernet Encrypter - LLEA


Link Layer 2 Encryption Performance Above 500 Mbps Using Gigabit Ethernet Interfaces
Contains FIPS 140-2 Level 1 Validated Encryption Module



High Performance Layer Two Encrypter

  • 128, 192, or 256 bit AES encryption available
  • Throughput at rates above 500 Mbps @ AES-128
  • FIPS 140-2 Level 1 validated encryption module
  • 1000BaseT encryption for 10/100/1000BaseT ethernet ports
  • Easy configuration or Plug and Play layer 2 security
  • Installs in pairs for point-to-point drop in use
  • Extensive statistics logging and diagnostic tools
  • Tunnels ALL ethernet protocols
  • Tunnels multicast traffic
  • 802.1Q encryption - Tunnels 802.1Q tagged V-Lan trunksvia non-802.1Q links
  • Inter-site VLAN encryption, VLAN encrypted link
  • Ethernet to ethernet encryption for layer 2 security
  • Links LAN to LAN to bridge sites together
  • Use to encrypt high speed microwave links
  • Layer 2 Raw ethernet transport between units
  • Layer 2 FIPS 140-2 validated product
  • Compact 1U high: standalone or rack-mount
Layer Two Encrypter

Features
Description
Specifications How To Order

General
Indicators (front panel)
Controls
Physical/Electrical

Read the Quick Start Guide
Application Notes & Manual
How to Order


Layer Two Encrytper
High Performance Layer Two Encrypter

LLEA


DESCRIPTION

LLEA provides layer 2 security by allowing two layer-2 network segments to be securely bridged across an insecure network segment at high speed as a layer 2 tunnel. They are used in pairs to create a point-to-point layer 2 tunnel between the two layer-2 segments. Network traffic that traverses the the insecure network segment is protected against eavesdropping and tampering by the layer 2 tunnel. In addition, the LLEA devices protect the network segments from malicious packet injection with layer 2 encryption and authentication.

AES encryption and HMAC-SHA1 for data integrity are used in the LLEA. The Diffie-Hellman algorithm is used for session key establishment. Encryption keys are changed every 6-hours or 2 billion packet, whichever comes first. All cryptographic operations are provided by an embedded FIPS 140-2 Level 1 validated cryptographic module.

The original Ethernet packets are completely encapsulates by LLEA for transport across the insecure network segment. To minimize the overhead of encapsulation and encryption, the LLEA will coalesce packets where possible for high performance on gigabit ethernet encryption links. This reduces the number of small packets that traverse the insecure network often improving the throughput of a slower network link.

This link layer encrypter can transport both standard Ethernet packets and 802.1q tagged VLAN packets. Since packets are encapsulated when transported across the insecure network segment, this has the effect of tunneling 802.1q across a network segment that may not support it while providing 802.1q encryption. Inter-site VLAN encryption has a side benefect... the packets that traverse the insecure network segment will always appear as standard Ethernet packets.

LLEA requires very little configuration. In fact, it is possible to deploy a pair with no configuration at all. Just place them in-line and turn them on. Typical configuration consists of setting an IP address, a shared secret, and selecting the encryption level. Configuration is web based with a click-for-help hyperlink on every configuration item.

This is a layer 2 FIPS 140-2 compliant product using a validated encryption module. Due to the encryption employed in these products, they are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. They may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are shippable to most other countries with proper licensing. Please contact us if you are considering exporting these.


SPECIFICATIONS

General

  • Two Ethernet ports: 10/100/1000 BaseT interfaces
  • Sustained full duplex throughput of over 500 Mbps @ 128bit AES
  • Measured latentcy of 66.25 us for 74 byte Ethernet packets and 125 us for 1514 byte Ethernet packets.
  • Point to point via raw ethernet
  • Protocol Features AES 128, 192, 256 bit encryption
  • Web browser configuration and management from local trusted interface
  • Default IP address: 192.168.0.100
  • Tunnels multicast packets and all ethernet protocols
  • The LLEA uses an embedded FIPS 140-2 validated cryptographic module (Certificate #918) running on a Linux x86 platform per FIPS 140-2 Implementation Guidance section G.5 guidelines

    Indicators


    Controls

    Physical/Electrical

    Environmental


    Application Notes:


    Layer Two Encrypter

    Click here to download a copy of the manual.
    Download the Quick Start Guide



    How to Order

    Due to the nature of this product, it is not offered through our on-line store. Please phone us at 800-432-2638 or 217-897-6600 or see our contact page to discuss your encryption applicaions.

    Item Number DESCRIPTION Price  Each
    LLEA Ethernet Link Layer Two Encryptor with two 10/100/1000BaseT ports, 120 VAC power
    $ 8695

    img
    Data Comm for Business Inc.
    2949 County Road 1000 E
    Dewey, Il 61840
    Voice: 217-897-6600
    Toll Free: 800-4-DCB-NET
    Toll Free: 800-432-2638
    Email: Contact Page
    Web: www.dcbnet.com
    Fax: 217-897-1331
    All DCB web pages copyright ©1995--2017 Data Comm for Business, All rights reserved.
    EtherPath®, EtherSeries®, EtherPoll®, EtherBridge® and EtherModem® are Registered Trademarks of Data Comm for Business, Inc.