Ipsec Services Modules Tests; Testipsecclearpkt; Testhapiechopkt - Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Software Configuration Manual

Appendix A Online Diagnostic Tests

IPSEC Services Modules Tests

These are the IPsec services modules tests:
•
•
•

TestIPSecClearPkt

The TestIPSecClearPkt test sends a packet through the switch fabric or bus from the supervisor engine
inband port through to the crypto engine. The packet is sent back without encryption from the crypto
engine to the supervisor engine in-band port. The packet is checked to verify that the encryption is not
done and that the packet data fields are reserved. The Layer 2 lookup drives the packet between the
supervisor in-band port and the crypto engine.
Table A-32
Attribute
Disruptive/Nondisruptive
Recommendation
Default
Release
Corrective action
Hardware support

TestHapiEchoPkt

The TestHapiEchoPkt test sends a Hapi Echo packet to the crypto engine using the control path. After
the Hapi Echo packet is sent to the crypto engine, it is echoed back from the crypto engine. The packet
is sent from the supervisor engine inband port to the crypto engine using index-direct and is sent back
using broadcast to a diagnostic VLAN.
Table A-33
Attribute
Disruptive/Nondisruptive
Recommendation
Default
Release
Corrective action
Hardware support
OL-11439-03
TestIPSecClearPkt, page A-19
TestHapiEchoPkt, page A-19
TestIPSecEncryptDecryptPkt, page A-20
TestIPSecClearPkt Test Attributes
TestHapiEchoPkt Test Attributes
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
Description
Nondisruptive.
Run this test on-demand.
This test runs by default during bootup or after a reset or OIR.
12.2(18)ZY.
None. See the system message guide for more information.
VPN service module.
Description
Disruptive.
Run this test on-demand. This test cannot be run from
on-demand CLI.
On.
12.2(18)ZY.
None. See the system message guide for more information.
VPN service module.
IPSEC Services Modules Tests
A-19