Using Ipsec; Ipsec Compatibility - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Using IPsec

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
The IPsec feature inserts new headers in existing packets (see
Note
section on page 45-3
Using IPsec
To use the IPsec feature, follow these steps:
Obtain the ENTERPRISE_PKG license to enable IPSEC for iSCSI to enable IPsec for FCIP. See
Step 1
Chapter 3, "Obtaining and Installing Licenses."
Configure IKE as described in the
Step 2
Note
This section contains the following topics:
•
•
•
•

IPsec Compatibility

IPsec features are compatible with the following Cisco MDS 9000 Family hardware:
•
•
•
IPsec features are compatible with the following fabric setup:
•
•
•
Cisco MDS 9000 Family CLI Configuration Guide
35-4
for more information).
The IPsec feature inserts new headers in existing packets (see the
Size" section on page 45-3
IPsec Compatibility, page 35-4
IPsec and IKE Terminology, page 35-5
Supported IPsec Transforms and Algorithms, page 35-6
Supported IKE Transforms and Algorithms, page 35-6
Cisco 14/2-port Multiprotocol Services (MPS-14/2) modules in Cisco MDS 9200 Switches or Cisco
MDS 9500 Directors
Cisco MDS 9216i Switch with the 14/2-port multiprotocol capability in the integrated supervisor
module. Refer to the Cisco MDS 9200 Series Hardware Installation Guide for more information on
the Cisco MDS 9216i Switch.
The IPsec feature is not supported on the management interface.
Two connected Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS
SAN-OS Release 2.0(1b) or later.
A Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release
2.0(1b) or later connected to any IPsec compliant device.
The following features are not supported in the Cisco SAN-OS implementation of the IPsec feature:
Authentication Header (AH).
–
Transport mode.
–
Security association bundling.
–
"Manually Configuring IPsec and IKE" section on page
for more information).
Chapter 35 Configuring IPsec Network Security
the"Configuring the MTU Frame Size"
"Configuring the MTU Frame
OL-16184-01, Cisco MDS SAN-OS Release 3.x
35-10.