Cisco 7604 Configuration Manual page 974

IPSEC Services Modules Tests
IPSEC Services Modules Tests
The IPSEC Services Modules Tests include the following tests:
TestIPSecClearPkt, page A-32
TestHapiEchoPkt, page A-32
TestIPSecEncryptDecryptPkt, page A-33
TestIPSecClearPkt
The TestIPSecClearPkt test sends a packet through the switch fabric or bus from the supervisor engine
inband port through to the crypto engine. The packet is sent back without encryption from the crypto
engine to the supervisor engine in-band port. The packet is checked to verify that the encryption is not
done and that the packet data fields are reserved. The Layer 2 lookup drives the packet between the
supervisor in-band port and the crypto engine.
Table A-56
Attribute
Disruptive/Nondisruptive
Recommendation
Default
Release
Corrective action
Hardware support
TestHapiEchoPkt
The TestHapiEchoPkt test sends a Hapi Echo packet to the crypto engine using the control path. After
the Hapi Echo packet is sent to the crypto engine, it is echoed back from the crypto engine. The packet
is sent from the supervisor engine inband port to the crypto engine using index-direct and is sent back
using broadcast to a diagnostic VLAN.
Table A-57
Attribute
Disruptive/Nondisruptive
Recommendation
Default
Release
Corrective action
Hardware support
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
A-32
TestIPSecClearPkt Test Attributes
Description
Nondisruptive.
Run this test on-demand.
This test runs by default during bootup or after a reset or OIR.
12.2(18)SXE2.2.
None. See the system message guide for more information.
VPN service module.
TestHapiEchoPkt Test Attributes
Description
Disruptive.
Run this test on-demand. This test cannot be run from
on-demand CLI.
On.
12.2(18)SXE2.
None. See the system message guide for more information.
VPN service module.
Appendix A Online Diagnostic Tests
OL-4266-08