Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual page 693

Chapter 30 Configuring IPsec Network Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Figure 30-6
12.12.1.11
Host 1
To configure IPsec for the iSCSI scenario shown in
Configure the ACLs in Switch MDS A.
Step 1
sw10.1.1.100# conf t
sw10.1.1.100(config)# ip access-list acl1 permit ip 10.10.1.0 0.0.0.255 12.12.1.0
0.0.0.255
Configure the transform set in Switch MDS A.
Step 2
sw10.1.1.100(config)# crypto transform-set domain ipsec tfs-01 esp-3des esp-md5-hmac
OL-6973-03, Cisco MDS SAN-OS Release 2.x
iSCSI with End-to-End IPsec
Subnet 12.12.1/24
12.12.1.10
Host 2
iPSEC
iPSEC
10.10.1.1
12.12.1.1
Router
iPSEC
12.12.1.50
Host 3
iPSEC
10.10.1.123
Figure 30-6, follow these steps:
Cisco MDS 9000 Family Configuration Guide
Sample iSCSI Configuration
MDS A
30-35