Esm/Vcpm/Vpm; Esms; Esm-Ande - H3C MSR Router Comware 5 Series Manual

ESM/VCPM/VPM

ESMs

Enhanced service module (ESM) is installed on a multi-service module (MSC). It supports IPsec and
hardware encryption/decryption and hashing operation by using hardware encryption expedites IP
packet encryption. Thus, the router can encrypt packets with high performance and reliability.
The encryption engine is optional. On a router installed with an encryption engine, the main control
board functions to route IP packets and implement encryption-enabled VPN, while the encryption
module functions to encrypt packets.
•

ESM-ANDE

•
ESM-SNDE
ESM-ANDE
Introduction
The advanced network data encryption engine (ANDE) supports IPsec and hardware expedited IP
data packet encryption, thus providing encryption with high performance and reliability.
Installed with an ESM-ANDE module, the main board of your router can implement VPN with
encryption provided by the ESM-ANDE module in addition to IP packet forwarding.
Interface specifications
Table 208 Interface specifications
Item
Protocol supported
Hardware algorithm
Interface LEDs
There is no LED on the ESM-ANDE module. Display of the status of the module is implemented
through the ESM interface LED on the main board of the router.
The following table describes the LEDs on the panel.
Description
IPsec
•
key algorithm (DES, 3DES, AES, QC5, Blowfish, Cast-128 and SkipJack)
•
Authentication algorithm (HMAC-MD5-96, HMAC-SHA-1-96)
153