Manuals / Cisco Systems / Computer Equipment / Network Cables

Cisco Systems C7200 manual Software Requirements, Hardware Requirements, Restrictions, Platform

Models: C7200

1 62

Download 62 pages 7.3 Kb

Page 26

Software Requirements

Chapter 2 Preparing for Installation

Hardware and Software Requirements

Software Requirements

Table 2-1lists the recommended minimum Cisco IOS software release required to use the VSA in supported router or switch platforms. Use the show version command to display the system software version that is currently loaded and running.

Table 2-1 VSA Software Requirements

Platform

Cisco 7204VXR Cisco 7206VXR

Recommended Minimum Cisco IOS Release

12.4(4)XD3 fc2

To check the minimum software requirements of Cisco IOS software with the hardware installed on your router, Cisco maintains the Software Advisor tool on Cisco.com. Registered Cisco Direct users can access the Software Advisor at: http://www.cisco.com/cgi-bin/Support/CompNav/Index.pl. This tool does not verify whether modules within a system are compatible, but it does provide the minimum Cisco IOS software requirements for individual hardware modules or components.

Note Access to this tool is limited to users with Cisco.com login accounts.

Hardware Requirements

The hardware required to ensure proper operation of the VSA is as follows:

•The VSA is compatible with the Cisco NPE-G2 processor on the Cisco 7204VXR or Cisco 7206VXR routers.

The Cisco NPE-G2 is the latest routing engine for the Cisco 7204VXR and 7206VXR, which provides the highest performance and scalability within the family of network processing engines (NPEs).

•ROMmon requirement—12.4(4r)XD5

•I/O FPGA requirement—0x25 (decimal 0.37)

•VSA FPGA requirement—0x13 (decimal 0.19)

Restrictions

The VSA has the following restrictions:

•VSA does not interoperate with other ISA or VAM/VAM2/VAM2+ crypto cards in the same router. The VAM/VAM2/VAM2+ crypto cards are disabled when the VSA is active in the Cisco 7200VXR series routers with the NPE-G2 processor.

•Only a single VSA card is supported on the Cisco 7200VXR series routers with the NPE-G2 processor.

Note Only Cisco 7200VXR series routers with the NPE-G2 processor are supported.

C7200 VSA (VPN Services Adapter) Installation and Configuration Guide

2-2	OL-9129-02

Image 26

Cisco Systems C7200 manual Software Requirements, Hardware Requirements, Restrictions, Platform

Contents

Cisco Systems, Inc 170 West Tasman Drive San Jose, CA C7200 VSA VPN Services Adapter Installation and Configuration GuideCorporate Headquarters 800 553-NETS Fax 408Turn the television or radio antenna until the interference stops C O N T E N T S FeaturesDefinitions of Service Request Severity PrefaceSafety Warnings The Crypto Transform Configuration Mode 4Configuration Tasks 4 Removing and Installing the VSARouter B Configuration Verifying the Configuration 4Router A Configuration Troubleshooting TipsOL-9129-02 ContentsC7200 VSA VPN Services Adapter Installation and Configuration Guide Warnings PrefaceAudience Audience, page Warnings, page Objectives, page Organization, pageConfiguring the VSA Preparing for InstallationRemoving and Installing the VSA ObjectivesCisco.com Related DocumentationObtaining Documentation Product Documentation DVD Documentation FeedbackCisco Product Security Overview Ordering DocumentationFor emergencies only - security-alert@cisco.com Reporting Security Problems in Cisco ProductsProduct Alerts and Field Notices http//tools.cisco.com/RPF/register/register.do Obtaining Technical AssistanceCisco Technical Support & Documentation Website Obtaining Additional Publications and Information Submitting a Service RequestDefinitions of Service Request Severity xiiiThe Cisco Product Quick Reference Guide is a handy, compact reference tool that includes brief product overviews, key features, sample part numbers, and abbreviated technical specifications for many Cisco products that are sold through channel partners. It is updated twice a year and includes the latest Cisco channel product offerings. To order and find out more about the Cisco Product Quick Reference Guide, go to this URL Overview Hardware Required, page Features, pageEnabling/Disabling the VSA, page LEDs, page Connectors, page Data Encryption OverviewVSA Overview Screws Feature FeaturesHardware Required Description/BenefitStandards Supported Standards, MIBs, and RFCsPerformance MIBsdisabled Disables the C7200 VSAEnables the C7200 VSA after it has been Enabling/Disabling the VSAno crypto engine slot accelerator 0 -See Table LEDsHw-module slot 0 shutdown -Not supported Cisco 7204VXR Router ConnectorsSlot Locations Cisco 7204VXR Router, page Cisco 7206VXR Router, pageFigure 1-4 Cisco 7204VXR Router - Front View C7200 VSA VPN Services Adapter Installation and Configuration GuideENABLED Chapter 1 Overview Slot LocationsC7200 VSA VPN Services Adapter Installation and Configuration Guide Cisco 7206VXR Router1-10 Figure 1-5 Cisco 7206VXR - Front ViewRequired Tools and Equipment Preparing for InstallationOnline Insertion and Removal OIR, page Safety Guidelines, page Hardware and Software RequirementsRestrictions Software RequirementsHardware Requirements PlatformSafety Warnings, page Electrical Equipment Guidelines, page Safety GuidelinesSafety Warnings Online Insertion and Removal OIRElectrical Equipment Guidelines Preventing Electrostatic Discharge DamageCompliance with U.S. Export Laws and Regulations Regarding Encryption Compliance with U.S. Export Laws and Regulations Regarding EncryptionCompliance with U.S. Export Laws and Regulations Regarding Encryption Chapter 2 Preparing for InstallationC7200 VSA VPN Services Adapter Installation and Configuration Guide OL-9129-02Handling the VSA Removing and Installing the VSAWarnings and Cautions, page VSA Removal and Installation, page Handling the VSA, page Online Insertion and Removal OIR, pageThe safety cover is an integral part of the product. Do not operate the unit without the safety cover installed. Operating the unit without the cover in place will invalidate the safety approvals and pose a risk of fire and electrical hazards VSA Removal and InstallationWarnings and Cautions Online Insertion and Removal OIRStep 3 Unscrew the screws holding the VSA in the slot C7200 VSA VPN Services Adapter Installation and Configuration Guide Chapter 3 Removing and Installing the VSAVSA Removal and Installation OL-9129-02Overview, page Configuration Tasks, page Configuration Examples, page Configuring the VSAConfiguration Tasks Basic IPSec Configuration Illustration, pageVerifying IKE and IPSec Configurations, page 4-15 optional Using the EXEC Command InterpreterConfiguring an IKE Policy Configuring IPSec Configuration Example, page 4-18 optionalDefines an IKE policy and enters Internet Security Association VSA will be enabled after the next Configuring a Transform SetDisables VSA system rebootSelecting Appropriate Transforms The Crypto Transform Configuration Mode Changing Existing TransformsDefining a Transform Set Transform Exampleah-md5-hmac Authentication Transform is used, you mustESP Authentication Transform Pick up to ah-sha-hmacSelecting Appropriate Transforms The Crypto Transform Configuration ModeIPSec Protocols AH and ESP esp-aes and esp-sha-hmac ah-sha-hmac and esp-aes and esp-sha-hmacSetting Global Lifetimes for IPSec Security Associations Configuring IPSecEnsuring That Access Lists Are Compatible with IPSec Ensuring That Access Lists Are Compatible with IPSec requiredPurpose CommandStep Router# clear crypto sa spi destination-address4-10 Creating Crypto Access ListsCreating Crypto Map Entries Routerconfig# ip access-list extended nameesp spi cipher hex-key-string authenticator 4-11spi cipher hex-key-string authenticator Routerconfig-crypto-m# set session-key inbound ahCreates a dynamic crypto map entry This is the only configuration statement required inCreating Dynamic Crypto Maps Specifies which transform sets are allowed for thePurpose 4-13Command 4-14 Monitoring and Maintaining IPSecApplying Crypto Map Sets to Interfaces Displays your crypto map configuration Verifying IKE and IPSec ConfigurationsDisplays your transform set configuration Displays information about IPSec security associationsVerifying the Configuration 4-16C7200 VSA VPN Services Adapter Installation and Configuration Guide 4-17Chapter 4 Configuring the VSA Configuration Tasks OL-9129-02Configuring IPSec Configuration Example Configuration ExamplesConfiguring IKE Policies Example Configuring IKE Policies Example, page4-19 Basic IPSec Configuration IllustrationRouter A Configuration Router B Configuration 4-20Router# show diag Troubleshooting Tips4-21 Router# show crypto engine accelerator statisticC7200 VSA VPN Services Adapter Installation and Configuration Guide 4-22Chapter 4 Configuring the VSA Troubleshooting Tips Monitor and Maintenance Commands, page Using Deny Policies in Access ListsUsing Deny Policies in Access Lists, page Monitoring and Maintaining the VSADisplays integrated service adapter as part of the interfaces Monitor and Maintenance CommandsConfiguration Guidelines and Restrictions Verifies the VSA is currently processing crypto packetsI N D E IN-1definition IN-2creating 4 IN-3 Index IN-4C7200 VSA VPN Services Adapter Installation and Configuration Guide OL-9129-02