Cisco SA-VAM - VPN Acceleration Module Installation And Configuration Manual

Text of Cisco SA-VAM - VPN Acceleration Module User Guide:

• 2-5 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 2 Preparing for Installation Compliance with U.S. Export Laws and Regulations Regarding Encryption Compliance with U.S. Export Laws and Regulations Regarding Encryption This product performs encryption and is regulated for export by the U.S. government. Persons expor

• Cisco SA-VAM - VPN Acceleration Module, 1-10 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 1 Overview Slot Locations Figure 1-6 Cisco 7301 Slot Numbering 1 Latch 3 Slot guides 2 Port adapter (SA-VAM2+) 4 Ground for ESD wrist strap banana jack 80268 A LA R M RJ 4 5 E N L IN K T X R X G B IC G IG A B IT E T H E R N E T 0 /2 R J4 5 E N L IN K T X R X G B IC G IG A B IT E T H E R N E T 0 /0 R J4 5 E N L IN K T X R X G B IC G IG A B IT E TH ER N E T 0 / 1 C IS C O 7301 S L O T 1 C O N S O L E A U X C O M P A C T F L A S H S T A TU S 1 0 0 - 2 4 0 V , 2 A , 5 0 /6 0 H z 2 4 V = 9 A , 4 8 - 6 0 V = 5A 1 ENABLED R X C E L L S R X C A R R IE R R X A

• Cisco SA-VAM - VPN Acceleration Module, 4-20 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 4 Configuring the SA-VAM2+ Configuration Tasks Router# show crypto ipsec sa interface: Ethernet0 Crypto map tag: router-alice, local addr. 172.21.114.123 local ident (addr/mask/prot/port): (172.21.114.123/255.255.255.255/0/0) remote ident (addr/mask/prot/port): (172.21.114.67/255.255.255.255/0/0) current_peer: 172.21.114.67 PERMIT, flags={origin_is_acl,} #pkts encaps: 10, #pkts encrypt: 10, #pkts digest 10 #pkts decaps: 10, #pkts decrypt: 10,

• 4-12 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 4 Configuring the SA-VAM2+ Configuration Tasks Creating Dynamic Crypto Maps A dynamic crypto map entry is a crypto map entry with some parameters not configured.The missing parameters are later dynamically configured (as the result of an IPSec negotiation). Dynamic crypto maps a

• 3-7 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 3 Removing and Installing the SA-VAM2+ SA-VAM2+ Removal and Installation Step 1 Use an ESD wrist strap to ground yourself to the router. A banana jack ground is to the left of the power switch. Step 2 To remove a SA-VAM2+, use a Phillips screwdriver to turn the sc

• Cisco SA-VAM - VPN Acceleration Module, viii VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Preface Audience Audience The audience for this publication should be familiar with Cisco router hardware and cabling along with electronic circuitry and wiring practices. Experience as an electronic or electromechanical technician is recommended. Warnings Warning To prevent the system from overheating, do not operate it in an area that exceeds the maximum recommended ambient temperature of: 24°C (75°F). Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Warning IMPORTANT SAFETY INSTRUCTIONS This warn

• Cisco SA-VAM - VPN Acceleration Module, Contents v VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Defining a Transform Set 4 - 5 IPSec Protocols: AH and ESP 4 - 6 Selecting Appropriate Transforms 4 - 7 The Crypto Transform Configuration Mode 4 - 7 Changing Existing Transforms 4 - 7 Transform Example 4 - 8 Configuring IPSec 4 - 8 Ensuring That Access Lists Are Compatible with IPSec 4 - 8 Setting Global Lifetimes for IPSec Security Associations 4 - 8 Creating Crypto Access Lists 4 - 9 Creating Crypto Ma

• Cisco SA-VAM - VPN Acceleration Module, 3-6 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 3 Removing and Installing the SA-VAM2+ SA-VAM2+ Removal and Installation Step 6 Slide the new SA-VAM2+ into the port adapter slot until it is seated in the router midplane. Caution Do not allow the SA-VAM2+ components to come in contact with the system board or the SA-VAM2+ could be damaged. Step 7 After the SA-VAM2+ is properly seated, lock the SA-VAM2+ in place, as shown in Figure 3-4. Note If a retaining lever does not move to the locked position, the SA-VAM2+ is not comp

• Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide Product Number: SA-VAM2+(=) THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATE

• Cisco SA-VAM - VPN Acceleration Module, 4-9 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 4 Configuring the SA-VAM2+ Configuration Tasks Creating Crypto Access Lists Crypto access lists define which IP traffic will be protected by encryption. (These access lists are not the same as regular access lists, which determine what traffic to forward or block at an interface.) For example, access lists can be created to protect all IP traffic between Subnet A and Subnet Y or Telnet traffic between Host A and Host B. To create crypto access lis

• Cisco SA-VAM - VPN Acceleration Module, Index IN-3 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 software and hardware compatability ix, 2 - 2 standards supported 1 - 6 T This 2 - 1 tips, troubleshooting 4 - 24 tools and equipment, required 2 - 1 troubleshooting tips 4 - 24 V VAM features 1 - 4 handling 3 - 1 monitoring and maintaining 4 - 26 overview viii, 4 - 1 software requirements 2 - 2 VPN Acceleration Module (see VAM) 1 - 1 W warnings, safety 2 - 3

• Cisco SA-VAM - VPN Acceleration Module, xv VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Preface Obtaining Additional Publications and Information • Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL: http://www.cisco.com/ipj • Networking products offered by Cisco Systems, as well as customer support ser

• Cisco SA-VAM - VPN Acceleration Module, 1-8 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 1 Overview Cables, Connectors, and Pinouts The following conditions must be met before the enabled LED goes on: • The SA-VAM2+ is correctly connected to the backplane and receiving power. • The system bus recognizes the SA-VAM2+. If either of these conditions is not met, or if the router initialization fails for other reasons, the enabled LED does not go on. Port Adapter Jacket Card The Port Adapter Jacket Card has two LEDs, as shown in Figure 1-4. Table 1-3 lists the colors and functions of the LEDs. Figure 1-4 Port Adapter Jacket Card

• Cisco SA-VAM - VPN Acceleration Module, Contents iv VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 LEDs 1 - 7 SA-VAM2+ 1 - 7 Port Adapter Jacket Card 1 - 8 Cables, Connectors, and Pinouts 1 - 8 Slot Locations 1 - 9 Cisco 7200VXR Routers 1 - 9 Cisco 7301 Router 1 - 9 CHAPTER 2 Preparing for Installation 2 - 1 Required Tools and Equipment 2 - 1 Hardware and Software Requirements 2 - 1 Software Requirements 2 - 2 Hardware Requirements 2 - 2 Restrictions 2 - 3 Safety Guidelines 2 - 3 Safety Warnings and Guidelines 2 - 3 Electrical Equipment Guidelines 2 - 4 Preventing Electrostatic Discharge Damage 2 - 4 Compliance with U.S. Export Laws and Regulations R

• Cisco SA-VAM - VPN Acceleration Module, 1-7 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 1 Overview Online Insertion and Removal (OIR) Online Insertion and Removal (OIR) SA-VAM2+ Online insertion and removal (OIR) is supported on the SA-VAM2+. Before removing the SA-VAM2+, we recommend that you shut down the interface so that there is no traffic running through the SA-VAM2+ when it is removed. Removing a SA-VAM2+ while traffic is flowing through the ports can cause system disruption. Port Adapter Jacket Card OIR on the Port Adapter Jacket Card is not supported; however, the SA-VAM2+ within the Port Adapter Jacket Card doe

• Cisco SA-VAM - VPN Acceleration Module, 4-11 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 4 Configuring the SA-VAM2+ Configuration Tasks To create crypto map entries that will use IKE to establish the security associations, use the following commands starting in global configuration mode: Step 5 Router(config-crypto-m)# set session-key inbound ah spi hex-key-string and Router(config-crypto-m)# set session-key outbound ah spi hex-key-string Sets the AH Security Parameter Indexes (SPIs) and keys to a

• Cisco SA-VAM - VPN Acceleration Module, vii VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Preface This preface describes the objectives and organization of this document and explains how to find additional information on related products and services. This preface contains the following sections: • Revision History, page vii • Audience, page viii • Warnings, page viii • Objectives, page viii • Organization, page viii • Related Documentation, page ix • Obtaining Documentation, page x • Documentation Feedb

• Cisco SA-VAM - VPN Acceleration Module, xiii VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Preface Obtaining Technical Assistance Cisco Technical Support & Documentation Website The Cisco Technical Support & Documentation website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, at this URL: http://www.cisco.com/techsupport Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user

• Cisco SA-VAM - VPN Acceleration Module, 1-5 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 1 Overview Features Performance Table 1-2 lists the performance information for the SA-VAM2+. 3. To support 5000 tunnels, 512 MB of memory is required. 4. The Cisco 7200VXR with the NPE-G2 is only available with Cisco IOS software version 12.4(4)XD. Table 1-2 Performance for SA-VAM2+ Cisco Router Throughput 1 2 Description Cisco 7301 Up to 392 Mbps Cisco IOS release: c7301-jk9o3s-mz.123-10 2 7301/single SA-VAM2+, 1GB system memory 3DES/SHA, preshared with no IKE-keepalive configured Up to 396 Mbps Cisco IOS release: c7301-jk9o3s-mz.123-10 2 7301

• Cisco SA-VAM - VPN Acceleration Module, 3-5 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 3 Removing and Installing the SA-VAM2+ SA-VAM2+ Removal and Installation Figure 3-4 Placing the Port Adapter Lever in the Unlocked/Locked Position - Cisco 7206VXR Shown Step 4 Grasp the handle of the SA-VAM2+ and pull the SA-VAM2+ from the router. If you are removing a blank port adapter, pull it completely out of the chassis slot. Step 5 Carefully align the new SA-VAM2+ carrier between the up

• Cisco SA-VAM - VPN Acceleration Module, 4-2 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 4 Configuring the SA-VAM2+ Configuration Tasks Configuration Tasks On power up if the enabled LED is on, the SA-VAM2+ is fully functional and does not require any configuration commands. However, for the SA-VAM2+ to provide encryption services, you must complete the steps in the following sections: • Using the EXEC Command Interpreter, page 4-2 (required) • Enabling SA-VAM2+, page 4-3 (required) • Configuring an IKE Policy, page 4-3 (required) • Configuring a Transform Set, page

• Cisco SA-VAM - VPN Acceleration Module, CHAPTER 1-1 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 1 Overview This chapter describes the VPN Acceleration Module 2+ (SA-VAM2+) and contains the following sections: • Data Encryption Overview, page 1-1 • SA-VAM2+ Overview, page 1-3 • Features, page 1-4 • Supported Standards, MIBs, and RFCs, page 1-6 • Online Insertion and Removal (OIR), page 1-7 • LEDs, page 1-7 • Cables, Connectors, and Pinouts, page 1-8 • Slot Locations, page 1-9 Data Encryption Overview This section describes data encryption, including the

• Cisco SA-VAM - VPN Acceleration Module, 1-2 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 1 Overview Data Encryption Overview • IKE—Internet Key Exchange (IKE) is a hybrid security protocol that implements Oakley and Skeme key exchanges inside the Internet Security Association and Key Management Protocol (ISAKMP) framework. IKE can be used with IPSec and other protocols. IKE authenticates the IPSec peers, negotiates IPSec security associations, and establishes IPSec keys. IPSec can be configured with or without IKE. • CA—certification authority (CA) interoperability supports the IPSec standard, using Simple Certificate Enroll

• Cisco SA-VAM - VPN Acceleration Module, 4-5 VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide OL-5979-03 Chapter 4 Configuring the SA-VAM2+ Configuration Tasks Defining a Transform Set A transform set is a combination of security protocols and algorithms. During the IPSec security association negotiation, peers agree to use a specific transform set to protect a particular data flow. To define a transform set, use the following commands, starting in global configuration mode: Table 4-1shows allowed transform combinations for the AH and ES

• Cisco SA-VAM - VPN Acceleration Module, THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can r

Related Products and Documents (Other):

Comparable Devices:

Similar Resources:

• Siemens SINAMICS G120 (2 pages) Screening plate fitting PM240-2 PTM5,3.5 NmScreening plate fitting PM240-2abovebelowØ 6 mmMounting frame fixing holeFSCeeaaaaaadcbMounting frame fixing holeMounting frame fixing holeMounting frame fixing holeØ 6 mmaaaadFSA/FSBeecbIP20 UnitsFramesizeDimensions (mm)Distances(mm)1)FixingsDrill pattern(mm)HeightWidthDepthMax.depthwith C Uand OPAboveBelo …

• Chicco HOOK ON CHAIR QUICK ADJUST (20 pages) QUICK ADJUSTCADDYHOOK ON CHAIR6970561699• ISTRUZIONI D’USO• MODE D’EMPLOI• GEBRAUCHSANLEITUNG• INSTRUCTIONS FOR USE• INSTRUCCIONES DE USO• INSTRUÇÕES PARA A UTILIZAÇÃO• GEBRUIKSAANWIJZINGEN• ANVÄNDNINGSINSTRUKTIONER• NÁVOD K POUŽITÍ• INSTRUKCJE SPOSOBU UŻYCIA• ΟΔΗΓΙΕΣ ΧΡΗΣΗΣ• KULLANIM BİLGİLERİ� …

• Parkside PMFW 280 A2 (75 pages) IAN 77603 MULTI-PURPOSE TOOL PMFW 280 A2 MUL TIFUNKTIONSWERKZEUG Bedienungs- und Sicherheitshinweise Originalbetriebsanleitung M UL TI-PURPOSE TOOL Operation and Safety Notes Translation of original operation manual NARZĘDZIE WIELOFUNK CY JNE Wskazówki dotyczące obsługi i bezpieczeństwa Tłumaczenie oryginalnej instrukcji obsługi MU …

• Omron MK-S - 2 (12 pages) General-purpose Relays MK-S New Model 1General-purpose RelaysMK-S New ModelGeneral-purpose Relays Featuring Mechanical Indicator and Lockable Test Button• Built-in operation indicator (mechanical and LED), and new models with lockable test button.• Nameplate provided on models with lockable test button. • RoHS Compliant.• UL approval for most models. …

• ROSE DISPLAYS ANOCONNECTOR WITH ANOGOTCHA (2 pages) 35 Congress Street, Salem, MA 01970 Tel# 1- 800 631-9707 Fax# 1-800-560-2890e-mail:[email protected] for HangingStep 1Push one AnoConnector into one end of firstAnoGotcha rail. Be sure to start with single barbside of the AnoConnector going into rail first.Push in until it stops at the middle barb. Fig. 1Note: The AnoConnector can …

• Panamax MIW-SURGE (2 pages) L612-PFP REV. A IW-SURGE delivers safe, protected AC power to flat panel displays, ceiling mounted video projec-tors and powered sub-woofers. Discreetly hides behind electronic equipment for a neat, clean, code compliant and professional installation.MElegant, nickel plated steel faceplate with brushed metal finish.Signal Bay provides a wide …

Comments, Questions and Opinions: