Ipsec Vpn Acceleration Services Module (Ws-Svc-Ipsec-1) - Cisco Catalyst 6500 Series Installation Manual

IPSec VPN Acceleration Services Module (WS-SVC-IPSEC-1)

IPSec VPN Acceleration Services Module
(WS-SVC-IPSEC-1)
Note
Note
Figure 1-44 IPSec VPN Acceleration Services Module (WS-SVC-IPSEC-1)
STATUS LED
WS-SVC-IPSEC-1
IPSec VPN Acceleration Services Module
Note
Catalyst 6500 Series Switch Module Installation Guide
1-66
The IPSec VPN Acceleration Services module is a Gigabit Ethernet IPSec
cryptographic module that you can install in the Catalyst 6500 series switches.
(See Figure 1-44.) The VPN module provides bump-in-the-wire (BITW) IPSec
implementation using VLANs.
BITW is an IPSec implementation that starts egress packet processing after the IP
stack has finished with the packet, and completes ingress packet processing before
the IP stack receives the packet.
Specific combinations of supervisor engines and modules may not be supported
in your chassis. Refer to the release notes of the software version running on your
system for specific information on modules and supervisor engine combinations
that are not supported.
Configuring VPNs using the VPN module is similar to configuring VPNs on
routers running Cisco IOS software. When you configure VPNs with the VPN
module, you attach crypto maps to VLANs (using interface VLANs); when you
configure VPNs on routers running Cisco IOS software, you configure individual
interfaces.
With the VPN module, crypto maps are still attached to individual interfaces,
but the set of interfaces allowed is restricted to "interface VLANs."
Chapter 1 Product Overview
78-15725-02